I have add these in filebeat.yml, (version is 7.9)
I try every kinds of these keywords , but i still receive the process.name = "kibana" event.
why ?
Please kindly help
#========
Drop event
processors:
- drop_event:
when:
or:
- equals:
process.name: "filebeat"
- equals:
system.process.name: "kibana"
- equals:
system.process.name: "^kibana.*"
- equals:
process.name: kibana
- equals:
process.name: "kibana"
#===================