diff --git a/stx-monitor-helm/stx-monitor-helm/manifests/monitor_manifest.yaml b/stx-monitor-helm/stx-monitor-helm/manifests/monitor_manifest.yaml
index c176617..a70a172 100644
--- a/stx-monitor-helm/stx-monitor-helm/manifests/monitor_manifest.yaml
+++ b/stx-monitor-helm/stx-monitor-helm/manifests/monitor_manifest.yaml
@@ -507,6 +507,14 @@ data:
             - type: kubernetes
               host: ${NODE_NAME}
               hints.enabled: true
+    extraVolumeMounts:
+      - name: root
+        mountPath: /hostfs
+        readOnly: true
+    extraVolumes:
+      - name: root
+        hostPath:
+          path: /
   source:
     type: tar
     location: http://172.17.0.1:8080/helm_charts/starlingx/metricbeat-1.6.0.tgz
@@ -701,6 +709,16 @@ data:
             type => 'beats'
           }
         }
+    filters:
+      main: |-
+        filter {
+          mutate {
+            gsub => [
+              # strip /hostfs prefix from mount points in metricbeat metrics
+              "[system][filesystem][mount_point]", "^/hostfs($|/)", "/"
+            ]
+          }
+        }
     ports:
       # influxdb port conflict, can't use 25826
       # - containerPort: 25826