[Auditbeat] Socket metricset#8834

Merged

cwurm merged 38 commits intoelastic:feature-auditbeat-hostfrom

cwurm:sockets_metricset

Nov 30, 2018

Commits on Nov 21, 2018

Change to xxhash.
Christoph Wurm
committed
Add sockets metricset and users info.
Christoph Wurm
committed
Error handling
Christoph Wurm
committed
Add enrichment with RPC services to sockets.
Christoph Wurm
committed
Addd diffs to sockets.
Christoph Wurm
committed
Unify status field values.
Christoph Wurm
committed
Fix import order.
Christoph Wurm
committed
Roll back changes to connection in socket.go
Christoph Wurm
committed
Remove dublicate import.
Christoph Wurm
committed
Correct sockets config.
Christoph Wurm
committed
Small fixes.
Christoph Wurm
committed
data.json for sockets metricset.
Christoph Wurm
committed
Fix import order.
Christoph Wurm
committed
Working RPC enrichment.
Christoph Wurm
committed
Remove RPC enrichment.
Christoph Wurm
committed
Unit test for sockets.
Christoph Wurm
committed
System test for sockets.
Christoph Wurm
committed
Update fields.yml.
Christoph Wurm
committed
Small fixes.
Christoph Wurm
committed
Move user information to separate PR.
Christoph Wurm
committed
Add comments to NetlinkSession.
Christoph Wurm
committed
Rename metricset to socket.
Christoph Wurm
committed
Move reused Metricbeat functionality to helper package.
Christoph Wurm
committed
Revert unrelated changes.
Christoph Wurm
committed
Metricset factory for non-Linux systems.
Christoph Wurm
committed
Switch to single documents.
Christoph Wurm
committed
Add top-level ECS process information.
Christoph Wurm
committed
Change to PushMetricSetV2.
Christoph Wurm
committed
Working netlink subscription.
Christoph Wurm
committed
Switch back to Fetch metricset.
Christoph Wurm
committed
ECS fields.
Christoph Wurm
committed
Update fields.yml.
Christoph Wurm
committed
ECS field values for network.direction.
Christoph Wurm
committed

Commits on Nov 22, 2018

Be lenient with errors during ptable refresh.
Christoph Wurm
committed

Commits on Nov 30, 2018

Remove TCP state.
Christoph Wurm
committed
Change to top-level ECS fields only.
Christoph Wurm
committed
Remove bucket, report state every 1 hour.
Christoph Wurm
committed
Back out network.type from fields.ecs.yml and skip in test.
Christoph Wurm
committed