IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.15.3

edit

View commits

Known Issues

edit

Filebeat

  • The Filestream input does not enforce the restrictions documented for the clean_inactive option, thus allowing configurations that can lead to data re-ingestion issues.
  • When clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set clean_inactive to a very large value. For example, use clean_inactive: 43800h0m0s, which is 5 years.

Breaking changes

edit

Filebeat

  • Change log.file.path field in awscloudwatch input to nested object. 41099

Bugfixes

edit

Affecting all Beats

  • Allow port number 0 in the community ID flowhash processor. 40259
  • The journald input now restarts if there is an error/crash. 32782 40558

Filebeat

  • Fix replace processor handling of zero string replacement validation. 40751
  • Add backup and delete for AWS S3 polling mode feature back. 41071

Metricbeat

  • Use namespace for GetListMetrics when it exists in AWS. 41022

Packetbeat

  • Fix upload of bundled ingest pipelines on Windows. 41110

Added

edit

Affecting all Beats

  • Update Go version to 1.22.8. 41139
  • Add kafka compression support for ZSTD.

Metricbeat

  • Restore docker.network.in.* and docker.network.out.* fields in docker module. 40968