Windows Service Metrics

Collect and ship Windows services & performance counter metrics to Logstash and Elasticsearch.

Metricbeat is a lightweight shipper that helps you monitor your Windows server by collecting metrics from services and performance counters running on the Windows server. Configure Metricbeat using the pre-defined examples below to collect and ship metrics about Windows services to Logstash or Elasticsearch.

Step 1 - Install Metricbeat

To get started first follow the steps below:

Install
Root access
Verify the required port is open

Older versions can be found here 7, 6, 5

Step 2 - Copy configuration file

The configuration file below is pre-configured to send data to your Logit.io Stack via Logstash.

Copy the configuration file below and overwrite the contents of metricbeat.yml.

###################### Logit.io Metricbeat Configuration #######################
# =========================== Modules configuration ============================

metricbeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 10s
# ======================= Elasticsearch template setting =======================
setup.template.settings:
  index.number_of_shards: 1
  index.codec: best_compression
  #_source.enabled: false

# ================================== Outputs ===================================
# ------------------------------ Logstash Output -------------------------------
<div class="sw-warning">
    <div>
        <img src="/images/source-wizard/warning-triangle.svg">
    </div>
    <div>
       <b>No input available! </b> Your stack is missing the required input for this data source <a href="#" onclick="Intercom('showNewMessage')" class="btn btn-info btn-sm">Talk to support to add the input</a>
    </div>
</div>

Step 3 - Enable module

There are several built in metricbeat modules you can use. To enable the system on Windows, run the following:

PS > .\metricbeat.exe modules enable windows

Step 4 - Configure module

Each module has its own configuration file where different metricsets can be enabled / disabled. Locate the configuration file for the system module. <EXTRACTED_ARCHIVE>/modules.d/windows.yml

By default the following metrics are enabled. To enable or disable a metric simply comment or uncomment the line out.

- module: windows
  #metricsets:
  #  - service
  period: 1m

#- module: windows
#  metricsets:
#    - perfmon

The perfmon metricset of the Windows module reads Windows performance counters. The service metricset of the Windows module reads the status of Windows services.

Step 5 - Start Metricbeat

Ok, time to start ingesting data!

PS C:\Program Files\Metricbeat> Start-Service metricbeat

Step 6 - How to diagnose no data in Stack

If you don't see data appearing in your Stack after following the steps, visit the Help Centre guide for steps to diagnose no data appearing in your Stack or Chat to support now.

Step 7 - Windows module dashboard

The Windows module comes with predefined Kibana dashboards. To view your dashboards for any of your Logit.io stacks, launch Kibana and choose Dashboards.

Predefined Kibana dashboard

Expand View