PROCESS_STATE_STOPPED Event Type

Indicates a process has moved from the STOPPING state to theSTOPPED state.

Name: PROCESS_STATE_STOPPED

Subtype Of: PROCESS_STATE

Body Description

This body is a token set. It has the default set of key/value pairsplus an additional pid key. pid represents the UNIX processid of the process that was started. For example:

  1. processname:cat groupname:cat from_state:STOPPING pid:2766