{"id":8571,"date":"2025-05-15T17:58:32","date_gmt":"2025-05-15T12:28:32","guid":{"rendered":"https:\/\/pheonixsolutions.com\/blog\/?p=8571"},"modified":"2025-05-15T17:58:37","modified_gmt":"2025-05-15T12:28:37","slug":"install-metric-beat-and-configure-for-cpu-disk-and-memory-monitoring-in-elk","status":"publish","type":"post","link":"https:\/\/pheonixsolutions.com\/blog\/install-metric-beat-and-configure-for-cpu-disk-and-memory-monitoring-in-elk\/","title":{"rendered":"Install metric beat and configure for CPU, disk and memory monitoring in ELK."},"content":{"rendered":"\n

Introduction<\/strong>:<\/p>\n\n\n\n

Metricbeat is a lightweight shipper for collecting and forwarding system and service metrics to Elasticsearch, Logstash, or another data processor. It periodically collects data from configured metric sets and sends it to a specified output.<\/p>\n\n\n\n

Prerequisite<\/strong>:
1. Need Elastic search, Logstash and Kibana preconfigured server.
2. Allow the required port to receive the Metrics data in that logstash.<\/p>\n\n\n\n

Configurations:<\/strong><\/p>\n\n\n\n

    \n
  1. Log in to the client-server on which you want to monitor the metrics.<\/li>\n\n\n\n
  2. Install metric beat from the community release or use the commands below
    to install and untar the file.<\/span><\/div><\/li>\n<\/ol>\n\n\n\n

    curl -L -O https:\/\/artifacts.elastic.co\/downloads\/beats\/metricbeat\/metricbeat-8.12.1-linux-x86_64.tar.gz
    tar xzvf metricbeat-8.12.1-linux-x86_64.tar.gz
    cd metricbeat-8.12.1-linux-x86_64<\/code><\/p>\n\n\n\n

    3. In the metricbeat.yml config file need to add the URL of Elasticsearch, Password and protocol, as like below. mentioned text.<\/p>\n\n\n\n

      \n
    1. Configurations for Managed ELK (AWS-Marketplace, ELK cloud etc.,) metricbeat.yml<\/li>\n<\/ol>\n\n\n\n
      # =============================== Elastic Cloud ================================\n# These settings simplify using Metricbeat with the Elastic Cloud (https:\/\/cloud.elastic.co\/).\n# The cloud.id setting overwrites the `output.elasticsearch.hosts` and\n# `setup.kibana.host` options.\n# You can find the `cloud.id` in the Elastic Cloud web UI.\n# ================================== Outputs ===================================\n# Configure what output to use when sending the data collected by the beat.\n# ---------------------------- Elasticsearch Output ----------------------------\noutput.elasticsearch:\n  cloud_id: \"Paste the URL of your Managed Elastic serch\"\n  cloud.auth: \"Enter the password to get access the above link\"\n  protocol: \"https\"\n  # Array of hosts to connect to.\n  # hosts: [\"localhost:9200\"]\n  # Performance preset - one of \"balanced\", \"throughput\", \"scale\",\n  # \"latency\", or \"custom\".\n  preset: balanced\n<\/pre>\n\n\n\n
      2. Configurations for a standalone ELK server – metricbeat.yml<\/p>\n\n\n\n
      # =============================== Elastic Cloud ================================\n# These settings simplify using Metricbeat with the Elastic Cloud (https:\/\/cloud.elastic.co\/).\n# The cloud.id setting overwrites the `output.elasticsearch.hosts` and\n# `setup.kibana.host` options.\n# You can find the `cloud.id` in the Elastic Cloud web UI.\n# ================================== Outputs ===================================\n# Configure what output to use when sending the data collected by the beat.\n# ---------------------------- Elasticsearch Output ----------------------------\noutput.elasticsearch:\n  protocol: \"http\"\n  # Array of hosts to connect to.\n  hosts: [\"<ELK-host-ip>:9200\"]\n  username: \"<elasticsearch-username>\"\n  password: \"<elasticsearch-password>\"\n  # Performance preset - one of \"balanced\", \"throughput\", \"scale\",\n  # \"latency\", or \"custom\".\n  preset: balanced\n<\/pre>\n\n\n\n
      4. After the config file is updated use the below command to run the metricbeat<\/p>\n\n\n\n
      .\/metricbeat -e -c metricbeat.yml &<\/code><\/pre>\n\n\n\n
      5. The metric beat service is run check by using this command.<\/p>\n\n\n\n
      ps aux | grep metricbeat<\/code><\/pre>\n\n\n\n
      6. After that, check the hosts in Elastic URL -> Observability->Infrastructure->Hosts.<\/p>\n\n\n\n
      Meticbeat is running successfully on the remote server.
      IP will be listed on the Hosts Tab.<\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      <\/p>\n\n\n\n
      7. Select the IP (sample-ip-xx-xx-2-89) and choose to create a rule.<\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      8. Choose the Create Rule option pop-up window on the right side, will enter the Name column metric alert Name (CPU)
       Name – xxxxxx CPU Utilisation Monitor<\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      9. In Conditions, choose CPU usage<\/strong> and enter the target value (eg.80) in the IS ABOVE<\/strong> column, which means CPU spikes above 80% will receive the alert notification.<\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      10. Scroll down in the action Tab, choose OpsGenie, and in the Message and Description box, enter the required message.<\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      11. In the action menu, choose your required service to receive the alert.
      Create the connector if it is not configured previously.<\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n

      <\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      12. Choose save.
      Check the rules have updated or not Observability-> Alerts -> Rules.
      <\/p>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n
      <\/p>\n","protected":false},"excerpt":{"rendered":"
      Introduction: Metricbeat is a lightweight shipper for collecting and forwarding system and service metrics to Elasticsearch, Logstash, or another data […]<\/p>\n","protected":false},"author":509,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1022],"tags":[],"class_list":["post-8571","post","type-post","status-publish","format-standard","hentry","category-web-architecture","psol-cat-web-architecture"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/phn2x7-2ef","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/8571","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/users\/509"}],"replies":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=8571"}],"version-history":[{"count":0,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/8571\/revisions"}],"wp:attachment":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=8571"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=8571"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=8571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}