Forum Discussion
Dark_Knight666
Silver I
Silver IElastic Data Ingest: Demonstrate Your Skills
Hi, I'm a little confused as to where to look in order to answer Q6? Any help greatly appreciated!
barney
Bronze III
Bronze IIIYou've answered Q5, so you know the parent process id (ppid). You just need to search for events that have that value as the process id (pid).
Dark_Knight666Silver I
Silver ISo I've gone into the Process id (pid) and selected that particular value, expanded it but still can't find the process associated with the (pid)?
