IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Beats breaking changes
editBeats breaking changes
editThis list summarizes the most important breaking changes in Beats. For the complete list, go to Beats breaking changes.
Field changes
editThe following field changes are potentially breaking for anything that relies on these fields:
-
In Filebeat, the
suricata.eve.timestamp
alias field has been removed from the Suricata module. -
In Auditbeat, the file integrity dataset no longer includes a leading dot
in
file.extension
values. For example, it will reportpng
instead of.png
to comply with Elastic Common Schema (ECS).