From 97eb93d479400b79a399ff296ca2350eef522e47 Mon Sep 17 00:00:00 2001 From: Jaime Soriano Pastor Date: Sat, 26 Jan 2019 13:54:19 +0100 Subject: [PATCH] Explicitly mention that pgid refers to a group of processes --- README.md | 2 +- code/go/ecs/process.go | 2 +- fields.yml | 2 +- schema.json | 2 +- schemas/process.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 994e6f7a73..fa4ad47f8e 100644 --- a/README.md +++ b/README.md @@ -403,7 +403,7 @@ These fields contain information about a process. These fields can help you corr | process.pid | Process id. | core | long | | | process.name | Process name.
Sometimes called program name or similar. | extended | keyword | `ssh` | | process.ppid | Process parent id. | extended | long | | -| process.pgid | Process group id. | extended | long | | +| process.pgid | Identifier of the group of processes the process belongs to. | extended | long | | | process.args | Process arguments.
May be filtered to protect sensitive information. | extended | keyword | `['ssh', '-l', 'user', '10.0.0.16']` | | process.executable | Absolute path to the process executable. | extended | keyword | `/usr/bin/ssh` | | process.title | Process title.
The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | extended | keyword | | diff --git a/code/go/ecs/process.go b/code/go/ecs/process.go index 990213ebe2..619d454307 100644 --- a/code/go/ecs/process.go +++ b/code/go/ecs/process.go @@ -38,7 +38,7 @@ type Process struct { // Process parent id. PPID int64 `ecs:"ppid"` - // Process group id. + // Identifier of the group of processes the process belongs to. PGID int64 `ecs:"pgid"` // Process arguments. diff --git a/fields.yml b/fields.yml index c3a0f1cc06..b280ae04b1 100644 --- a/fields.yml +++ b/fields.yml @@ -1264,7 +1264,7 @@ level: extended type: long description: > - Process group id. + Identifier of the group of processes the process belongs to. - name: args level: extended diff --git a/schema.json b/schema.json index bbc1493222..60ef4f621c 100644 --- a/schema.json +++ b/schema.json @@ -1474,7 +1474,7 @@ "type": "keyword" }, "process.pgid": { - "description": "Process group id.", + "description": "Identifier of the group of processes the process belongs to.", "example": "", "footnote": "", "group": 2, diff --git a/schemas/process.yml b/schemas/process.yml index 88c2e448a7..756122e180 100644 --- a/schemas/process.yml +++ b/schemas/process.yml @@ -36,7 +36,7 @@ level: extended type: long description: > - Process group id. + Identifier of the group of processes the process belongs to. - name: args level: extended