|
2 | 2 | [[how-monitoring-works]] |
3 | 3 | == How monitoring works |
4 | 4 |
|
5 | | -Monitoring collects data from {es} nodes, Logstash nodes, and {kib} instances. |
| 5 | +Monitoring collects data from {es} nodes, Logstash nodes, and {kib} instances. |
6 | 6 |
|
7 | | -In general, the {es} cluster you are monitoring controls where the monitoring |
8 | | -metrics for the stack are stored. By default, they are stored in local indices. |
| 7 | +In general, the {es} cluster you are monitoring controls where the monitoring |
| 8 | +metrics for the stack are stored. By default, they are stored in local indices. |
9 | 9 |
|
10 | | -In production, we strongly recommend using a separate monitoring cluster. Using |
11 | | -a separate monitoring cluster prevents production cluster outages from impacting |
12 | | -your ability to access your monitoring data. It also prevents monitoring |
13 | | -activities from impacting the performance of your production cluster. The |
14 | | -following diagram illustrates a typical monitoring architecture with separate |
| 10 | +TIP: In production, we strongly recommend using a separate monitoring |
| 11 | +Elasticsearch cluster. Using a separate monitoring cluster |
| 12 | +prevents production cluster outages from impacting your ability to access your |
| 13 | +monitoring data. It also prevents monitoring activities from impacting the |
| 14 | +performance of your production cluster. For the same reason, we also |
| 15 | +recommend to use a separate Kibana instance that is connected to the separate |
| 16 | +monitoring cluster. |
| 17 | + |
| 18 | +The following diagram illustrates a typical monitoring architecture with separate |
15 | 19 | production and monitoring clusters: |
16 | 20 |
|
17 | 21 | image::monitoring/images/architecture10.png["A typical monitoring environment"] |
18 | 22 |
|
19 | | -beta[] In 6.4 and later, you can use {metricbeat} to collect and ship data about |
20 | | -{kib}, rather than routing it through {es}. In 6.5 and later, you can also use |
| 23 | +beta[] In 6.4 and later, you can use {metricbeat} to collect and ship data about |
| 24 | +{kib}, rather than routing it through {es}. In 6.5 and later, you can also use |
21 | 25 | {metricbeat} to collect and ship data about {es}. For example: |
22 | 26 |
|
23 | 27 | image::monitoring/images/architecture20.png[A typical monitoring environment that includes {metricbeat}] |
24 | 28 |
|
25 | 29 | If you have at least a gold license, you can route data from multiple production |
26 | | -clusters to a single monitoring cluster. For more information about the |
27 | | -differences between various subscription levels, see: https://www.elastic.co/subscriptions |
| 30 | +clusters to a single monitoring cluster. For more information about the |
| 31 | +differences between various subscription levels, see: https://www.elastic.co/subscriptions |
28 | 32 |
|
29 | 33 | IMPORTANT: In general, the monitoring cluster and the clusters being monitored |
30 | 34 | should be running the same version of the stack. A monitoring cluster cannot |
31 | 35 | monitor production clusters running newer versions of the stack. If necessary, |
32 | 36 | the monitoring cluster can monitor production clusters running older versions, |
33 | 37 | but the versions cannot differ by more than one major version. |
34 | 38 |
|
35 | | -If you use {kib} to visualize data and administer the cluster, you might want to |
36 | | -create a dedicated {kib} instance for monitoring, rather than using a single |
| 39 | +If you use {kib} to visualize data and administer the cluster, you might want to |
| 40 | +create a dedicated {kib} instance for monitoring, rather than using a single |
37 | 41 | {kib} instance to access both your production cluster and monitoring cluster: |
38 | 42 |
|
39 | 43 | image::monitoring/images/architecture30.png["A separate {kib} instance accesses the monitoring cluster"] |
40 | | - |
41 | | - |
|
0 commit comments