Collect monitoring data from Elasticsearch clusters

Procedure

1. Log on to the Log Service console.
2. In the Log Application section, click Full-stack Monitoring.
3. On the Full-stack Monitoring page, click the instance.
4. On the Data Import page, enable Elasticsearch.

   If this is your first time to create a Logtail configuration for host monitoring, turn on the switch to go to the configuration page. If you have created a Logtail configuration, click the icon to go to the configuration page.

5. In the Install Logtail step, select the machine on which you want to install Logtail and click Next.
   • If you want to install Logtail on an Elastic Compute Service (ECS) instance, select the ECS instance on the ECS Instances tab and click Execute Now. For more information, see Install Logtail on ECS instances.
   • If you want to install Logtail on a self-managed Linux server or a Linux server from a third-party cloud, you must manually install Logtail V0.16.48 or later on the server. For more information, see Install Logtail on a Linux server.

   Notice Make sure that the server on which you want to install Logtail can connect to the Elasticsearch cluster whose metric data you want to collect.
6. In the Create Machine Group step, create a machine group and click Next.
   Log Service allows you to create IP address-based machine groups and custom identifier-based machine groups. For more information, see Create an IP address-based machine group and Create a custom ID-based machine group.
7. In the Machine Group Settings step, select the machine group that you create in the Source Server Groups section and move the machine group to the Applied Server Groups section. Then, click Next.
   Notice If you immediately apply a machine group after it is created, the heartbeat status of the machine group may be FAIL. This issue occurs because the machine group is not connected to Log Service. In this case, you can click Automatic Retry. If the issue persists, see What do I do if no heartbeat connections are detected on Logtail?
8. In the Specify Data Source step, configure the following parameters and click Complete.

   Parameter	Description
   Configuration Name	The name of the Logtail configuration. You can enter a custom value.
   Cluster Name	The name of the Elasticsearch cluster. You can enter a custom value. After you configure this parameter, Log Service adds a cluster=Cluster name tag to the Elasticsearch monitoring data that is collected by using the Logtail configuration. Notice Make sure that the cluster name is unique. Otherwise, data conflicts may occur.
   Server List	The information about the Elasticsearch cluster. The information includes the following configuration items: Address: the address of the Elasticsearch cluster. You can enter the IP address, hostname, or domain name of the server in the cluster. Port: the port number of the Elasticsearch cluster. Default value: 9200. You can add information about multiple Elasticsearch clusters based on your business requirements.
   Password	If authentication is configured for the Elasticsearch cluster, you must enter the account and password that you use to connect to the Elasticsearch cluster.
   Index Name	The name of the index that is created in the Elasticsearch cluster. If you enter _all, the metric data of all indexes in the Elasticsearch cluster is collected.
   Custom Tags	The custom tags that are added to the collected Elasticsearch monitoring data. The tags are key-value pairs. After you configure this parameter, Log Service adds the custom tags to the Elasticsearch monitoring data that is collected by using the Logtail configuration.

   After you complete the configurations, Log Service automatically creates assets such as Metricstores. For more information, see Assets.