You can configure an Elastic Agent policy to capture up to five environment variables (
env vars). Captured environment variables are associated with process events and recorded in the
- Env var names must be no more than 63 characters, and env var values must be no more than 1023 characters. Values outside these limits are silently ignored.
- Env var names are case sensitive in Linux.
To set up environment variable capture for an Elastic Agent policy:
- Go to Manage → Policies.
- Select an Elastic Agent policy.
- Click Show advanced settings.
Scroll down or search for
Enter the names of env vars you want to capture, separated by commas. For example:
- Click Save.