« Beats version 8.17.5 Beats version 8.17.3 »
Elastic Docs ›Beats Platform Reference [8.19] ›Beats version 8.19.20

Beats version 8.17.4

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.17.4

edit

View commits

Known Issues

edit

Affecting all Beats

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • The Filestream input does not enforce the restrictions documented for the clean_inactive option, thus allowing configurations that can lead to data re-ingestion issues.
  • When clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set clean_inactive: -1 to disable this behavior.

Breaking changes

edit

Affecting all Beats

  • The Beats logger and file output rotate files when necessary. The beat now forces a file rotation when unexpectedly writing to a file through a symbolic link.
  • Allow faccessat(2) in seccomp. 43322

Bugfixes

edit

Filebeat

  • Prevent computer details being returned for user queries by Active Directory Entity Analytics provider. 11818 42796
  • Handle unexpectedEOF error in aws-s3 input and enforce retrying using download failed error. 42420
  • Prevent azureblobstorage input from logging key details during blob fetch operations. 43169
  • Fixed race conditions in the global ratelimit processor that could drop events or apply rate limiting incorrectly.

Metricbeat

  • Fix bug where metricbeat unintentionally triggers Windows ASR. 42177
  • Remove hostname field from Zookeeper’s mntr data stream. 41887
  • Fix logging argument number mismatch in Metricbeat(Redis). 43072

Winlogbeat

  • Fix boolean key in security pipelines and sync pipelines with integration. 43027

Added

edit

Affecting all Beats

  • Update Go version to 1.23.6. 42705

Filebeat

  • Add configuration option to limit HTTP Endpoint body size. 43171

Osquerybeat

  • Increase maximum query timeout to 24 hours. 42356
« Beats version 8.17.5 Beats version 8.17.3 »