Hi,
I'm using configuration from your example here:
https://raw.githubusercontent.com/elastic/beats/7.12/deploy/kubernetes/auditbeat-kubernetes.yaml
only difference is:
output.logstash:
hosts: ["127.0.0.1:5044"]
currently i removed:
- add_process_metadata:
match_pids: ['process.pid']
include_fields: ['container.id']
Just let me know where I'll upload profile