Beats version 8.19.4
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Beats version 8.19.4
editKnown Issues
editAffecting all Beats
-
Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the
queue.filled.events,queue.filled.bytes, andqueue.filled.pctmetrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.
Filebeat
- Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.
Bugfixes
editAffecting all Beats
- Fix a race condition during metrics initialization which could cause a panic. 45822 46054
- Fixed a panic when the beat restarts itself by adding eventfd2 to default seccomp policy. 46372
- Update Go version to 1.24.7. 46070.
- Update github.com/go-viper/mapstructure/v2 version to v2.4.0. 46335
- Update github.com/docker/docker version to v28.3.3. 46334
Filebeat
- Log bad handshake details when websocket connection fails 41300
- Fix aws region in aws-s3 input s3 polling mode. 41572
- Prevent computer details being returned for user queries by Activedirectory Entity Analytics provider. 11818 42796
- The UDP input now fails if it cannot bind to the configured port and its status is set to failed when running under Elastic Agent. 37216 46302
- The Unix input now fails on errors listening to the socket and its status is set to failed when running under Elastic Agent. 46302
- Fix race condition that could cause Filebeat to hang during shutdown after failing to startup. 45034 46331
Metricbeat
Winlogbeat
- Fix forwarded event handling and add channel error resilience. 46190
Added
editFilebeat
- Improve HTTP JSON health status logic for empty template results. 46332
- Improve CEL input documentation of authentication options. 46253
- Add status reporting support for Azure Event Hub v2 input. 44846
- Add documentation for device collection in Entity Analytics Active Directory Filebeat’s input. 46363