- Beats Platform Reference: other versions:
- What are Beats?
- Community Beats
- Get started with Beats
- Config file format
- Upgrade
- Release notes
- Beats version 8.17.2
- Beats version 8.17.1
- Beats version 8.17.0
- Beats version 8.16.1
- Beats version 8.16.0
- Beats version 8.15.5
- Beats version 8.15.4
- Beats version 8.15.3
- Beats version 8.15.2
- Beats version 8.15.1
- Beats version 8.15.0
- Beats version 8.14.3
- Beats version 8.14.2
- Beats version 8.14.1
- Beats version 8.14.0
- Beats version 8.13.4
- Beats version 8.13.3
- Beats version 8.13.2
- Beats version 8.13.1
- Beats version 8.13.0
- Beats version 8.12.2
- Beats version 8.12.1
- Beats version 8.12.0
- Beats version 8.11.4
- Beats version 8.11.3
- Beats version 8.11.2
- Beats version 8.11.1
- Beats version 8.11.0
- Beats version 8.10.4
- Beats version 8.10.3
- Beats version 8.10.2
- Beats version 8.10.1
- Beats version 8.10.0
- Beats version 8.9.2
- Beats version 8.9.1
- Beats version 8.9.0
- Beats version 8.8.2
- Beats version 8.8.1
- Beats version 8.8.0
- Beats version 8.7.1
- Beats version 8.7.0
- Beats version 8.6.2
- Beats version 8.6.1
- Beats version 8.6.0
- Beats version 8.5.3
- Beats version 8.5.2
- Beats version 8.5.1
- Beats version 8.5.0
- Beats version 8.4.3
- Beats version 8.4.2
- Beats version 8.4.1
- Beats version 8.4.0
- Beats version 8.3.3
- Beats version 8.3.2
- Beats version 8.3.1
- Beats version 8.3.0
- Beats version 8.2.3
- Beats version 8.2.2
- Beats version 8.2.1
- Beats version 8.2.0
- Beats version 8.1.3
- Beats version 8.1.2
- Beats version 8.1.1
- Beats version 8.1.0
- Beats version 8.0.1
- Beats version 8.0.0
- Beats version 7.17.0
- Beats version 7.16.3
- Beats version 7.16.2
- Beats version 7.16.1
- Beats version 7.16.0
- Beats version 7.15.2
- Beats version 7.15.1
- Beats version 7.15.0
- Beats version 7.14.2
- Beats version 7.14.1
- Beats version 7.14.0
- Beats version 7.13.4
- Beats version 7.13.3
- Beats version 7.13.2
- Beats version 7.13.1
- Beats version 7.13.0
- Beats version 7.12.1
- Beats version 7.12.0
- Beats version 7.11.2
- Beats version 7.11.1
- Beats version 7.11.0
- Beats version 7.10.2
- Beats version 7.10.1
- Beats version 7.10.0
- Beats version 7.9.3
- Beats version 7.9.2
- Beats version 7.9.1
- Beats version 7.9.0
- Beats version 7.8.1
- Beats version 7.8.0
- Beats version 7.7.1
- Beats version 7.7.0
- Beats version 7.6.2
- Beats version 7.6.1
- Beats version 7.6.0
- Beats version 7.5.2
- Beats version 7.5.1
- Beats version 7.5.0
- Beats version 7.4.2
- Beats version 7.4.1
- Beats version 7.4.0
- Beats version 7.3.2
- Beats version 7.3.1
- Beats version 7.3.0
- Beats version 7.2.1
- Beats version 7.2.0
- Beats version 7.1.1
- Beats version 7.1.0
- Beats version 7.0.1
- Beats version 7.0.0
- Beats version 7.0.0-GA
- Beats version 7.0.0-rc2
- Beats version 7.0.0-rc1
- Beats version 7.0.0-beta1
- Beats version 7.0.0-alpha2
- Beats version 7.0.0-alpha1
- Beats version 6.8.13
- Beats version 6.8.12
- Beats version 6.8.11
- Beats version 6.8.10
- Beats version 6.8.9
- Beats version 6.8.8
- Beats version 6.8.7
- Beats version 6.8.6
- Beats version 6.8.5
- Beats version 6.8.4
- Beats version 6.8.3
- Beats version 6.8.2
- Beats version 6.8.1
- Beats version 6.8.0
- Beats version 6.7.2
- Beats version 6.7.1
- Beats version 6.7.0
- Beats version 6.6.2
- Beats version 6.6.1
- Beats version 6.6.0
- Beats version 6.5.4
- Beats version 6.5.3
- Beats version 6.5.2
- Beats version 6.5.1
- Beats version 6.5.0
- Beats version 6.4.3
- Beats version 6.4.2
- Beats version 6.4.1
- Beats version 6.4.0
- Beats version 6.3.1
- Beats version 6.3.0
- Beats version 6.2.3
- Beats version 6.2.2
- Beats version 6.2.1
- Beats version 6.2.0
- Beats version 6.1.3
- Beats version 6.1.2
- Beats version 6.1.1
- Beats version 6.1.0
- Beats version 6.0.1
- Beats version 6.0.0
- Beats version 6.0.0-GA
- Beats version 6.0.0-rc2
- Beats version 6.0.0-rc1
- Beats version 6.0.0-beta2
- Beats version 6.0.0-beta1
- Beats version 6.0.0-alpha2
- Beats version 6.0.0-alpha1
- Beats version 5.6.14
- Beats version 5.6.13
- Beats version 5.6.12
- Beats version 5.6.11
- Beats version 5.6.10
- Beats version 5.6.9
- Beats version 5.6.8
- Beats version 5.6.7
- Beats version 5.6.6
- Beats version 5.6.5
- Beats version 5.6.4
- Beats version 5.6.3
- Beats version 5.6.2
- Beats version 5.6.1
- Beats version 5.6.0
- Beats version 5.5.3
- Beats version 5.5.2
- Beats version 5.5.1
- Beats version 5.5.0
- Beats version 5.4.2
- Beats version 5.4.1
- Beats version 5.4.0
- Beats version 5.3.2
- Beats version 5.3.1
- Beats version 5.3.0
- Beats version 5.2.2
- Beats version 5.2.1
- Beats version 5.2.0
- Beats version 5.1.2
- Beats version 5.1.1
- Beats version 5.1.0 (skipped)
- Beats version 5.0.2
- Beats version 5.0.1
- Beats version 5.0.0
- Beats version 5.0.0-GA
- Beats version 5.0.0-rc1
- Beats version 5.0.0-beta1
- Beats version 5.0.0-alpha5
- Beats version 5.0.0-alpha4
- Beats version 5.0.0-alpha3
- Beats version 5.0.0-alpha2
- Beats version 5.0.0-alpha1
- Beats version 1.3.1
- Beats version 1.3.0
- Beats version 1.2.3
- Beats version 1.2.2
- Beats version 1.2.1
- Beats version 1.2.0
- Beats version 1.1.2
- Beats version 1.1.1
- Beats version 1.1.0
- Beats version 1.0.1
- Beats version 1.0.0
- Beats version 1.0.0-rc2
- Beats version 1.0.0-rc1
- Beats version 1.0.0-beta4
- Breaking changes
- Contribute to Beats
Beats version 8.6.0
editBeats version 8.6.0
editBugfixes
editAffecting all Beats
- Fix Windows service install/uninstall when Win32_Service returns error, add logic to wait until the Windows Service is stopped before proceeding. 33322
- Support for multiline zookeeper logs. 2496
-
Allow
clock_nanosleep
in the default seccomp profiles for amd64 and 386. Newer versions of glibc (e.g. 2.31) require it. 33792 - Disable lockfile when running under elastic-agent. 33988
Filebeat
- [httpsjon] Improved error handling during pagination with chaining & split processor. 34127
- [Azure blob storage] Added support for more mime types & introduced offset tracking via cursor state. 33981
- Fix handling of error in states in direct aws-s3 listing input. 33513 33722
- Fix PANW handling of messages with event.original already set. 33829 33830
- Rename identity as identity_name when the value is a string in Azure Platform Logs. 33654
- Fix requires pointer error while getting cursor metadata. 33956
- Fix input cancellation handling when HTTP client does not support contexts. 33962 33968
- Update mito CEL extension library to v0.0.0-20221207004749-2f0f2875e464. 33974
- Fix CEL result deserialisation when evaluation fails. 33992 33996
- Fix handling of non-200/non-429 status codes. 33999 34002
- [azure-eventhub input] Switch the run EPH run mode to non-blocking. 34075
Heartbeat - Fix browser monitor summary reporting as up when monitor is down. 33374 33819
Packetbeat
Added
editAffecting all Beats
-
Add
http.pprof
config options for enabling block and mutex profiling. 33572 33576 -
Add
add_formatted_index
processor that allows the resulting index for an event to be changed based on content from the event. 33800 - deps: Updated to github.com/elastic/go-sysinfo v1.9.0. 33864
- Fix panic due to close of already closed channel during shutdown. 33971
Auditbeat
Filebeat
-
Add
text/csv
decoder tohttpjson
input. 28564 -
Update
aws-s3
input to connect to non AWS S3 buckets. 28222 28234 -
Add support for /var/log/pods/ path for add_kubernetes_metadata processor with
resource_type: pod
. 28868 -
Add documentation for add_kubernetes_metadata processors
log_path
matcher. 28868 - Add support for parsers on journald input. 29070
- Add support in httpjson input for oAuth2ProviderDefault of password grant_type. 29087
- threatintel module: Add new Recorded Future integration. 30030
- Allow iptables module to parse ulogd v2 TOS field in logs. 32126
- Fix handling of invalid UserIP and LocalIP values. 32896
- Allow http_endpoint instances to share ports. 32578 33377
- Improve httpjson documentation for split processor. 33473
-
Added separation of transform context object inside httpjson. Introduced new clause
.parent_last_response.*
. 33499 - Cloud Foundry input uses server-side filtering when retrieving logs. 33456
-
Add
parse_aws_vpc_flow_log
processor. 33656 -
Update
aws.vpcflow
dataset in AWS module have a configurable logformat
and to produce ECS 8.x fields. 33699 -
Modified
aws-s3
input to reduce mutex contention when multiple SQS message are being processed concurrently. 33658 - Disable "event normalization" processing for the aws-s3 input to reduce allocations. 33673
- Add Common Expression Language input. 31233
- Add support for http+unix and http+npipe schemes in httpjson input. 33571 33610
- Add support for http+unix and http+npipe schemes in cel input. 33571 33712
-
Add
decode_duration
,move_fields
processors. 31301 - Add metrics for UDP packet processing. 33870
- Convert UDP input to v2 input. 33930
- Improve collection of risk information from Okta debug data. 33677 34030
- Adding filename details from zip to response for httpjson. 33952 34044
Heartbeat
- Upgrade node to 18.12.0.
Metricbeat
- Add Data Granularity option to AWS module to allow for for fewer API calls of longer periods and keep small intervals. 33133 33166
- Update README file on how to run Metricbeat on Kubernetes. 33308
- Add per-thread metrics to system_summary. 33614
- Add GCP CloudSQL metadata. 33066
- Add support for multiple regions in GCP. 32964
- Add namespace metadata to all namespaced kubernetes resources. 33763
Packetbeat
Was this helpful?
Thank you for your feedback.