« Beats version 8.19.17 Beats version 8.19.15 »
Elastic Docs ›Beats Platform Reference [8.19] ›Beats version 8.19.20

Beats version 8.19.16

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.16

edit

View commits

Known issues

edit

All

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

Security updates

edit

All

  • Update Go to v1.25.9. #50201
  • Bump aws-sdk-go-v2/service/cloudwatchlogs to v1.65.0 to fix GHSA-xmrv-pmrh-hhx2. #50307
  • Update github.com/Azure/go-ntlmssp to v0.1.1. #50504

Heartbeat

  • Upgrade npm to v11 in non-wolfi Heartbeat Docker images. #50633

Enhancements

edit

Filebeat

  • Match http.ServeMux redirect status code for path cleaning in http_endpoint mux. #50691

Libbeat

  • Cache add_locale processor and refresh only when zone or offset changes. #50489
  • Update ebpfevents to v0.9.0. #50639

Upgrades

edit

All

  • Update github.com/prometheus/prometheus to v0.311.3. #50520

Bug fixes

edit

All

  • Initialize disk queue frame IDs from persisted state. #50603
  • Fix OTel Beat processor to honor when conditions. #50559
  • Fix race in pipeline client between Publish and Close that could skip waiting for events to be acknowledged. #50679 #49390

Auditbeat

  • Release the bolt file lock when the last datastore bucket is closed. #50606 #50381

Filebeat

  • Fix internal processing time metric for azureeventhub input. #50043
  • Fix a race condition during multiline parser shutdown. #50524
  • Re-evaluate url_program on each websocket reconnect using evolved cursor state. #50410
  • Reduce allocation pressure in httpjson cursor update and split paths. #50407
  • Fix Active Directory entity analytics to emit device attributes under activedirectory.device. #50556 #50471
  • Fix handling of OAuth2.0 timeouts in CrowdStrike streaming input. #50531
  • Accept string values for secret_state to support Fleet secret resolution. #50582
  • When Filestream is migrating the registry key from inputs that did not have an ID, match files by path and file identity instead of only path. #50731

Libbeat

  • Fix conversion of time duration fields such as event.duration when using Beat receivers. #50354
  • Fix OTel map conversion for []time.Duration fields to avoid dropping duration slices. #50517

Metricbeat

  • Fix panic in Azure module when all configured resources match no Azure resources. #50587
« Beats version 8.19.17 Beats version 8.19.15 »