IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Beats version 6.1.1 Beats version 6.0.1 »
Elastic Docs ›Beats Platform Reference [6.6] ›Release notes

Beats version 6.1.0

edit

Beats version 6.1.0

edit

View commits

Breaking changes

edit

Auditbeat

  • Changed audit.file.path to be a multi-field so that path is searchable. 5625

Metricbeat

  • Rename heap_init field to heap.init in the Elasticsearch module. 5320
  • Rename http.response.status_code field to http.response.code in the HTTP module. 5521

Bugfixes

edit

Affecting all Beats

  • Remove ID() from Runner interface 5153
  • Correctly send configured Host header to the remote server. 4842
  • Change add_kubernetes_metadata to attempt detection of namespace. 5482
  • Avoid double slash when join url and path 5517
  • Fix console color output for Windows. 5611
  • Fix logstash output debug message. https://github.com/elastic/beats/pull/5799{5799]
  • Fix isolation of modules when merging local and global field settings. 5795
  • Report ephemeral ID and uptime in monitoring events on all platforms 6501

Filebeat

  • Add support for adding string tags 5395
  • Fix race condition when limiting the number of harvesters running in parallel 5458
  • Fix relative paths in the prospector definitions. 5443
  • Fix recursive_globe.enabled option. 5443

Metricbeat

  • Change field type of http header from nested to object 5258
  • Fix the fetching of process information when some data is missing under MacOS X. 5337
  • Change MySQL active connections visualization title to MySQL total connections. 4812
  • Fix ProcState on Linux and FreeBSD when process names contain parentheses. 5775
  • Fix incorrect Mem.Used calculation under linux. 5775
  • Fix open_file_descriptor_count and max_file_descriptor_count lost in zookeeper module 5902
  • Fix system process metricset for kernel processes. 5700
  • Change kubernetes.node.cpu.allocatable.cores to float. 6130

Packetbeat

  • Fix http status phrase parsing not allow spaces. 5312
  • Fix http parse to allow to parse get request with space in the URI. 5495
  • Fix mysql SQL parser to trim \r from Windows Server SELECT\r\n\t1. 5572
  • Fix corruption when parsing repeated headers in an HTTP request or response. 6325
  • Fix panic when parsing partial AMQP messages. 6384
  • Fix out of bounds access to slice in MongoDB parser. 6256
  • Fix sniffer hanging on exit under Linux. 6535
  • Fix bounds check error in http parser causing a panic. 6750

Winlogbeat

  • Fix the registry file. It was not correctly storing event log names, and upon restart it would begin reading at the start of each event log. 5813
  • Fix config validation to allow event_logs.processors. [pull]6217[6217]

Added

edit

Affecting all Beats

  • Support dashboard loading without Elasticsearch 5653
  • Changed the hashbang used in the beat helper script from /bin/bash to /usr/bin/env bash. 5051
  • Changed beat helper script to use exec when running the beat. 5051
  • Fix reloader error message to only print on actual error 5066
  • Add support for enabling TLS renegotiation. 4386
  • Add Azure VM support for add_cloud_metadata processor 5355
  • Add output.file.permission config option. 4638
  • Refactor add_kubernetes_metadata to support autodiscovery 5434
  • Improve custom flag handling and CLI flags usage message. 5543
  • Add number_of_routing_shards config set to 30 5570
  • Set log level for kafka output. 5397
  • Move TCP UDP start up into server.Start() 4903
  • Update to Golang 1.9.2

Auditbeat

  • Add support for SHA3 hash algorithms to the file integrity module. 5345
  • Add dashboards for Linux audit framework events (overview, executions, sockets). 5516

Filebeat

  • Add PostgreSQL module with slowlog support. 4763
  • Add Kafka log module. 4885
  • Add support for /var/log/containers/ log path in add_kubernetes_metadata processor. 4981
  • Remove error log from runnerfactory as error is returned by API. 5085
  • Add experimental Docker json-file prospector . 5402
  • Add experimental Docker autodiscover functionality. 5245
  • Add option to convert the timestamps to UTC in the system module. 5647
  • Add Logstash module support for main log and the slow log, support the plain text or structured JSON format 5481

Metricbeat

  • Add graphite protocol metricbeat module. 4734
  • Add http server metricset to support push metrics via http. 4770
  • Make config object public for graphite and http server 4820
  • Add system uptime metricset. 4848
  • Add experimental queue metricset to RabbitMQ module. 4788
  • Add additional php-fpm pool status kpis for Metricbeat module 5287
  • Add etcd module. 4970
  • Add ip address of docker containers to event. 5379
  • Add ceph osd tree information to Metricbeat 5498
  • Add basic Logstash module. 5540
  • Add dashboard for Windows service metricset. 5603
  • Add experimental Docker autodiscover functionality. 5245
  • Add Windows service metricset in the windows module. 5332
  • Update gosigar to v0.6.0. 5775

Packetbeat

  • Add support for decoding the TLS envelopes. 5476
  • HTTP parses successfully on empty status phrase. 6176
  • HTTP parser supports broken status line. 6631
« Beats version 6.1.1 Beats version 6.0.1 »