IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.4

edit

View commits

Known Issues

edit

Affecting all Beats

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

Bugfixes

edit

Affecting all Beats

  • Fix a race condition during metrics initialization which could cause a panic. 45822 46054
  • Fixed a panic when the beat restarts itself by adding eventfd2 to default seccomp policy. 46372
  • Update Go version to 1.24.7. 46070.
  • Update github.com/go-viper/mapstructure/v2 version to v2.4.0. 46335
  • Update github.com/docker/docker version to v28.3.3. 46334

Filebeat

  • Log bad handshake details when websocket connection fails 41300
  • Fix aws region in aws-s3 input s3 polling mode. 41572
  • Prevent computer details being returned for user queries by Activedirectory Entity Analytics provider. 11818 42796
  • The UDP input now fails if it cannot bind to the configured port and its status is set to failed when running under Elastic Agent. 37216 46302
  • The Unix input now fails on errors listening to the socket and its status is set to failed when running under Elastic Agent. 46302
  • Fix race condition that could cause Filebeat to hang during shutdown after failing to startup. 45034 46331

Metricbeat

  • Fix an issue where the conntrack metricset entries field reported a count inflated by a factor of the number of CPU cores. 46138 46140

Winlogbeat

  • Fix forwarded event handling and add channel error resilience. 46190

Added

edit

Filebeat

  • Improve HTTP JSON health status logic for empty template results. 46332
  • Improve CEL input documentation of authentication options. 46253
  • Add status reporting support for Azure Event Hub v2 input. 44846
  • Add documentation for device collection in Entity Analytics Active Directory Filebeat’s input. 46363