IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Beats version 8.17.7
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Beats version 8.17.7
editKnown issues
edit-
restart_on_cert_change
causes panic due to seccomp policy. In versions 8.17.3 and later, enabling this option causes the Beat to panic on restart. This is due to theeventfd2
syscall missing from the default seccomp policy. To fix this, addeventfd2
to a custom seccomp policy. To fix this, addeventfd2
to a custom seccomp policy. For more details, refer to Use Linux Secure Computing Mode (seccomp).
Click to view the policy
seccomp: syscalls: - action: allow names: - accept - accept4 - access - arch_prctl - bind - brk - capget - chmod - chown - clock_gettime - clock_nanosleep - clone - clone3 - close - connect - dup - dup2 - dup3 - epoll_create - epoll_create1 - epoll_ctl - epoll_pwait - epoll_wait - eventfd2 - execve - exit - exit_group - faccessat - faccessat2 - fchdir - fchmod - fchmodat - fchown - fchownat - fcntl - fdatasync - flock - fstat - fstatfs - fsync - ftruncate - futex - getcwd - getdents - getdents64 - geteuid - getgid - getpeername - getpid - getppid - getrandom - getrlimit - getrusage - getsockname - getsockopt - gettid - gettimeofday - getuid - inotify_add_watch - inotify_init1 - inotify_rm_watch - ioctl - kill - listen - lseek - lstat - madvise - mincore - mkdirat - mmap - mprotect - munmap - nanosleep - newfstatat - open - openat - pipe - pipe2 - poll - ppoll - prctl - pread64 - pselect6 - pwrite64 - read - readlink - readlinkat - recvfrom - recvmmsg - recvmsg - rename - renameat - rseq - rt_sigaction - rt_sigprocmask - rt_sigreturn - sched_getaffinity - sched_yield - sendfile - sendmmsg - sendmsg - sendto - set_robust_list - setitimer - setrlimit - setsockopt - shutdown - sigaltstack - socket - splice - stat - statfs - sysinfo - tgkill - time - tkill - uname - unlink - unlinkat - wait4 - waitid - write - writev
Bugfixes
editAffecting all Beats
- Fix the add_cloud_metadata processor to better support custom certificate bundles by improving how the AWS provider HTTP client is overridden. 44189
Auditbeat
Filebeat
- Fix a WebSocket panic scenario that occured after exhausting the maximum number of retries. 44342
Added
editMetricbeat
- Add checks for the Resty response object in all Meraki module API calls to ensure proper handling of nil responses. 44193
-
Add
enable_batch_api
option in the Azure monitor module to allow metrics collection of multiple resources using Azure batch API. 41790 -
Add support for
_nodes/stats
URIs compatible with legacy Elasticsearch versions. 44307 - Add a latency configuration option to the Azure Monitor module. 44366