IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.15.5

edit

View commits

Known Issues

edit

Filebeat

  • The Filestream input does not enforce the restrictions documented for the clean_inactive option, thus allowing configurations that can lead to data re-ingestion issues.
  • When clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set clean_inactive to a very large value. For example, use clean_inactive: 43800h0m0s, which is 5 years.

Breaking changes

edit

Packetbeat

  • Expire source port mappings. 41581

Bugfixes

edit

Affecting all Beats

  • Fix metrics not being ingested, due to "Limit of total fields [10000] has been exceeded while adding new fields […​]". The total fields limit has been increased to 12500. No significant performance impact on Elasticsearch is anticipated. 41640

Filebeat

  • Fix AWS region in aws-s3 input S3 polling mode. 41572