Beats version 8.19.6

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

All

Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

Metricbeat

Improve the Prometheus helper to handle multiple content types including blank and invalid headers.

All

Prevent panic in logstash output when trying to send events while shutting down. #46960
Prevent panic in replace processor for non-string values. #47009
Autodiscover now correctly updates Kubernetes metadata on node and pod label changes. #47034
Prevent 3s startup delay when add_cloud_metadata is used with debug logs.
Update elastic-agent-system-metrics to v0.13.3.
Allows users to customize their data stream namespace to generic.
Add support for Kafka 4.0 in the Kafka module. #47284

Filebeat

Metricbeat

Fix missing AWS cloudwatch metrics with linked accounts and same dimensions. #46978
Add a fix to handle blank content-type headers in HTTP responses for Prometheus. #47027
Add pagination support to the device health metricset in the meraki module. #46938