Create an alert on a process\service that stopped running

[Mor123460 (M.v)]

Hey.
As i understand, there isn't a log created when a process stop running, because it's simply disappearing.
So, how can i create an alert on a log with specific command line that stopped arriving from a metricbeat?
Or if there any configuration for the module file to alert me when a specific processes with a specific command line can't be found by the metricbeat?
Also, when we monitor services, even though I'm getting a log when the service is stopped, the metricbeat will always report that, so, how can i create an alert for simply the first event and not all the time? (I have configure my metricbeat to run every 1m and not every 10s)
Basically i want to create a KeepAlive, with visualization and alerts on a specific processes and services.