---
title: Collect Logstash monitoring data for stack monitoring
description: Elastic Agent collects monitoring data from your Logstash instance and sends it directly to your monitoring cluster. With Elastic Agent collection the...
url: https://www.elastic.co/elastic/docs-builder/docs/3028/reference/logstash/monitoring-with-elastic-agent
products:
  - Logstash
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Collect Logstash monitoring data for stack monitoring
Elastic Agent collects monitoring data from your Logstash instance and sends it directly to your monitoring cluster. With Elastic Agent collection the monitoring agent remains active even if the Logstash instance does not.
You can enroll Elastic Agent in [Fleet](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/reference/fleet/install-fleet-managed-elastic-agent) for management from a central location, or you can run [Elastic Agent standalone](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/reference/fleet/install-standalone-elastic-agent).
**Prerequisites**
Complete these steps as you prepare to collect and ship monitoring data for stack monitoring:
<dropdown title="Set up Elasticsearch monitoring">
  To bind Logstash metrics to an Elasticsearch cluster, set up [Elasticsearch monitoring](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/deploy-manage/monitor/stack-monitoring). If you would like to create a dedicated monitoring cluster (optional), check out [Elasticsearch monitoring documentation](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/deploy-manage/monitor/stack-monitoring/elasticsearch-monitoring-self-managed).
</dropdown>

<dropdown title="Disable default collection of Logstash monitoring metrics">
  Set `monitoring.enabled` to `false` in logstash.yml to disable default collection:
  ```yaml
  monitoring.enabled: false
  ```
</dropdown>

<dropdown title="Specify the target cluster_uuid (optional)">
  To bind the metrics of Logstash to a specific cluster, optionally define the `monitoring.cluster_uuid` in the configuration file (logstash.yml):
  ```yaml
  monitoring.cluster_uuid: PRODUCTION_ES_CLUSTER_UUID
  ```
</dropdown>

<dropdown title="Grant agent access to Elasticsearch (standalone agent only)">
  Minimal permissions required to send Logstash monitoring data to Elasticsearch:
  - `monitor` cluster privilege
  - `auto_configure` and `create_doc` index privileges on `logs-*` and `metrics-*` indices.
  See [Grant standalone Elastic Agents access to Elasticsearch](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/reference/fleet/grant-access-to-elasticsearch)
</dropdown>


## Install and configure Elastic Agent

When you have completed the prerequisites, install and configure Elastic Agent to monitor host logs and metrics. We’ll walk you through the process in these steps:
- [Add the Elastic Agent Logstash integration](#add-logstash-integration-ea)
- [Install and run an Elastic Agent on your machine](#add-agent-to-fleet-ea)
- [View assets](#view-assets)
- [Monitor Logstash logs and metrics (Stack Monitoring)](#view-data-stack)

Check out [Installing Elastic Agent](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/reference/fleet/install-elastic-agents) in the *Fleet and Elastic Agent Guide* for more info.

### Add the Elastic Agent Logstash integration

1. Go to the Kibana home page, and click **Add integrations**.
   
   ![Kibana home page](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/logstash/images/kibana-home.png)
2. In the query bar, search for **Logstash** and select the integration to see more details about it.
3. Click **Add Logstash**.
4. Configure the integration name and optionally add a description.
5. Configure the integration to collect logs.
   - Make sure that **Logs** is turned on if you want to collect logs from your Logstash instance, ensuring that the required settings are correctly configured:
- Under **Logs**, modify the log paths to match your Logstash environment.
6. Configure the integration to collect metrics
   <tip>
   For the best experience with Stack Monitoring, we recommend collecting both `node` and `node_stats`. Turning off either of these will result in incomplete or missing visualizations.
   </tip>
   - Make sure that **Metrics (Stack Monitoring)** is turned on, and **Metrics (Elastic Agent)** is turned off, if you want to collect metrics from your Logstash instance.
- Under **Metrics (Stack Monitoring)**, make sure the hosts setting points to your Logstash host URLs. By default, the integration collects Logstash monitoring metrics from `localhost:9600`. If that host and port number are not correct, update the `hosts` setting. If you configured Logstash to use encrypted communications, you must access it via HTTPS. For example, use a `hosts` setting like `https://localhost:9600`.
7. Choose where to add the integration policy. Click **New hosts** to add it to new agent policy or **Existing hosts** to add it to an existing agent policy.
8. In the popup, click **Add Elastic Agent to your hosts** to open the **Add agent** flyout.
   <tip>
   If you accidentally close the popup, go to **Fleet > Agents**, then click **Add agent** to access the flyout.
   </tip>


### Install and run an Elastic Agent on your machine

The **Add agent** flyout has two options: **Enroll in Fleet** and **Run standalone**. Enrolling agents in Fleet (default) provides a centralized management tool in Kibana, reducing management overhead.
<tab-set>
  <tab-item title="Fleet-managed">
    1. When the **Add Agent flyout** appears, stay on the **Enroll in fleet** tab.
    2. Skip the **Select enrollment token** step. The enrollment token you need is already selected.
       <note>
       The enrollment token is specific to the Elastic Agent policy that you just created. When you run the command to enroll the agent in Fleet, you will pass in the enrollment token.
       </note>
    3. Download, install, and enroll the Elastic Agent on your host by selecting your host operating system and following the **Install Elastic Agent on your host** step.
    It takes about a minute for Elastic Agent to enroll in Fleet, download the configuration specified in the policy you just created, and start collecting data.
  </tab-item>

  <tab-item title="Run standalone">
    1. When the **Add Agent flyout** appears, navigate to the **Run standalone** tab.
    2. Configure the agent. Follow the instructions in **Install Elastic Agent on your host**.
    3. After unpacking the binary, replace the `elastic-agent.yml` file with that supplied in the Add Agent flyout on the "Run standalone" tab, replacing the values of `ES_USERNAME` and `ES_PASSWORD` appropriately.
    4. Run `sudo ./elastic-agent install`
  </tab-item>
</tab-set>


## View assets

After you have confirmed enrollment and data is coming in,  click **View assets** to access dashboards related to the Logstash integration.
For traditional Stack Monitoring UI, the dashboards marked **[Logs Logstash]** are used to visualize the logs produced by your Logstash instances, with those marked **[Metrics Logstash]** for metrics dashboards. These are populated with data only if you selected the **Metrics (Elastic Agent)** checkbox.
![Integration assets](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/logstash/images/integration-assets-dashboards.png)
A number of dashboards are included to view Logstash as a whole, and dashboards that allow you to drill-down into how Logstash is performing on a node, pipeline and plugin basis.

### Monitor Logstash logs and metrics (Stack Monitoring)

[View the monitoring data in Kibana](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/deploy-manage/monitor/stack-monitoring/kibana-monitoring-data), and navigate to the [monitoring UI](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/logstash/logstash-monitoring-ui).