Skip to content

Commit

Permalink
[8.15](backport #41868) auditbeat: split system process module (#41877)
Browse files Browse the repository at this point in the history
* auditbeat: split system process module (#41868)

This splits the common module parts and the gosysinfo backend.
Needed for an upcoming PR which adds a quark backend, so I'm splitting this
earlier to make review easier.

Only functional case for this PR is add missing `bucket.Close()` calls in New().

(cherry picked from commit 5a85598)


Co-authored-by: Christiano Haesbaert <[email protected]>
  • Loading branch information
mergify[bot] and haesbaert authored Dec 5, 2024
1 parent f025174 commit fcc1995
Show file tree
Hide file tree
Showing 4 changed files with 487 additions and 442 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -148,6 +148,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
- Add linux capabilities to processes in the system/process. {pull}37453[37453]
- Add linux capabilities to processes in the system/process. {pull}37453[37453]
- Add process.entity_id, process.group.name and process.group.id in add_process_metadata processor. Make fim module with kprobes backend to always add an appropriately configured add_process_metadata processor to enrich file events {pull}38776[38776]
- Split module/system/process into common and provider bits. {pull}41868[41868]

*Auditbeat*

Expand Down
Loading

0 comments on commit fcc1995

Please sign in to comment.