Beats version 8.19.18
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Beats version 8.19.18
editKnown issues
editAll
-
Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the
queue.filled.events,queue.filled.bytes, andqueue.filled.pctmetrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.
Filebeat
- Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.
Enhancements
editFilebeat
Metricbeat
Bug fixes
editAll
-
Fix panic when
logging.metrics.periodis0. #51462
Filebeat
-
Fix
max_body_bytessetting not working without HMAC and add missing documentation configuration options in HTTP Endpoint input. #48550 #48512 - Fix WebSocket reconnect loop ignoring context cancellation with infinite retries. #51194
-
Fix WebSocket input hanging on shutdown when server stalls and
keep_aliveis disabled. #51227 #51213 -
Fix handling of
User-Agentheader when using OAuth 2.0 authentication. #51228 #50867 - Fix data race on filestream registry cursor metadata. #51287
- Fix DPoP resource client signing method assignment in the CEL and HTTP JSON inputs. #51433
- Strip sensitive headers on cross-origin redirects in the HTTP JSON and CEL inputs. #51434
- Validate CrowdStrike streaming resource URL origins against the configured discover URL. #51435
-
Use constant-time comparison for
http_endpointbasic auth and secret header validation. #51436 - Validate request tracer path regardless of enabled state to prevent unintended file deletion. #51479
Heartbeat
Libbeat
- Fix panic in the Kafka output during shutdown. #51484
Metricbeat