# Integrating elasticsearch with search guard (alerting purpose) **URL:** \ **Category:** Signals Alerting\ **Created:** [December 12, 2022, 8:09am UTC](https://forum.search-guard.com/t/integrating-elasticsearch-with-search-guard-alerting-purpose/2381 "2022-12-12T08:09:59Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![micou12](https://avatars.discourse-cdn.com/v4/letter/m/ad7895/32.png) [@micou12](https://forum.search-guard.com/u/micou12)\ **Post date:** [December 12, 2022, 8:09am UTC](https://forum.search-guard.com/t/integrating-elasticsearch-with-search-guard-alerting-purpose/2381/1 "2022-12-12T08:09:59Z")
Hi team, This is my first time with Search Guard, I am interested to use it for alerting system . can anyone guide how to proceed ? how to integrate it with my running elasticsearch cluster accessible using kibana? Your guidance and help are highly appreciated. Regards ---
**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\ **Post date:** [December 12, 2022, 9:20am UTC](https://forum.search-guard.com/t/integrating-elasticsearch-with-search-guard-alerting-purpose/2381/2 "2022-12-12T09:20:42Z")
@micou12 I think the best place to start is the Signals’ documentation. > **[Getting started with Signals Alerting](https://docs.search-guard.com/latest/elasticsearch-alerting-getting-started)** > > How to get started with Signals Alerting for Elasticsearch to find anomalies in your data and send alerts ---
**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\ **Post date:** [December 14, 2022, 12:46pm UTC](https://forum.search-guard.com/t/integrating-elasticsearch-with-search-guard-alerting-purpose/2381/3 "2022-12-14T12:46:37Z")
@micou12 In regard to the installation process. You should first take a look at the Search Guard Releases matrix and decide which version you’d like to use. > **[Latest Releases](https://docs.search-guard.com/latest/search-guard-versions)** > > A list of the current Search Guard releases for all Elasticsearch 7 and Kibana 7 versions. Please be aware that SG offers a new version of the plugin called FLX. Once you decide which flavour of SG plugin you’d like to implement, please follow Installing Search Guard section in the corresponding documentation. ---
**Author:** ![micou12](https://avatars.discourse-cdn.com/v4/letter/m/ad7895/32.png) [@micou12](https://forum.search-guard.com/u/micou12)\ **Post date:** [December 14, 2022, 1:11pm UTC](https://forum.search-guard.com/t/integrating-elasticsearch-with-search-guard-alerting-purpose/2381/4 "2022-12-14T13:11:45Z")
Hello My cluster is running Elastcsearch 8.4.3 same as Kibana and I have seen also the corresponding search guard version , I have installed it but while restarting Elasticsearch it fails. → Installed search-guard-flx → Please restart Elasticsearch to activate any plugins installed root@search-guard:~# systemctl restart elasticsearch.service Job for elasticsearch.service failed because the control process exited with error code. See “systemctl status elasticsearch.service” and “journalctl -xe” for details. root@search-guard:~# systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Wed 2022-12-14 13:01:38 UTC; 25s ago Docs: [https://www.elastic.co](https://www.elastic.co) Process: 64292 ExecStart=/usr/share/elasticsearch/bin/systemd-entrypoint -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE) Main PID: 64292 (code=exited, status=1/FAILURE) Dec 14 13:01:25 search-guard systemd[1]: Starting Elasticsearch… Dec 14 13:01:37 search-guard systemd-entrypoint[64292]: ERROR: Elasticsearch did not exit normally - check the logs at /var/log/elasticsearch/elasticsearch.log Dec 14 13:01:38 search-guard systemd-entrypoint[64292]: ERROR: Elasticsearch exited unexpectedly Dec 14 13:01:38 search-guard systemd[1]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE Dec 14 13:01:38 search-guard systemd[1]: elasticsearch.service: Failed with result ‘exit-code’. Dec 14 13:01:38 search-guard systemd[1]: Failed to start Elasticsearch. root@search-guard:~# systemctl stop elasticsearch root@search-guard:~# systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Wed 2022-12-14 13:01:38 UTC; 53s ago Docs: [https://www.elastic.co](https://www.elastic.co) Process: 64292 ExecStart=/usr/share/elasticsearch/bin/systemd-entrypoint -p ${PID\_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE) Main PID: 64292 (code=exited, status=1/FAILURE) ---
**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\ **Post date:** [December 15, 2022, 10:48am UTC](https://forum.search-guard.com/t/integrating-elasticsearch-with-search-guard-alerting-purpose/2381/5 "2022-12-15T10:48:45Z")
@micou12 Did you follow the suggestions from this output? Have you checked the logs?