in elastic in a document I would like to see the number of processes matching a given regex. For instance if there are 2 processes running with a specific name, than in a document I would like to see a "numberOfInstances"-like field with value 2.
Is it possible to achieve this with metricbeat?
My initial goal is to set up an alerting, whether a process fitting the regex is running at all, or whether there are too many running.
I think this type of task is would be best to do after the data is contained in ES. So using a queries and aggregations to detect this condition would be good (and Alerting can help you automate this).
There isn't anything in Metricbeat alone that can do the kind of pre-aggregation.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.