Starting in version 7.16, this experimental functionality has been removed. You should use the journald input in Filebeat instead.
« Kubernetes fields Monitor Journalbeat »
Elastic Docs ›Journalbeat Reference [7.15] ›Exported fields

Process fields

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Process fields

edit

Process metadata fields

process.exe

type: alias

alias to: process.executable

« Kubernetes fields Monitor Journalbeat »