Describe the enhancement:
Currently add_process_metadata processor does not enrich event with process owner.

Describe a specific use case for the enhancement or feature:
Knowledge of the process owner is quite useful when Packetbeat is used as traffic monitor and control solution