Add input metrics to Auditbeat
- Dominant language
- Go
- Stars
- 12.7k
- Forks
- 5k
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 364
Description
Set up Auditbeat to use libbeat's [`inputmon` package](https://github.com/elastic/beats/tree/main/libbeat/monitoring/inputmon) to collect metrics, as is already done for Packetbeat and Filebeat.
It will be important to ensure that a suitable unique, persistent ID is used to refer to each Auditbeat process.
Make sure the [Agent integration](https://github.com/elastic/integrations/tree/main/packages/elastic_agent) pulls these metrics from Auditbeat.
### Use case:
Once Auditbeat is set up for metric collection, the [`system.socket` dataset](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-dataset-system-socket.html) can be instrumented to better understand memory usage in certain [reported](https://github.com/elastic/sdh-beats/issues/3696) cases.
Contributor guide
Assessment
This issue has not been assessed yet.