Beats version 8.16.3
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Beats version 8.16.3
editKnown Issues
editAffecting all Beats
-
Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the
queue.filled.events,queue.filled.bytes, andqueue.filled.pctmetrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.
Filebeat
-
The Filestream input does not enforce the restrictions documented for the
clean_inactiveoption, thus allowing configurations that can lead to data re-ingestion issues. -
When
clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Setclean_inactive: -1to disable this behavior.
Breaking changes
editAffecting all Beats
- Default Docker base image was reverted to Ubuntu 20.04 due to incompatability issues with glibc. 42144
Added
editAffecting all Beats
-
When running under Elastic-Agent Kafka output allows dynamic topic in
topicfield. 40415 - The script processor has a new configuration option that only uses the cached javascript sessions and prevents the creation of new javascript sessions.
- Update Go version to 1.22.10. 42095
- Reduce memory consumption of k8s autodiscovery and the add_kubernetes_metadata processor when Deployment metadata is enabled
-
Add
lowercaseprocessor. 22254 41424 -
Add
uppercaseprocessor. 22254 41535 -
Replace
compress/gzipwith https://github.com/klauspost/compress/gzip library for gzip compression. 41584 - Add regex pattern matching to add_kubernetes_metadata processor. 41903
Filebeat
Metricbeat
-
Add
use_performance_countersto collect CPU metrics using performance counters on Windows forsystem/cpuandsystem/core41965