System Metrics for Red Hat (RHEL)

Collect and ship Red Hat Enterprise Linux (RHEL) operating system and service metrics to Logstash and Elasticsearch.

Metricbeat is a lightweight shipper that helps you monitor your servers by collecting metrics from the operating system and from services running on the Redhat server. Configure Metricbeat using the pre-defined examples below to collect and ship Red Hat Enterprise Linux (RHEL) operating system, service metrics and statistics to Logstash or Elasticsearch.

Step 1 - Install Metricbeat

First we need to install Metricbeat.

sudo rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch
echo "[elastic-6.x]
name=Elastic repository for 6.x packages
baseurl=https://artifacts.elastic.co/packages/oss-6.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md" | sudo tee /etc/yum.repos.d/elastic-beats.repo

sudo yum install metricbeat

Step 2 - Locate configuration file

/etc/metricbeat/metricbeat.yml

Step 3 - Configure output

We'll be shipping to Logstash so that we have the option to run filters before the data is indexed.
Comment out the elasticsearch output block.

## Comment out elasticsearch output
#output.elasticsearch:
#  hosts: ["localhost:9200"]

Uncomment and change the logstash output to match below.

output.logstash:
    hosts: ["your-logstash-host:your-ssl-port"]
    loadbalance: true
    ssl.enabled: true

Step 4 - Enable module

There are several built in metricbeat modules you can use. To enable the system module, run the following:

metricbeat modules list
metricbeat modules enable system

Step 5 - Configure module

Each module has its own configuration file where different metricsets can be enabled / disabled. Locate the configuration file for the system module. /etc/metricbeat/modules.d/system.yml

By default the following metrics are enabled. To enable or disable a metric simply comment or uncomment the line out.

- module: system
  period: 10s
  metricsets:
    - cpu
    - load
    - memory
    - network
    - process
    - process_summary
    - socket_summary
    #- core
    #- diskio
    #- socket

Step 6 - Start Metricbeat

Ok, time to start ingesting data!

sudo systemctl enable metricbeat
sudo systemctl start metricbeat

Step 7 - System module dashboard

The System module comes with a predefined Kibana dashboard. To view your dashboards for any of your Logit stacks, launch Kibana and choose Dashboards.

Expand View