IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.17.1

edit

View commits

Known Issues

edit

Affecting all Beats

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • The Filestream input does not enforce the restrictions documented for the clean_inactive option, thus allowing configurations that can lead to data re-ingestion issues.
  • When clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set clean_inactive: -1 to disable this behavior.

Breaking changes

edit

Affecting all Beats

  • Default Docker base image was reverted to Ubuntu 20.04 due to incompatability issues with glibc. 42144
  • Fix templates and docs to use correct -- version of command line arguments. 42038 42060

Bugfixes

edit

Filebeat

  • Fix streaming input handling of invalid or empty websocket messages. 42036
  • Fix awss3 document ID construction when using the CSV decoder. 42019
  • Improve S3 object size metric calculation to support situations where Content-Length is not available. 41755
  • Fix Netflow Template Sharing configuration handling. 42080

Metricbeat

  • Do not report non-existant 0 values for RSS metrics in docker/memory. 41449
  • Don’t skip first bucket value in GCP metrics metricset for distribution type metrics. 41822
  • [K8s Integration] Enhance HTTP authentication in case of token updates for Apiserver, Controllermanager and Scheduler metricsets. 41910 42016
  • Fixed creation_date scientific notation output in the elasticsearch.index metricset. 42053

Added

edit

Affecting all Beats

  • Update Go version to 1.22.10. 42095
  • Add regex pattern matching to add_kubernetes_metadata processor. 41903

Filebeat

  • Added support for retry configuration in GCS input. 11580 41862
  • Added default values in the streaming input for websocket retries and put a cap on retry wait time to be lesser than equal to the maximum defined wait time. 42012
  • Added OAuth2 support with auto token refresh for websocket streaming input. 41989 42212
  • Added infinite & blanket retry options to websockets and improved logging and retry logic. 42225

Metricbeat

  • Added tier_preference, creation_date and version fields to the elasticsearch.index metricset. 41944
  • Add use_performance_counters to collect CPU metrics using performance counters on Windows for system/cpu and system/core. 41965

Deprecated

edit

Filebeat

  • Removed bucket_timeout config option for GCS input and replaced bucket context with parent program context. 41107 41970