auditbeat: split system process module (#41868) (#41879)

This splits the common module parts and the gosysinfo backend. Needed for an upcoming PR which adds a quark backend, so I'm splitting this earlier to make review easier. Only functional case for this PR is add missing `bucket.Close()` calls in New(). (cherry picked from commit 5a85598) Co-authored-by: Christiano Haesbaert <[email protected]>
elastic · Dec 3, 2024 · 64fe35f · 64fe35f
1 parent c6306c4
commit 64fe35f
Show file tree

Hide file tree

Showing 4 changed files with 485 additions and 443 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -255,6 +255,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 - Add linux capabilities to processes in the system/process. {pull}37453[37453]
 - Add linux capabilities to processes in the system/process. {pull}37453[37453]
 - Add process.entity_id, process.group.name and process.group.id in add_process_metadata processor. Make fim module with kprobes backend to always add an appropriately configured add_process_metadata processor to enrich file events {pull}38776[38776]
+- Split module/system/process into common and provider bits. {pull}41868[41868]
 
 *Auditbeat*