Docs
Starting in version 7.16, this experimental functionality has been removed. You should use the journald input in Filebeat instead.
Journalbeat Reference [7.15]
»
Exported fields
»
Process fields
« Kubernetes fields
Monitor Journalbeat »
Process fields
edit
Process metadata fields
process.exe
type: alias
alias to: process.executable
Most Popular
Get Started with Elasticsearch: Video
Intro to Kibana: Video
ELK for Logs & Metrics: Video