IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.18.5

edit

View commits

Known Issues

edit

Affecting all Beats

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • The Filestream input does not enforce the restrictions documented for the clean_inactive option, thus allowing configurations that can lead to data re-ingestion issues.
  • When clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set clean_inactive: -1 to disable this behavior.

Bugfixes

edit

Auditbeat

  • auditd: Request status from a separate socket to avoid data congestion 41207
  • hasher: Add a cached hasher for upcoming backend. 41952
  • Fix potential data loss in add_session_metadata. 42795

Metricbeat

  • Fix URL construction to handle query parameters properly in GET requests for Jolokia 45620

Added

edit

Metricbeat

  • Improve error messages in AWS Health 45408