« Beats version 8.19.10 Beats version 8.19.8 »
Elastic Docs ›Beats Platform Reference [8.19] ›Beats version 8.19.20

Beats version 8.19.9

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.9

edit

View commits

Known issues

edit

All

  • Disk queue filled metrics can underflow after blocked publishes. When a disk queue reaches its configured capacity, inputs can block until the output acknowledges events. The queue then accepts the blocked event without updating its metrics. When the event is later removed, the queue.filled.events, queue.filled.bytes, and queue.filled.pct metrics might report incorrect values. Event delivery is unaffected. Upgrade to 8.19.21 or later to apply the fix.

Filebeat

  • Filestream "take over" mode does not work in versions 8.19.0-8.19.20. A fix will ship in the 8.19.21 release.

New features

edit

The 8.19.9 release adds the following new and notable features.

All

  • Make beats receivers emit status for their subcomponents. #48015

Metricbeat

  • Update Kubernetes CPU and memory metrics to use allocatable values instead of capacity values. #47815

Packetbeat

  • Rework IP fragmentation and make it bound. #47970

Bug fixes

edit

Filebeat

  • [Filestream] Ensure harvester always restarts if the file has not been fully ingested. #47107 #46923
  • Prevent panic during startup if dissect processor has invalid field name in tokenizer. #47839

Metricbeat

  • Improve defensive checks to prevent panics in Meraki module. #47950

Packetbeat

  • Add bounds checking and ignore malformed RPC fragments. #47803
  • Verify and cap memcache UDP fragment counts. #47874
« Beats version 8.19.10 Beats version 8.19.8 »