diff --git a/docs/user/index.asciidoc b/docs/user/index.asciidoc
index a07d584b4391d..01be8c2e264c5 100644
--- a/docs/user/index.asciidoc
+++ b/docs/user/index.asciidoc
@@ -6,7 +6,10 @@ include::getting-started.asciidoc[]
include::setup.asciidoc[]
-include::monitoring/configuring-monitoring.asciidoc[]
+include::monitoring/configuring-monitoring.asciidoc[leveloffset=+1]
+include::monitoring/monitoring-metricbeat.asciidoc[leveloffset=+2]
+include::monitoring/viewing-metrics.asciidoc[leveloffset=+2]
+include::monitoring/monitoring-kibana.asciidoc[leveloffset=+2]
include::security/securing-kibana.asciidoc[]
diff --git a/docs/user/monitoring/beats-details.asciidoc b/docs/user/monitoring/beats-details.asciidoc
index f4ecb2a74d91e..3d7a726d2f8a2 100644
--- a/docs/user/monitoring/beats-details.asciidoc
+++ b/docs/user/monitoring/beats-details.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[beats-page]]
-== Beats Monitoring Metrics
+= Beats Monitoring Metrics
++++
Beats Metrics
++++
diff --git a/docs/user/monitoring/cluster-alerts-license.asciidoc b/docs/user/monitoring/cluster-alerts-license.asciidoc
deleted file mode 100644
index ec86b6f578e19..0000000000000
--- a/docs/user/monitoring/cluster-alerts-license.asciidoc
+++ /dev/null
@@ -1,2 +0,0 @@
-NOTE: Watcher must be enabled to view cluster alerts. If you have a Basic
-license, Top Cluster Alerts are not displayed.
\ No newline at end of file
diff --git a/docs/user/monitoring/cluster-alerts.asciidoc b/docs/user/monitoring/cluster-alerts.asciidoc
index a58ccc7f7d68d..2945ebc67710c 100644
--- a/docs/user/monitoring/cluster-alerts.asciidoc
+++ b/docs/user/monitoring/cluster-alerts.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[cluster-alerts]]
-== Cluster Alerts
+= Cluster Alerts
The *Stack Monitoring > Clusters* page in {kib} summarizes the status of your
{stack}. You can drill down into the metrics to view more information about your
@@ -39,11 +39,12 @@ valid for 30 days.
The {monitor-features} check the cluster alert conditions every minute. Cluster
alerts are automatically dismissed when the condition is resolved.
-include::cluster-alerts-license.asciidoc[]
+NOTE: {watcher} must be enabled to view cluster alerts. If you have a Basic
+license, Top Cluster Alerts are not displayed.
[float]
[[cluster-alert-email-notifications]]
-==== Email Notifications
+== Email Notifications
To receive email notifications for the Cluster Alerts:
. Configure an email account as described in
diff --git a/docs/user/monitoring/configuring-monitoring.asciidoc b/docs/user/monitoring/configuring-monitoring.asciidoc
index 7bcddcac923b2..f158dcc3eee6f 100644
--- a/docs/user/monitoring/configuring-monitoring.asciidoc
+++ b/docs/user/monitoring/configuring-monitoring.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[configuring-monitoring]]
-== Configure monitoring in {kib}
+= Configure monitoring in {kib}
++++
Configure monitoring
++++
@@ -16,7 +16,3 @@ You can also use {kib} to
To learn about monitoring in general, see
{ref}/monitor-elasticsearch-cluster.html[Monitor a cluster].
-
-include::monitoring-metricbeat.asciidoc[]
-include::viewing-metrics.asciidoc[]
-include::monitoring-kibana.asciidoc[]
diff --git a/docs/user/monitoring/dashboards.asciidoc b/docs/user/monitoring/dashboards.asciidoc
deleted file mode 100644
index 4ffe76f634d93..0000000000000
--- a/docs/user/monitoring/dashboards.asciidoc
+++ /dev/null
@@ -1,67 +0,0 @@
-[[dashboards]]
-== Monitoring's Dashboards
-
-=== Overview Dashboard
-
-The _Overview_ dashboard is Monitoring's main page. The dashboard displays the
-essentials metrics you need to know that your cluster is healthy. It also
-provides an overview of your nodes and indices, displayed in two clean tables
-with the relevant key metrics. If some value needs your attention, they will
-be highlighted in yellow or red. The nodes and indices tables also serve as an
-entry point to the more detailed _Node Statistics_ and _Index Statistics_
-dashboards.
-
-overview_thumb.png["Overview Dashboard",link="images/overview.png"]
-
-=== Node & Index Statistics
-
-The _Node Statistics_ dashboard displays metric charts from the perspective of
-one or more nodes. Metrics include hardware level metrics (like load and CPU
-usage), process and JVM metrics (memory usage, GC), and node level
-Elasticsearch metrics such as field data usage, search requests rate and
-thread pool rejection.
-
-node_stats_thumb.png["Node Statistics Dashboard",link="images/node_stats.png"]
-
-The _Index Statistics_ dashboard is very similar to the _Node Statistics_
-dashboard, but it shows you all the metrics from the perspective of one or
-more indices. The metrics are per index, with data aggregated from all of the
-nodes in the cluster. For example, the ''store size'' chart shows the total
-size of the index data across the whole cluster.
-
-index_stats_thumb.png["Index Statistics Dashboard",link="images/index_stats.png"]
-
-=== Shard Allocation
-
-The _Shard Allocation_ dashboard displays how the shards are allocated across nodes.
-The dashboard also shows the status of the shards. It has two perspectives, _By Indices_ and _By Nodes_.
-The _By Indices_ view lists each index and shows you how it's shards are
-distributed across nodes. The _By Nodes_ view lists each node and shows you which shards the node current host.
-
-The viewer also has a playback feature which allows you to view the history of the shard allocation. You can rewind to each
-allocation event and then play back the history from any point in time. Hover on relocating shards to highlight both
-their previous and new location. The time line color changes based on the state of the cluster for
-each time period.
-
-shard_allocation_thumb.png["Shard Allocation Dashboard",link="images/shard_allocation.png"]
-
-=== Cluster Pulse
-
-The Cluster Pulse Dashboard allows you to see any event of interest in the cluster. Typical
-events include nodes joining or leaving, master election, index creation, shard (re)allocation
-and more.
-
-cluster_pulse_thumb.png["Index Statistics Dashboard",link="images/cluster_pulse.png"]
-
-[[sense]]
-=== Sense
-
-_Sense_ is a lightweight developer console. The console is handy when you want
-to make an extra API call to check something or perhaps tweak a setting. The
-developer console understands both JSON and the Elasticsearch API, offering
-suggestions and autocompletion. It is very useful for prototyping queries,
-researching your data or any other administrative work with the API.
-
-image::images/sense_thumb.png["Developer Console",link="sense.png"]
-
-
diff --git a/docs/user/monitoring/elasticsearch-details.asciidoc b/docs/user/monitoring/elasticsearch-details.asciidoc
index 15e4676c443df..11a561e7ad01f 100644
--- a/docs/user/monitoring/elasticsearch-details.asciidoc
+++ b/docs/user/monitoring/elasticsearch-details.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[elasticsearch-metrics]]
-== {es} Monitoring Metrics
+= {es} Monitoring Metrics
[subs="attributes"]
++++
{es} Metrics
@@ -18,7 +18,7 @@ See also {ref}/monitor-elasticsearch-cluster.html[Monitor a cluster].
[float]
[[cluster-overview-page]]
-==== Cluster Overview
+== Cluster Overview
To view the key metrics that indicate the overall health of an {es} cluster,
click **Overview** in the {es} section. Anything that needs your attention is
@@ -44,7 +44,7 @@ From there, you can dive into detailed metrics for particular nodes and indices.
[float]
[[nodes-page]]
-==== Nodes
+== Nodes
To view node metrics, click **Nodes**. The Nodes section shows the status
of each node in your cluster.
@@ -54,7 +54,7 @@ image::user/monitoring/images/monitoring-nodes.png["Elasticsearch Nodes"]
[float]
[[nodes-page-overview]]
-===== Node Overview
+=== Node Overview
Click the name of a node to view its node statistics over time. These represent
high-level statistics collected from {es} that provide a good overview of
@@ -66,7 +66,7 @@ image::user/monitoring/images/monitoring-node.png["Elasticsearch Node Overview"]
[float]
[[nodes-page-advanced]]
-===== Node Advanced
+=== Node Advanced
To view advanced node metrics, click the **Advanced** tab for a node. The
*Advanced* tab shows additional metrics, such as memory and garbage collection
@@ -81,7 +81,7 @@ more advanced knowledge of {es}, such as poor garbage collection performance.
[float]
[[indices-overview-page]]
-==== Indices
+== Indices
To view index metrics, click **Indices**. The Indices section shows the same
overall index and search metrics as the Overview and a table of your indices.
@@ -91,7 +91,7 @@ image::user/monitoring/images/monitoring-indices.png["Elasticsearch Indices"]
[float]
[[indices-page-overview]]
-===== Index Overview
+=== Index Overview
From the Indices listing, you can view data for a particular index. To drill
down into the data for a particular index, click its name in the Indices table.
@@ -101,7 +101,7 @@ image::user/monitoring/images/monitoring-index.png["Elasticsearch Index Overview
[float]
[[indices-page-advanced]]
-===== Index Advanced
+=== Index Advanced
To view advanced index metrics, click the **Advanced** tab for an index. The
*Advanced* tab shows additional metrics, such as memory statistics reported
@@ -116,7 +116,7 @@ more advanced knowledge of {es}, such as wasteful index memory usage.
[float]
[[jobs-page]]
-==== Jobs
+== Jobs
To view {ml} job metrics, click **Jobs**. For each job in your cluster, it shows
information such as its status, the number of records processed, the size of the
@@ -127,7 +127,7 @@ image::user/monitoring/images/monitoring-jobs.png["Machine learning jobs",link="
[float]
[[ccr-overview-page]]
-==== CCR
+== CCR
To view {ccr} metrics, click **CCR**. For each follower index on the cluster, it
shows information such as the leader index, an indication of how much the
@@ -149,7 +149,7 @@ For more information, see {ref}/xpack-ccr.html[{ccr-cap}].
[float]
[[logs-monitor-page]]
-==== Logs
+== Logs
If you use {filebeat} to collect log data from your cluster, you can see its
recent logs in the *Stack Monitoring* application. The *Clusters* page lists the
diff --git a/docs/user/monitoring/gs-index.asciidoc b/docs/user/monitoring/gs-index.asciidoc
deleted file mode 100644
index 69c523647393c..0000000000000
--- a/docs/user/monitoring/gs-index.asciidoc
+++ /dev/null
@@ -1,31 +0,0 @@
-[[xpack-monitoring]]
-= Monitoring the Elastic Stack
-
-[partintro]
---
-The {monitoring} components enable you to easily monitor the Elastic Stack
-from {kibana-ref}/introduction.html[Kibana].
-You can view health and performance data for {es}, Logstash, and {kib} in real
-time, as well as analyze past performance.
-
-A monitoring agent runs on each {es}, {kib}, and Logstash instance to collect
-and index metrics.
-
-By default, metrics are indexed within the cluster you are monitoring.
-Setting up a dedicated monitoring cluster ensures you can access historical
-monitoring data even if the cluster you're
-monitoring goes down. It also enables you to monitor multiple clusters
-from a central location.
-
-When you use a dedicated monitoring cluster, the metrics collected by the
-Logstash and Kibana monitoring agents are shipped to the Elasticsearch
-cluster you're monitoring, which then forwards all of the metrics to
-the monitoring cluster.
-
-//
-
-// image:monitoring-architecture.png["Monitoring Architecture",link="images/monitoring-architecture.png"]
-
---
-
-include::getting-started.asciidoc[]
diff --git a/docs/user/monitoring/index.asciidoc b/docs/user/monitoring/index.asciidoc
index edc572a56434e..ab773657073ba 100644
--- a/docs/user/monitoring/index.asciidoc
+++ b/docs/user/monitoring/index.asciidoc
@@ -1,33 +1,7 @@
-[role="xpack"]
-[[xpack-monitoring]]
-= Stack Monitoring
-
-[partintro]
---
-
-The {kib} {monitor-features} serve two separate purposes:
-
-. To visualize monitoring data from across the {stack}. You can view health and
-performance data for {es}, {ls}, and Beats in real time, as well as analyze past
-performance.
-. To monitor {kib} itself and route that data to the monitoring cluster.
-
-If you enable monitoring across the {stack}, each {es} node, {ls} node, {kib}
-instance, and Beat is considered unique based on its persistent
-UUID, which is written to the <> directory when the node
-or instance starts.
-
-NOTE: Watcher must be enabled to view cluster alerts. If you have a Basic
-license, Top Cluster Alerts are not displayed.
-
-For more information, see <> and
-{ref}/monitor-elasticsearch-cluster.html[Monitor a cluster].
-
---
-
-include::beats-details.asciidoc[]
-include::cluster-alerts.asciidoc[]
-include::elasticsearch-details.asciidoc[]
-include::kibana-details.asciidoc[]
-include::logstash-details.asciidoc[]
-include::monitoring-troubleshooting.asciidoc[]
+include::xpack-monitoring.asciidoc[]
+include::beats-details.asciidoc[leveloffset=+1]
+include::cluster-alerts.asciidoc[leveloffset=+1]
+include::elasticsearch-details.asciidoc[leveloffset=+1]
+include::kibana-details.asciidoc[leveloffset=+1]
+include::logstash-details.asciidoc[leveloffset=+1]
+include::monitoring-troubleshooting.asciidoc[leveloffset=+1]
diff --git a/docs/user/monitoring/kibana-details.asciidoc b/docs/user/monitoring/kibana-details.asciidoc
index 976ef456fcfa5..a5466f1418ae8 100644
--- a/docs/user/monitoring/kibana-details.asciidoc
+++ b/docs/user/monitoring/kibana-details.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[kibana-page]]
-== {kib} Monitoring Metrics
+= {kib} Monitoring Metrics
[subs="attributes"]
++++
{kib} Metrics
diff --git a/docs/user/monitoring/logstash-details.asciidoc b/docs/user/monitoring/logstash-details.asciidoc
index 1433a6a036ca8..9d7e3ce342e16 100644
--- a/docs/user/monitoring/logstash-details.asciidoc
+++ b/docs/user/monitoring/logstash-details.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[logstash-page]]
-== Logstash Monitoring Metrics
+= Logstash Monitoring Metrics
++++
Logstash Metrics
++++
diff --git a/docs/user/monitoring/monitoring-details.asciidoc b/docs/user/monitoring/monitoring-details.asciidoc
deleted file mode 100644
index 580e02d86155a..0000000000000
--- a/docs/user/monitoring/monitoring-details.asciidoc
+++ /dev/null
@@ -1,4 +0,0 @@
-[[monitoring-details]]
-== Viewing Monitoring Metrics
-
-See {kibana-ref}/monitoring-data.html[Viewing Monitoring Data in {kib}].
diff --git a/docs/user/monitoring/monitoring-kibana.asciidoc b/docs/user/monitoring/monitoring-kibana.asciidoc
index bb8b3e5d42851..47fbe1bea9f2a 100644
--- a/docs/user/monitoring/monitoring-kibana.asciidoc
+++ b/docs/user/monitoring/monitoring-kibana.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[monitoring-kibana]]
-=== Collect monitoring data using legacy collectors
+= Collect monitoring data using legacy collectors
++++
Legacy collection methods
++++
diff --git a/docs/user/monitoring/monitoring-metricbeat.asciidoc b/docs/user/monitoring/monitoring-metricbeat.asciidoc
index f2b32ba1de5dd..d18ebe95c7974 100644
--- a/docs/user/monitoring/monitoring-metricbeat.asciidoc
+++ b/docs/user/monitoring/monitoring-metricbeat.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[monitoring-metricbeat]]
-=== Collect {kib} monitoring data with {metricbeat}
+= Collect {kib} monitoring data with {metricbeat}
[subs="attributes"]
++++
Collect monitoring data with {metricbeat}
diff --git a/docs/user/monitoring/monitoring-troubleshooting.asciidoc b/docs/user/monitoring/monitoring-troubleshooting.asciidoc
index bdaa10990c3aa..5bec56df0398b 100644
--- a/docs/user/monitoring/monitoring-troubleshooting.asciidoc
+++ b/docs/user/monitoring/monitoring-troubleshooting.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[monitor-troubleshooting]]
-== Troubleshooting monitoring in {kib}
+= Troubleshooting monitoring in {kib}
++++
Troubleshooting
++++
@@ -9,7 +9,7 @@ Use the information in this section to troubleshoot common problems and find
answers for frequently asked questions related to the {kib} {monitor-features}.
[float]
-=== Cannot view the cluster because the license information is invalid
+== Cannot view the cluster because the license information is invalid
*Symptoms:*
@@ -24,7 +24,7 @@ To resolve this issue, upgrade {kib} to 6.3 or later. See
{stack-ref}/upgrading-elastic-stack.html[Upgrading the {stack}].
[float]
-=== {filebeat} index is corrupt
+== {filebeat} index is corrupt
*Symptoms:*
@@ -41,7 +41,7 @@ text fields by default.
[float]
-=== No monitoring data is visible in {kib}
+== No monitoring data is visible in {kib}
*Symptoms:*
diff --git a/docs/user/monitoring/viewing-metrics.asciidoc b/docs/user/monitoring/viewing-metrics.asciidoc
index 6203565c3fe93..f35caea025cdd 100644
--- a/docs/user/monitoring/viewing-metrics.asciidoc
+++ b/docs/user/monitoring/viewing-metrics.asciidoc
@@ -1,6 +1,6 @@
[role="xpack"]
[[monitoring-data]]
-=== View monitoring data in {kib}
+= View monitoring data in {kib}
++++
View monitoring data
++++
diff --git a/docs/user/monitoring/xpack-monitoring.asciidoc b/docs/user/monitoring/xpack-monitoring.asciidoc
new file mode 100644
index 0000000000000..c3aafe7f90db9
--- /dev/null
+++ b/docs/user/monitoring/xpack-monitoring.asciidoc
@@ -0,0 +1,26 @@
+[role="xpack"]
+[[xpack-monitoring]]
+= Stack Monitoring
+
+[partintro]
+--
+
+The {kib} {monitor-features} serve two separate purposes:
+
+. To visualize monitoring data from across the {stack}. You can view health and
+performance data for {es}, {ls}, and Beats in real time, as well as analyze past
+performance.
+. To monitor {kib} itself and route that data to the monitoring cluster.
+
+If you enable monitoring across the {stack}, each {es} node, {ls} node, {kib}
+instance, and Beat is considered unique based on its persistent
+UUID, which is written to the <> directory when the node
+or instance starts.
+
+NOTE: Watcher must be enabled to view cluster alerts. If you have a Basic
+license, Top Cluster Alerts are not displayed.
+
+For more information, see <> and
+{ref}/monitor-elasticsearch-cluster.html[Monitor a cluster].
+
+--
\ No newline at end of file