[metricbeat][system] add swap field to system.process.memory metricset #48334

stefans-elastic · 2026-01-08T10:34:48Z

Proposed commit message

See title

Checklist

My code follows the style guidelines of this project
I have commented my code, particularly in hard-to-understand areas
I have made corresponding changes to the documentation
I have made corresponding change to the default configuration files
I have added tests that prove my fix is effective or that my feature works. Where relevant, I have used the stresstest.sh script to run them under stress conditions and race detector to verify their stability.
I have added an entry in ./changelog/fragments using the changelog tool.

Disruptive User Impact

Author's Checklist

[ ]

How to test this PR locally

Related issues

Use cases

Screenshots

On Linux

Some validation of the output

As is visible on the screenshot process with PID 43 and 90 really used no swap memory. And process with PID 640 used 1272 kB of swap memory (which is 1302528 bytes) and it matches what is shown in Kibana.

To make sure nothing breaks on other platforms I've run a test on macos (it is working fine, swap field is null on other than Linux platforms)

Logs

github-actions · 2026-01-08T10:34:58Z

🤖 GitHub comments

Just comment with:

run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

mergify · 2026-01-08T10:35:24Z

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @stefans-elastic? 🙏.
For such, you'll need to label your PR with:

The upcoming major version of the Elastic Stack
The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

backport-8./d is the label to automatically backport to the 8./d branch. /d is the digit
backport-active-all is the label that automatically backports to all active branches.
backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.

go.mod

orestisfl

You need to run make update

github-actions · 2026-01-08T11:33:43Z

🔍 Preview links for changed docs

metricbeat/module/system/process/_meta/fields.yml

ishleenk17

1 nit, otherwise looks good.

mergify · 2026-01-09T05:52:06Z

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b process-swap-memory upstream/process-swap-memory
git merge upstream/main
git push upstream process-swap-memory

metricbeat/module/system/process/_meta/fields.yml

docs/reference/metricbeat/exported-fields-system.md

Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com>

stefans-elastic · 2026-01-12T12:47:24Z

After giving this some additional thought—and considering that version 9.4 is still quite a while away—should we consider backporting this change, perhaps to 9.3?

cc @ishleenk17

ishleenk17 · 2026-01-19T10:32:48Z

After giving this some additional thought—and considering that version 9.4 is still quite a while away—should we consider backporting this change, perhaps to 9.3?

cc @ishleenk17

@stefans-elastic : Since the request came from the customer who is on 8.19.
It should be ok to backport it to 8.19 and other active branches.

stefans-elastic · 2026-01-19T12:14:57Z

/test

github-actions · 2026-01-20T17:10:48Z

@Mergifyio backport 8.19 9.1 9.2 9.3

mergify · 2026-01-20T17:10:54Z

backport 8.19 9.1 9.2 9.3

✅ Backports have been created

Details

#48482 [8.19](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset has been created for branch 8.19 but encountered conflicts

Cherry-pick of 90844ec has failed:

On branch mergify/bp/8.19/pr-48334
Your branch is up to date with 'origin/8.19'.

You are currently cherry-picking commit 90844ec02.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	new file:   changelog/fragments/1767864511-add-swap-field-to-system.process.memory-metric-set-in-metricbeats.yaml
	modified:   metricbeat/module/system/process/_meta/data.json
	modified:   metricbeat/module/system/process/_meta/fields.yml

Unmerged paths:
  (use "git add/rm <file>..." as appropriate to mark resolution)
	both modified:   NOTICE.txt
	deleted by us:   docs/reference/metricbeat/exported-fields-system.md
	deleted by us:   docs/reference/metricbeat/metricbeat-metricset-system-process.md
	both modified:   go.mod
	both modified:   go.sum
	both modified:   metricbeat/module/system/fields.go

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

#48483 [9.1](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset has been created for branch 9.1 but encountered conflicts

Cherry-pick of 90844ec has failed:

On branch mergify/bp/9.1/pr-48334
Your branch is up to date with 'origin/9.1'.

You are currently cherry-picking commit 90844ec02.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	new file:   changelog/fragments/1767864511-add-swap-field-to-system.process.memory-metric-set-in-metricbeats.yaml
	modified:   docs/reference/metricbeat/exported-fields-system.md
	modified:   docs/reference/metricbeat/metricbeat-metricset-system-process.md
	modified:   metricbeat/module/system/process/_meta/data.json
	modified:   metricbeat/module/system/process/_meta/fields.yml

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   NOTICE.txt
	both modified:   go.mod
	both modified:   go.sum
	both modified:   metricbeat/module/system/fields.go

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

#48485 [9.2](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset has been created for branch 9.2 but encountered conflicts

Cherry-pick of 90844ec has failed:

On branch mergify/bp/9.2/pr-48334
Your branch is up to date with 'origin/9.2'.

You are currently cherry-picking commit 90844ec02.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	new file:   changelog/fragments/1767864511-add-swap-field-to-system.process.memory-metric-set-in-metricbeats.yaml
	modified:   docs/reference/metricbeat/exported-fields-system.md
	modified:   docs/reference/metricbeat/metricbeat-metricset-system-process.md
	modified:   metricbeat/module/system/process/_meta/data.json
	modified:   metricbeat/module/system/process/_meta/fields.yml

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   NOTICE.txt
	both modified:   go.mod
	both modified:   go.sum
	both modified:   metricbeat/module/system/fields.go

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

#48486 [9.3](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset has been created for branch 9.3 but encountered conflicts

Cherry-pick of 90844ec has failed:

On branch mergify/bp/9.3/pr-48334
Your branch is up to date with 'origin/9.3'.

You are currently cherry-picking commit 90844ec02.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   NOTICE.txt
	new file:   changelog/fragments/1767864511-add-swap-field-to-system.process.memory-metric-set-in-metricbeats.yaml
	modified:   docs/reference/metricbeat/exported-fields-system.md
	modified:   docs/reference/metricbeat/metricbeat-metricset-system-process.md
	modified:   metricbeat/module/system/fields.go
	modified:   metricbeat/module/system/process/_meta/data.json
	modified:   metricbeat/module/system/process/_meta/fields.yml

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   go.mod
	both modified:   go.sum

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

#48334) * [metricbeat][system] add swap field to system.process.memory metricset * update docs * update NOTICE.txt * remove field mapping * make changelog message more accurate * revert removing of field mapping * resolve PR comment * Update metricbeat/module/system/process/_meta/fields.yml Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com> * make update * update swap field ga version --------- Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com> (cherry picked from commit 90844ec) # Conflicts: # NOTICE.txt # docs/reference/metricbeat/exported-fields-system.md # docs/reference/metricbeat/metricbeat-metricset-system-process.md # go.mod # go.sum # metricbeat/module/system/fields.go

#48334) * [metricbeat][system] add swap field to system.process.memory metricset * update docs * update NOTICE.txt * remove field mapping * make changelog message more accurate * revert removing of field mapping * resolve PR comment * Update metricbeat/module/system/process/_meta/fields.yml Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com> * make update * update swap field ga version --------- Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com> (cherry picked from commit 90844ec) # Conflicts: # NOTICE.txt # go.mod # go.sum # metricbeat/module/system/fields.go

#48334) * [metricbeat][system] add swap field to system.process.memory metricset * update docs * update NOTICE.txt * remove field mapping * make changelog message more accurate * revert removing of field mapping * resolve PR comment * Update metricbeat/module/system/process/_meta/fields.yml Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com> * make update * update swap field ga version --------- Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com> (cherry picked from commit 90844ec) # Conflicts: # go.mod # go.sum

stefans-elastic · 2026-01-21T11:44:24Z

I've gotten a question:
the intention was to backport this PR to 8.19, 9.1, 9.2, 9.3 (the customer who requested this feature is on 8.19).
The problem is that CI checks on backport PRs for 8.19, 9.1 and 9.2 fail with errors:

FAILED module/system/test_system.py::Test::test_process_unix - Exception: Keys:
['system.process.cgroup.memory.pressure.some.10.pct', 'system.process.cgroup.memory.pressure.some.60.pct', 'system.process.cgroup.memory.pressure.some.300.pct', 'system.process.cgroup.memory.pressure.some.total', 'system.process.cgroup.memory.pressure.full.10.pct', 'system.process.cgroup.memory.pressure.full.60.pct', 'system.process.cgroup.memory.pressure.full.300.pct', 'system.process.cgroup.memory.pressure.full.total']

The error is due to the fact that this PR hasn't bee backported and the functionality is available only in 9.3+.

I don't see a way to backport my PR without bringing the changes from elastic-agent-system-metrics that power #48054 and resolve CI fails.

I assume we have 2 options here:

Backport [Metricbeat] Add memory PSI metrics for cgroupv2 #48054 to 8.19, 9.1, 9.2 (since the PR hasn't been backported yet this seems undesirable).
Backport this current PR to 9.3 only.

Or maybe I'm not seeing a way to backport this PR without bringing changes from elastic-agent-system-metrics that power #48054.

Please advise with the best course of action here.

[metricbeat][system] add swap field to system.process.memory metricset

806c4d6

stefans-elastic added the enhancement label Jan 8, 2026

stefans-elastic requested a review from a team as a code owner January 8, 2026 10:34

stefans-elastic added the Metricbeat Metricbeat label Jan 8, 2026

stefans-elastic requested a review from a team as a code owner January 8, 2026 10:34

stefans-elastic added the Team:Obs-InfraObs Label for the Observability Infrastructure Monitoring team label Jan 8, 2026

stefans-elastic requested review from leehinman and orestisfl January 8, 2026 10:34

botelastic bot added needs_team Indicates that the issue/PR needs a Team:* label and removed needs_team Indicates that the issue/PR needs a Team:* label labels Jan 8, 2026

mergify bot assigned stefans-elastic Jan 8, 2026

stefans-elastic commented Jan 8, 2026

View reviewed changes

go.mod Show resolved Hide resolved

Merge branch 'main' into process-swap-memory

27b8cd8

orestisfl reviewed Jan 8, 2026

View reviewed changes

update docs

974d16d

stefans-elastic requested a review from a team as a code owner January 8, 2026 11:31

update NOTICE.txt

c1b3ff9

mykola-elastic approved these changes Jan 8, 2026

View reviewed changes

stefans-elastic added 2 commits January 8, 2026 16:07

remove field mapping

c1dcff1

make changelog message more accurate

2e58edf

tommyers-elastic approved these changes Jan 8, 2026

View reviewed changes

stefans-elastic added 2 commits January 8, 2026 17:18

revert removing of field mapping

702f064

Merge branch 'main' into process-swap-memory

a167714

ishleenk17 reviewed Jan 8, 2026

View reviewed changes

metricbeat/module/system/process/_meta/fields.yml Outdated Show resolved Hide resolved

ishleenk17 approved these changes Jan 8, 2026

View reviewed changes

resolve PR comment

cfd4e73

orestisfl approved these changes Jan 9, 2026

View reviewed changes

tommyers-elastic approved these changes Jan 9, 2026

View reviewed changes

mauri870 approved these changes Jan 9, 2026

View reviewed changes

colleenmcginnis reviewed Jan 9, 2026

View reviewed changes

metricbeat/module/system/process/_meta/fields.yml Show resolved Hide resolved

docs/reference/metricbeat/exported-fields-system.md Outdated Show resolved Hide resolved

stefans-elastic and others added 3 commits January 12, 2026 10:05

Update metricbeat/module/system/process/_meta/fields.yml

9c2c6c2

Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com>

make update

c9edc5d

Merge branch 'main' into process-swap-memory

1a8afbd

stefans-elastic requested a review from colleenmcginnis January 12, 2026 10:17

stefans-elastic added the backport-active-all Automated backport with mergify to all the active branches label Jan 19, 2026

stefans-elastic added 2 commits January 19, 2026 13:08

update swap field ga version

07c8393

Merge branch 'main' into process-swap-memory

7d21219

stefans-elastic added 2 commits January 20, 2026 09:51

Merge branch 'main' into process-swap-memory

0a18952

Merge branch 'main' into process-swap-memory

a2afeff

colleenmcginnis approved these changes Jan 20, 2026

View reviewed changes

stefans-elastic merged commit 90844ec into elastic:main Jan 20, 2026
206 checks passed

mergify bot mentioned this pull request Jan 20, 2026

[8.19](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset #48482

Open

6 tasks

mergify bot mentioned this pull request Jan 20, 2026

[9.1](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset #48483

Open

6 tasks

mergify bot mentioned this pull request Jan 20, 2026

[9.2](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset #48485

Open

6 tasks

mergify bot mentioned this pull request Jan 20, 2026

[9.3](backport #48334) [metricbeat][system] add swap field to system.process.memory metricset #48486

Open

6 tasks

stefans-elastic mentioned this pull request Jan 23, 2026

[system][process] add swap field to memory group elastic/integrations#16754

Merged

5 tasks

[metricbeat][system] add swap field to system.process.memory metricset #48334

[metricbeat][system] add swap field to system.process.memory metricset #48334

Uh oh!

Conversation

stefans-elastic commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Proposed commit message

Checklist

Disruptive User Impact

Author's Checklist

How to test this PR locally

Related issues

Use cases

Screenshots

Logs

Uh oh!

github-actions bot commented Jan 8, 2026

🤖 GitHub comments

Uh oh!

mergify bot commented Jan 8, 2026

Uh oh!

Uh oh!

orestisfl left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Preview links for changed docs

Uh oh!

Uh oh!

ishleenk17 left a comment

Choose a reason for hiding this comment

Uh oh!

mergify bot commented Jan 9, 2026

Uh oh!

Uh oh!

Uh oh!

stefans-elastic commented Jan 12, 2026

Uh oh!

ishleenk17 commented Jan 19, 2026

Uh oh!

stefans-elastic commented Jan 19, 2026

Uh oh!

Uh oh!

github-actions bot commented Jan 20, 2026

Uh oh!

mergify bot commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Backports have been created

Uh oh!

stefans-elastic commented Jan 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

stefans-elastic commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

mergify bot commented Jan 20, 2026 •

edited

Loading