« Beats version 8.19.14 Beats version 8.19.12 »
Elastic Docs ›Beats Platform Reference [8.19] ›Beats version 8.19.20

Beats version 8.19.13

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.13

edit

View commits

Known issues

edit

All

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

Security updates

edit

All

  • Update elastic-agent-system-metrics to v0.14.0. #48816
  • Update elastic-agent-libs to v0.32.2. #48857
  • Update OpenTelemetry SDK to v1.40.0. #49126

Osquerybeat

  • Update osquery-go dependency to v0.0.0-20260226222546-0cc22f415e57. #49280

New features

edit

Elastic Agent

  • Fix a bug that could report stopped inputs as still running. #49285

Metricbeat

  • Add zswap compressed swap cache metrics to system memory metricset. #49098
  • Add Elasticsearch index mode and codec settings in Metricbeat index stats module. #49237
  • Add cgroupv2 CPU metrics to system.process dataset. #49098

Enhancements

edit

Filebeat

  • Add optional token_url support for JWT Bearer Flow in Salesforce input. #43933 #43963
  • Empty files are excluded from processing in filestream as early as possible. #49196

Metricbeat

  • Report memory pressure stall information (PSI) for cgroup v2. #48054
  • Add swap field to system.process.memory metricset in Metricbeat. #48334
  • Add a config to improve wildcard handling to report actual object names. #48644

Packetbeat

  • Improves resiliency of the AMQP parser against invalid or corrupt data frames. #48033
  • Bump bundled Windows Npcap OEM installer to v1.87. #49167

Bug fixes

edit

All

  • Improve append processor behavior when merging values and removing duplicates. #49021
  • Kafka client will avoid having more than a single metadata request to each broker in-flight at any given time. #49307

Filebeat

  • Fix Kubernetes secret variable resolution in Filebeat autodiscover hints. #48787
  • Fix Active Directory entity analytics to resolve nested group membership and escape DN filter values. #48815
  • Fix handling of Crowdstrike streaming input state in retryable errors. #49077
  • Fix memory leak when harvester_limit is set. #49114
  • Demote missing user/device state lookup to debug log in Azure entity analytics provider. #49127
  • Fix CrowdStrike streaming session refresh scheduling to avoid tight refresh loops. #49175 #49158

Winlogbeat

  • Restore suppression of repeated channel-not-found open errors in Winlogbeat eventlog runner. #48999 #48979
« Beats version 8.19.14 Beats version 8.19.12 »