anchor.diff:  Leave `xpack.monitoring.enabled` set to its default value (`true`). 
   --
   
  -. On each {es} node in the production cluster:
  +. {metricbeat-ref}/metricbeat-installation.html[Install {metricbeat}] on each
  +{es} node in the production cluster.
   
  -.. {metricbeat-ref}/metricbeat-installation.html[Install {metricbeat}].
  -
  -.. Enable the {es} module in {metricbeat}. +
  +. Enable the {es} module in {metricbeat} on each {es} node. +
   +
   --
  +// tag::enable-es-module[]
   For example, to enable the default configuration in the `modules.d` directory, 
   run the following command:
   
  
positive.code: [source,yaml]
  ----------------------------------
  output.elasticsearch:
    hosts: ["http://es-mon-1:9200", "http://es-mon2:9200"] <1>
  ----------------------------------
  <1> In this example, the data is stored on a monitoring cluster with nodes 
  `es-mon-1` and `es-mon-2`. 
  
  IMPORTANT: The {es} {monitor-features} use ingest pipelines, therefore the
  cluster that stores the monitoring data must have at least one 
  <<ingest,ingest node>>. 
  
  For more information about these configuration options, see 
  {metricbeat-ref}/elasticsearch-output.html[Configure the {es} output].
  --
  
  .. If {es} {security-features} are enabled on the monitoring cluster, you 
  must provide a valid user ID and password so that {metricbeat} can send metrics 
  successfully. 
  
  ... Create a user on the monitoring cluster that has the 
  {stack-ov}/built-in-roles.html[`remote_monitoring_agent` built-in role]. 
  Alternatively, use the 
  {stack-ov}/built-in-users.html[`remote_monitoring_user` built-in user].
  
  ... Add the `username` and `password` settings to the {es} output information in 
  the {metricbeat} configuration file (`metricbeat.yml`):
  +
  --
  [source,yaml]
  ----------------------------------
  output.elasticsearch:
    ...
    username: remote_monitoring_user
    password: YOUR_PASSWORD
  ----------------------------------
  --
  
  .. If you configured the monitoring cluster to use 
  <<configuring-tls,encrypted communications>>, you must access it via 
  HTTPS. For example, use a `hosts` setting like `https://es-mon-1:9200` in the 
  `metricbeat.yml` file. 
  
  . <<starting-elasticsearch,Start {es}>>.
  
  . {metricbeat-ref}/metricbeat-starting.html[Start {metricbeat}]. 
  
  . {kibana-ref}/monitoring-data.html[View the monitoring data in {kib}]. 
  
negative.code: 
  To learn about monitoring in general, see 
  {stack-ov}/xpack-monitoring.html[Monitoring the {stack}]. 
  
  //NOTE: The tagged regions are re-used in the Stack Overview.
  
  . Enable the collection of monitoring data. Set 
  `xpack.monitoring.collection.enabled` to `true` on each node in the production 
  