[metricbeat][system] add swap field to system.process.memory metricset (#48334)

* [metricbeat][system] add swap field to system.process.memory metricset

* update docs

* update NOTICE.txt

* remove field mapping

* make changelog message more accurate

* revert removing of field mapping

* resolve PR comment

* Update metricbeat/module/system/process/_meta/fields.yml

Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com>

* make update

* update swap field ga version

---------

Co-authored-by: Colleen McGinnis <colleen.j.mcginnis@gmail.com>
(cherry picked from commit 90844ec)

Author: 2 people

changelog/fragments/1767864511-add-swap-field-to-system.process.memory-metric-set-in-metricbeats.yaml

@@ -0,0 +1,45 @@
+# REQUIRED
+# Kind can be one of:
+# - breaking-change: a change to previously-documented behavior
+# - deprecation: functionality that is being removed in a later release
+# - bug-fix: fixes a problem in a previous version
+# - enhancement: extends functionality but does not break or fix existing behavior
+# - feature: new functionality
+# - known-issue: problems that we are aware of in a given version
+# - security: impacts on the security of a product or a user’s deployment.
+# - upgrade: important information for someone upgrading from a prior version
+# - other: does not fit into any of the other categories
+kind: enhancement
+
+# REQUIRED for all kinds
+# Change summary; a 80ish characters long description of the change.
+summary: add swap field to system.process.memory metric set in metricbeat
+
+# REQUIRED for breaking-change, deprecation, known-issue
+# Long description; in case the summary is not enough to describe the change
+# this field accommodate a description without length limits.
+# description:
+
+# REQUIRED for breaking-change, deprecation, known-issue
+# impact:
+
+# REQUIRED for breaking-change, deprecation, known-issue
+# action:
+
+# REQUIRED for all kinds
+# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc.
+component: metricbeat
+
+# AUTOMATED
+# OPTIONAL to manually add other PR URLs
+# PR URL: A link the PR that added the changeset.
+# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added.
+# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number.
+# Please provide it if you are adding a fragment for a different PR.
+# pr: https://github.com/owner/repo/1234
+
+# AUTOMATED
+# OPTIONAL to manually add other issue URLs
+# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of).
+# If not present is automatically filled by the tooling with the issue linked to the PR number.
+# issue: https://github.com/owner/repo/1234

docs/reference/metricbeat/exported-fields-system.md

@@ -1048,6 +1048,14 @@ Memory-specific statistics per process.
     format: bytes
 
 
+**`system.process.memory.swap`** {applies_to}`stack: ga 8.19.11`
+:   The swap memory used by the process (supported only on Linux kernel version 2.6.34+).
+
+    type: long
+
+    format: bytes
+
+
 ## io [_io]
 
 Disk I/O Metrics, as forwarded from /proc/[PID]/io. Available on Linux only.

docs/reference/metricbeat/metricbeat-metricset-system-process.md

@@ -396,7 +396,8 @@ Here is an example document generated by this metricset:
                     "pct": 0.0008
                 },
                 "share": 16252928,
-                "size": 1886003200
+                "size": 1886003200,
+                "swap": 1302528
             },
             "num_threads": 9,
             "state": "sleeping"

metricbeat/module/system/fields.go

@@ -288,7 +288,8 @@
                     "pct": 0.0008
                 },
                 "share": 16252928,
-                "size": 1886003200
+                "size": 1886003200,
+                "swap": 1302528
             },
             "num_threads": 9,
             "state": "sleeping"
@@ -297,4 +298,4 @@
     "user": {
         "name": "alexk"
     }
-}
+}

metricbeat/module/system/process/_meta/data.json

@@ -111,6 +111,13 @@
           format: bytes
           description: >
             The shared memory the process uses.
+        - name: swap
+          type: long
+          format: bytes
+          version:
+              ga: 8.19.11
+          description: >
+            The swap memory used by the process (supported only on Linux kernel version 2.6.34+).
     - name: io
       type: group
       description: Disk I/O Metrics, as forwarded from /proc/[PID]/io. Available on Linux only.