Forum Discussion
Elastic Data Ingest: Demonstrate Your Skills
Hi, I'm a little confused as to where to look in order to answer Q6? Any help greatly appreciated!
You've answered Q5, so you know the parent process id (ppid). You just need to search for events that have that value as the process id (pid).
So I've gone into the Process id (pid) and selected that particular value, expanded it but still can't find the process associated with the (pid)?
