Elasticsearch Metricbeat
Video Lecture
Description
I will set this up on the same linux server where the Filebeat process is already running.
Download Metricbeat for your OS from https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-installation-configuration.html#installation
My OS is a Debian based Ubuntu 20.04
curl -L -O https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-7.16.1-amd64.deb
sudo dpkg -i metricbeat-7.16.1-amd64.deb
View the available modules and status
metricbeat modules list
(Optional) Enable the linux
module
metricbeat modules enable linux
Navigate to the Metricbeat folder.
cd /etc/metricbeat
ls -lh
Edit the Metricbeat settings.
sudo nano /etc/metricbeat/metricbeat.yml
Update the address of your Elasticsearch server.
output.elasticsearch:
hosts: ["<IP Address of your Elasticsearch Server>:9200"]
Restart and check status.
sudo service metricbeat start
sudo service metricbeat status
Firewall
Don't forget about any firewalls rules you don't have or need to add.
Verify that your Metricbeat process can send to your Elasticsearch server by making curl requests from the server running Metricbeat.
curl "http://<IP Address of your Elasticsearch Server>:9200"
and to get the name of the new index created by this new Metricbeat service,
curl "http://<IP Address of your Elasticsearch Server>:9200/_cat/indices"