Add process.pgid field for processes group id

docs/field-details.asciidoc

@@ -2026,6 +2026,17 @@ type: keyword
 
 example: `ssh`
 
+| extended
+
+// ===============================================================
+
+| process.pgid
+| Identifier of the group of processes the process belongs to.
+
+type: long
+
+
+
 | extended
 
 // ===============================================================

generated/beats/fields.ecs.yml

@@ -1518,6 +1518,10 @@
 
         Sometimes called program name or similar.'
       example: ssh
+    - name: pgid
+      level: extended
+      type: long
+      description: Identifier of the group of processes the process belongs to.
     - name: pid
       level: core
       type: long

generated/csv/fields.csv

@@ -194,6 +194,7 @@ os.version,keyword,extended,10.14.1,1.1.0-dev
 process.args,keyword,extended,"['ssh', '-l', 'user', '10.0.0.16']",1.1.0-dev
 process.executable,keyword,extended,/usr/bin/ssh,1.1.0-dev
 process.name,keyword,extended,ssh,1.1.0-dev
+process.pgid,long,extended,,1.1.0-dev
 process.pid,long,core,,1.1.0-dev
 process.ppid,long,extended,,1.1.0-dev
 process.start,date,extended,2016-05-23T08:05:34.853Z,1.1.0-dev

generated/ecs/ecs_flat.yml

@@ -2125,7 +2125,7 @@ process.args:
   ignore_above: 1024
   level: extended
   name: args
-  order: 3
+  order: 4
   short: Array of process arguments.
   type: keyword
 process.executable:
@@ -2135,7 +2135,7 @@ process.executable:
   ignore_above: 1024
   level: extended
   name: executable
-  order: 4
+  order: 5
   short: Absolute path to the process executable.
   type: keyword
 process.name:
@@ -2150,6 +2150,14 @@ process.name:
   order: 1
   short: Process name.
   type: keyword
+process.pgid:
+  description: Identifier of the group of processes the process belongs to.
+  flat_name: process.pgid
+  level: extended
+  name: pgid
+  order: 3
+  short: Identifier of the group of processes the process belongs to.
+  type: long
 process.pid:
   description: Process id.
   exmple: ssh
@@ -2173,7 +2181,7 @@ process.start:
   flat_name: process.start
   level: extended
   name: start
-  order: 7
+  order: 8
   short: The time the process started.
   type: date
 process.thread.id:
@@ -2182,7 +2190,7 @@ process.thread.id:
   flat_name: process.thread.id
   level: extended
   name: thread.id
-  order: 6
+  order: 7
   short: Thread ID.
   type: long
 process.title:
@@ -2194,7 +2202,7 @@ process.title:
   ignore_above: 1024
   level: extended
   name: title
-  order: 5
+  order: 6
   short: Process title.
   type: keyword
 process.working_directory:
@@ -2204,7 +2212,7 @@ process.working_directory:
   ignore_above: 1024
   level: extended
   name: working_directory
-  order: 8
+  order: 9
   short: The working directory of the process.
   type: keyword
 related.ip:

generated/ecs/ecs_nested.yml

@@ -2435,7 +2435,7 @@ process:
       ignore_above: 1024
       level: extended
       name: args
-      order: 3
+      order: 4
       short: Array of process arguments.
       type: keyword
     executable:
@@ -2445,7 +2445,7 @@ process:
       ignore_above: 1024
       level: extended
       name: executable
-      order: 4
+      order: 5
       short: Absolute path to the process executable.
       type: keyword
     name:
@@ -2460,6 +2460,14 @@ process:
       order: 1
       short: Process name.
       type: keyword
+    pgid:
+      description: Identifier of the group of processes the process belongs to.
+      flat_name: process.pgid
+      level: extended
+      name: pgid
+      order: 3
+      short: Identifier of the group of processes the process belongs to.
+      type: long
     pid:
       description: Process id.
       exmple: ssh
@@ -2483,7 +2491,7 @@ process:
       flat_name: process.start
       level: extended
       name: start
-      order: 7
+      order: 8
       short: The time the process started.
       type: date
     thread.id:
@@ -2492,7 +2500,7 @@ process:
       flat_name: process.thread.id
       level: extended
       name: thread.id
-      order: 6
+      order: 7
       short: Thread ID.
       type: long
     title:
@@ -2504,7 +2512,7 @@ process:
       ignore_above: 1024
       level: extended
       name: title
-      order: 5
+      order: 6
       short: Process title.
       type: keyword
     working_directory:
@@ -2514,7 +2522,7 @@ process:
       ignore_above: 1024
       level: extended
       name: working_directory
-      order: 8
+      order: 9
       short: The working directory of the process.
       type: keyword
   group: 2

generated/elasticsearch/6/template.json

@@ -918,6 +918,9 @@
               "ignore_above": 1024, 
               "type": "keyword"
             }, 
+            "pgid": {
+              "type": "long"
+            }, 
             "pid": {
               "type": "long"
             }, 

generated/elasticsearch/7/template.json

@@ -917,6 +917,9 @@
             "ignore_above": 1024, 
             "type": "keyword"
           }, 
+          "pgid": {
+            "type": "long"
+          }, 
           "pid": {
             "type": "long"
           }, 

generated/legacy/template.json

@@ -614,6 +614,9 @@
               "ignore_above": 1024,
               "type": "keyword"
             },
+            "pgid": {
+              "type": "long"
+            },
             "pid": {
               "type": "long"
             },

schema.json

@@ -1473,6 +1473,16 @@
         "required": false, 
         "type": "keyword"
       }, 
+      "process.pgid": {
+        "description": "Identifier of the group of processes the process belongs to.", 
+        "example": "", 
+        "footnote": "", 
+        "group": 2, 
+        "level": "extended", 
+        "name": "process.pgid", 
+        "required": false, 
+        "type": "long"
+      }, 
       "process.pid": {
         "description": "Process id.", 
         "example": "", 

schemas/process.yml

@@ -35,6 +35,12 @@
       description: >
         Process parent id.
 
+    - name: pgid
+      level: extended
+      type: long
+      description: >
+        Identifier of the group of processes the process belongs to.
+
     - name: args
       level: extended
       type: keyword

scripts/cmd/gocodegen/gocodegen.go

@@ -295,7 +295,7 @@ func goDataType(fieldName, elasticsearchDataType string) string {
 // abbreviations capitalizes common abbreviations.
 func abbreviations(abv string) string {
 	switch strings.ToLower(abv) {
-	case "id", "ppid", "pid", "mac", "ip", "iana", "uid", "ecs":
+	case "id", "ppid", "pid", "pgid", "mac", "ip", "iana", "uid", "ecs":
 		return strings.ToUpper(abv)
 	default:
 		return abv