How to configure the Auditbeat, Metricbeat, ....etc on Server and clients side? For expample I have one server and I would like to manage others client.

[Bona Puthtann]

How to configure the Auditbeat, Metricbeat, ....etc on Server and clients side? For expample I have one server and I would like to manage others client.

Please help me.

[Daniel Folch]

Hello Bona,

First, you have to configure your Elasticsearch to hear in the right network interface (not the IP of the Beat you want to hear) by editing the /etc/elasticsearch.yml file:
network.host: ["<network_interface_IP"]
After this, you have to set the same IP you have used before in the Beat .yml configuration file:

output.elasticsearch:  
          # Array of hosts to connect to.  
          hosts: ["http://<network_interface_IP:9200"]

And to see the events on kibana you will need to configure the indexes for your beats.

Regards,
Daniel Folch