You need to log in to create posts and topics.

Installing Metricbeat for Linux & Mac

Metricbeat is a lightweight shipper for system metrics. It runs on the machine(s) you wish to monitor and automatically sends metrics data to your Vizion Elastic app.


1. Download and Install Metricbeat.

sudo curl >; chmod a+x; sudo ./ <<Elastisearch API Endpoint>>

This will:

  • Install Metricbeat 6.5.4
  • Update the metricbeat.yml  file to connect with the proper instance
  • Load the dashboards into Kibana
  • Start Metricbeat

For Mac users, Metricbeat will install and automatically run as a foreground process in the terminal window. 

For Linux users: to confirm that Metricbeat has been downloaded and is running as a background service, enter the following command:

service metricbeat status

Tip: If you are using the Pnap version of you made need to make additional configurations in the metricbeat.yml  to set up the Kibana Dashboard which is outlined in Step 2.


2. Edit the configuration (For users only)

Open the metricbeat.yml.

sudo vi /etc/metricbeat/metricbeat.yml

Change the to in the Kibana section.


#============================== Kibana =====================================
# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
# This requires a Kibana endpoint configuration.
# Kibana Host
# Scheme and port can be left out and will be set to the default (http and 5601)
# In case you specify and additional path, the scheme is required: http://localhost:5601/path
# IPv6 addresses should always be defined as: https://%5B2001:db8::1]:5601
#host: "localhost:5601"
username: "<username>"


3. Enable modules.

Metricbeat comes with a number of modules that provide additional functionality. These modules must be enabled to be tracked. To track system metrics, the system module must be enabled. To enable, run the following command:


sudo metricbeat modules enable system


cd /etc/metricbeat

sudo ./metricbeat modules enable system


To check which modules have been enabled, run the command:

sudo metricbeat modules list


4. Configure the system module.

Open up the system.yml.

sudo vi /etc/metricbeat/modules.d/system.yml

There are several ways to customize what metrics are monitored. Out of the box, the following metrics are monitored:

  • cpu
  • load
  • memory
  • network
  • process
  • process_summary
  • filesystem
  • fsstat
  • uptime

Additional metrics that can be added if desired:

  • core
  • diskio
  • socket



5. Restart Metricbeat.

Once the desired configurations have been set, run the following command to restart metricbeat:


service metricbeat restart


cd /etc/metricbeat

./metricbeat restart


6. Track system metrics in the console.

Metricbeat should now be shipping logs from the machine to the Vizion Elastic Instance. The logs can be found at /var/log/metricbeat/metricbeat. To test in the console that the system metrics are being tracked, run the following command:

sudo tail -f /var/log/metricbeat/metricbeat

The logs should display in real-time in the console.


7. Create an index to display the logs in the Kibana Dashboard.

In the Kibana Dashboard, click on the "Discover" tab. Inputting metricbeat-* should automatically create a match with the incoming logs from Elasticsearch. Click "next" to continue setting up and creating the index. Once configured, click on the "Discover" tab which should start displaying the logs in real-time as they come in.

Tip: The Refresh Interval may need to be modified to a shorter time span to see the logs appear.


8. Setup Dashboard Visuals.

In the Kibana Dashboard, click on the "Dashboard" tab. In the search bar type "metricbeat".  Several options should appear. Click on the option [Metricbeat System] Host Overview. The dashboard should then load automatically and begin visually displaying the metricbeats from the system processes defined in the system.yml.