Metricbeat - Number of processes based on patterns

Elastic Stack Beats
1

Hi,

in elastic in a document I would like to see the number of processes matching a given regex. For instance if there are 2 processes running with a specific name, than in a document I would like to see a "numberOfInstances"-like field with value 2.
Is it possible to achieve this with metricbeat?
My initial goal is to set up an alerting, whether a process fitting the regex is running at all, or whether there are too many running.

Thanks,
Balázs

2

I think this type of task is would be best to do after the data is contained in ES. So using a queries and aggregations to detect this condition would be good (and Alerting can help you automate this).

There isn't anything in Metricbeat alone that can do the kind of pre-aggregation.