add_process_metadata - process.env enrichment not working

[andrewkroh]

When restricted_fields: true is enabled then the process.env.* fields should be populated. But that is not working.

    - add_process_metadata:
        match_pids: [process.pid]
        overwrite_keys: true
        ignore_missing: true
        cgroup_prefixes: []
        cgroup_regex: '([0-9a-f]{64})(\.scope)?$'
        restricted_fields: true

The code that collects the metadata does not fetch any environment variables.

beats/libbeat/processors/add_process_metadata/gosysinfo_provider.go

Lines 51 to 61 in 16e2989

	r := processMetadata{
	name: info.Name,
	args: info.Args,
	title: strings.Join(info.Args, " "),
	exe: info.Exe,
	pid: info.PID,
	ppid: info.PPID,
	startTime: info.StartTime,
	username: username,
	userid: userid,
	}

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)