« Beats version 8.19.15 Beats version 8.19.13 »
Elastic Docs ›Beats Platform Reference [8.19] ›Beats version 8.19.20

Beats version 8.19.14

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.14

edit

View commits

Known issues

edit

All

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

New features

edit

Filebeat

  • Add retry back-off logic to streaming input CrowdStrike follower. #48542 #46072

  • Add secret_state config to CEL input for encrypted storage of secrets accessible as state.secret. #49207

    Add a secret_state configuration field to the CEL input. When configured in a Fleet integration package with secret: true, the values are stored encrypted by Fleet. At runtime, the contents are placed at state.secret and unconditionally redacted in debug logs. The key secret in the plain-text state configuration is reserved and rejected by validation to prevent accidental unencrypted storage of values intended to be secret.

Metricbeat

  • Add client secret authentication support to Azure App Insights module. #48880

Enhancements

edit

All

  • Update OTel Collector components to v0.148.0. #49578

Filebeat

  • Allow string and number arrays in httpjson chained configurations. #49391 #48254
  • Add support for URL and URL query parsing and formatting in the Streaming input CEL environment. #49653

Metricbeat

  • Update monitor mappings to include new TBS metrics. #48432

Bug fixes

edit

Elastic Agent

  • Fix an issue that could delay reporting shutdown of Agent components. #49796 #49512

Filebeat

  • Fix compatibility of the Journald input with journald/systemd versions < 242. #49445
  • Add rate-limit backoff to CrowdStrike streaming input oauth2 transport. #49453
  • Skip request tracer path validation when tracing is disabled to prevent input startup failures. #49655
  • Fix Filebeat crash loop when running under Elastic Agent and taking too long to initialise. #49796 #49512

Libbeat

  • Fix a bug where escaped characters in syslog structured data caused an EOF error. #49392 #43944

Metricbeat

  • Fix unnecessary Windows filesystem metricset errors from non-existent volumes. #49553
« Beats version 8.19.15 Beats version 8.19.13 »