IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.12

edit

View commits

Known issues

edit

All

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

Security updates

edit

All

  • Update elastic-agent-autodiscover to v0.10.2. #48817

New features and enhancements

edit

Filebeat

  • Add support for managed identity authentication to the azure-eventhub input. #48655 #48680
  • Don’t print warning about small files on each file system scan. #48704 #45642

Bug fixes

edit

Elastic Agent

  • Fix a bug which could report an invalid number of active otelconsumer events. #48720 #12515

Filebeat

  • Enforce region configuration when non_aws_bucket_name is defined for the awss3 input. #48534 #47847
  • Fix an issue where the azure-blob-storage input was failing with the Storage Blob Data Reader RBAC role. #48886 #48890

Heartbeat

  • Add a missing dependency for Synthetics on Wolfi Docker image. #48569

Metricbeat

  • Added mode and codec fields to the elasticsearch.index metricset.
  • Enforce configurable size limits on incoming requests for remote_write metricset (max_compressed_body_bytes, max_decoded_body_bytes). #48218

Osquerybeat

  • Fix differential results using wrong data source for removed events. #48438 #48427

Packetbeat

  • Refactor the DHCPv4 parsers and fix parsing issues. The DHCP router field is now a list, as is specified in RFC2132. #48414
  • Clean up int overflows and array access issues in MySQL parsers. #48543
  • Add int overflow checks to the http parser. #48563