[Auditbeat] System module 6.7 / 7.0

[cwurm]

Meta issue to track the features making it into a release of the Auditbeat system module.

Further tasks are tracked in the backlog issue.

General

• Kibana dashboards (done: [Auditbeat] System module dashboards #10511)
• Add entity IDs (done: [Auditbeat] System module: Add entity_id fields #10500)

1. Package

• Initial implementation (done: [Auditbeat Host] Add host, packages, and processes metricsets #8436)
• RPM support (done: Add RPM packaging #9092)
• Rename to package, implement scheduled state reporting, and change to single documents (done: [Auditbeat] System module: Update and re-enable package dataset #10225)
• Detect package updates (done: [Auditbeat] System module: Detect package updates #10508)
• Documentation (done: [Auditbeat] System module documentation #9512)

2. Process

• Add owner information (uid/gid at least) (addded to elastic/go-sysinfo: Add user information to process go-sysinfo#34, done: [Auditbeat] Add user information to processes #9963)

4. Login

• Implement metricset (done: [Auditbeat] Login metricset #9327)
• Tests with sample /var/log/wtmp file (done: [Auditbeat] Login metricset #9327)

[elasticmachine]

Pinging @elastic/secops

[cwurm]

Updated and moved items to the backlog.