Viewing Monitoring Data in Kibana

Monitoring is automatically enabled when you install X-Pack into Elasticsearch, Logstash, and Kibana. By default, the monitoring agents on Elasticsearch index data within the same cluster.

If you have a dedicated monitoring cluster, the information is accessible even if the Elasticsearch cluster you’re monitoring is not. You can send data from multiple clusters to the same monitoring cluster and view them all through the same instance of Kibana. For more information, see

To view and analyze the health and performance of Elasticsearch, Logstash, and Kibana:

  1. Install X-Pack in Elasticsearch. If you want to use a separate monitoring cluster, see Monitoring in a Production Environment.
  2. Install X-Pack in Kibana and configure monitoring.
  3. Install X-Pack in Logstash and configure monitoring.
  4. Open Kibana in your web browser and log in. If you are running Kibana locally, go to http://localhost:5601/. To access Kibana and view the monitoring dashboards, you must log in as a user who has the kibana_user and monitoring_user roles.
  5. Click Monitoring in the side navigation. This displays any cluster alerts that require your attention and a summary of the available monitoring metrics for Elasticsearch, Logstash, and Kibana. To view additional information, click the Overview, Nodes, Indices, or Instances links.
Monitoring Dashboards

Watcher must be enabled to view cluster alerts. If you have a Basic license, Top Cluster Alerts are not displayed.