# Metricbeat - Whitelist Processes from include\_top\_n

**URL:** <https://discuss.elastic.co/t/metricbeat-whitelist-processes-from-include-top-n/146885>\
**Category:** Logstash\
**Created:** [August 31, 2018, 3:08pm UTC](https://discuss.elastic.co/t/metricbeat-whitelist-processes-from-include-top-n/146885 "2018-08-31T15:08:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![KRasekhi](https://avatars.discourse-cdn.com/v4/letter/k/85e7bf/32.png) [@KRasekhi](https://discuss.elastic.co/u/KRasekhi)\
**Post date:** [August 31, 2018, 3:08pm UTC](https://discuss.elastic.co/t/metricbeat-whitelist-processes-from-include-top-n/146885/1 "2018-08-31T15:08:56Z")

</div>

Is there anyway to whitelist processes to be collected in addition to -

process.include\_top\_n:  
by\_cpu: 10  
by\_memory: 10

without having to create an additional system module?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 4, 2018, 6:44am UTC](https://discuss.elastic.co/t/metricbeat-whitelist-processes-from-include-top-n/146885/2 "2018-09-04T06:44:21Z")

</div>

I suggest you ask this in a Metricbeat group as your Logstash seems completely unrelated to Logstash.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 2, 2018, 6:44am UTC](https://discuss.elastic.co/t/metricbeat-whitelist-processes-from-include-top-n/146885/3 "2018-10-02T06:44:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.