metricsbeat collect source field for k8s event

[vsxen]

apiVersion: v1
count: 5832
eventTime: null
kind: Event
....
# there
source:
  component: kubelet
  host: demo
type: Warning

I want to know event in which node

https://github.com/elastic/beats/blob/master/metricbeat/module/kubernetes/event/event.go#L167

[andresrc]

Can you provide more information and/or context? Thanks

[elasticmachine]

Pinging @elastic/integrations-platforms (Team:Platforms)

[vsxen]

@andresrc
Metricsbeat support collect k8s event from APIServer, but But some fields is missing.
Ex:
kubernetes.event.source.host

Ref
https://www.elastic.co/guide/en/beats/metricbeat/7.x/exported-fields-kubernetes.html#_event_4
https://www.elastic.co/guide/en/beats/metricbeat/7.x/metricbeat-metricset-kubernetes-event.html

beats/metricbeat/module/kubernetes/event/event.go

Lines 167 to 180 in b131405

	output := common.MapStr{
	"message": eve.Message,
	"reason": eve.Reason,
	"type": eve.Type,
	"count": eve.Count,
	"involved_object": common.MapStr{
	"api_version": eve.InvolvedObject.APIVersion,
	"resource_version": eve.InvolvedObject.ResourceVersion,
	"name": eve.InvolvedObject.Name,
	"kind": eve.InvolvedObject.Kind,
	"uid": eve.InvolvedObject.UID,
	},
	"metadata": eventMeta,
	}

[ChrsMark]

I think this is a valid request. I opened a PR (#17209) for this.