IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

« Operating System Fields Related Fields »

› ›

Process Fields

edit

Process Fields

edit

These fields contain information about a process.

These fields can help you correlate metrics information with a process id/name from a log message. The process.pid often stays in the metric itself and is copied to the global field for correlation.

Process Field Details

edit

Field	Description	Level
process.args	Array of process arguments. May be filtered to protect sensitive information. type: keyword example: `['ssh', '-l', 'user', '10.0.0.16']`	extended
process.executable	Absolute path to the process executable. type: keyword example: `/usr/bin/ssh`	extended
process.name	Process name. Sometimes called program name or similar. type: keyword example: `ssh`	extended
process.pid	Process id. type: long example: `4242`	core
process.ppid	Parent process' pid. type: long example: `4241`	extended
process.start	The time the process started. type: date example: `2016-05-23T08:05:34.853Z`	extended
process.thread.id	Thread ID. type: long example: `4242`	extended
process.title	Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. type: keyword	extended
process.working_directory	The working directory of the process. type: keyword example: `/home/alice`	extended

« Operating System Fields Related Fields »