It looks like there is a bug with respect to the 'procs' setting in topbeat.yml.
We followed the instructions on https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-configuration.html and we use the following regular expression for the 'procs' setting: procs: ["^$"] (as we're not interested in monitoring processes). After restarting the topbeat service all processes are still monitored.
When we change the setting to procs: ["^mongod$"] only the mongod process is monitored. This works as expected.
It looks like the '^$' regex is not correctly parsed?
We're using debian.
Thanks in advance.