IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.11

edit

View commits

Known issues

edit

All

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

Bug fixes

edit

All

  • Fix Windows install script to properly migrate legacy state data. #48293
  • Remove use of github.com/elastic/elastic-agent-client from OSS Beats. #48353

Filebeat

  • Fix Active Directory Entity Analytics failing to fetch users when Base DN contains a group CN. #48395
  • Fix Filebeat goroutine leak when using harvester_limit. #48445

Packetbeat

  • Add check for incorrect length values in PostgreSQL DataRow parser. #47872
  • Fix procfs network parsers. #48428
  • Fix a panic in the Thrift struct parser triggered by malformed packets. #48498
  • Add array access checks to SIP parser. #48514
  • Fix potential array access panics and infinite loops in PostgreSQL parser. #48528