New

The executive guide to generative AI

Read more

Fleet and Elastic Agent release notes

edit

This section summarizes the changes in each release.

Also see:

Fleet and Elastic Agent 9.0.0-rc1

edit

Coming in 9.0.0-rc1.

Fleet and Elastic Agent 9.0.0-beta1

edit

Review important information about the Fleet and Elastic Agent 9.0.0-beta1 release.

Security updates

edit
Elastic Agent
  • Update Go version to 1.22.10. #6236

Breaking changes

edit

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

Fleet
Removed deprecated epm Fleet APIs.

Details
Removed GET/POST/DELETE /epm/packages/:pkgkey APIs in favor of the GET/POST/DELETE /epm/packages/:pkgName/:pkgVersion:

  • Removed experimental query parameter in GET /epm/packages and GET /epm/categories
  • Removed response in response in * /epm/packages* and GET /epm/categories
  • Removed savedObject in /epm/packages response in favor of installationInfo

For more information, refer to (#198434).

Removed deprecated Fleet APIs for agents endpoints.

Details
Removed the following API endpoints:

  • POST /service-tokens in favor of POST /service_tokens
  • GET /agent-status in favor GET /agent_status
  • PUT /agents/:agentid/reassign in favor of POST /agents/:agentid/reassign

Removed deprecated parameters or responses:

  • Removed total from GET /agent_status response
  • Removed list from GET /agents response

For more information, refer to (#198313).

Elastic Agent
  • Support for cloud-defend (Defend for Containers) has been removed in this release. The package has been removed from the Elastic Agent packaging scripts and template Kubernetes files. #5481
  • The default values for username and password have been removed for when Elastic Agent is running in container mode. The Elasticsearch api_key can now be set in that mode using the ELASTICSEARCH_API_KEY environment variable. #5536
  • The default Ubuntu-based Docker images used for Elastic Agent have been changed to UBI-minimal-based images, to reduce the overall footprint of the agent Docker images and to improve compliance with enterprise standards. #6427
  • The deprecated --path.install flag declaration has been removed from the Elastic Agent paths command and its use removed from the container and enroll commands. #6461 #2489
  • The default Elastic Agent installation and ugprade have been changed to include only the agentbeat, endpoint-security and pf-host-agent components. Additional components can be included using flags. #6542

New features

edit

The 9.0.0-beta1 release Added the following new and notable features.

Fleet
  • Add new setting allowing automatic deletion of unenrolled agents in Fleet settings. (#195544)
Elastic Agent
  • Add the Azure Asset Inventory definition to Cloudbeat. #5323
  • Add a new Kubernetes deployment of the Elastic Distribution of OTel Collector named "gateway" to the Helm kube-stack deployment. #6444
  • Add the filesource providert to composable inputs. The provider watches for changes of the files and updates the values of the variables when the content of the file changes. #6587 #6362
  • Add the jmxreceiver to the Elastic Distribution of OTel Collector. #6601
  • Add support for context variables in outputs as well as a default provider prefix. #6602 #6376
  • Add the Nginx receiver and Redis receiver OTel components. #6627
  • Add new --id (ELASTIC_AGENT_ID environment variable for container) and --replace-token (FLEET_REPLACE_TOKEN environment variable for container) enrollment options. #6498

Enhancements

edit
Fleet
  • Improve filtering and visibility of Uninstalled and Orphaned agents in Fleet, by differentiating them from Offline agents. (#205815)
  • Introduce air-gapped configuration for bundled packages. (#202435)
  • Update removed parameters of the Fleet → Logstash output configurations. (#210115)
  • Update the maximum supported package version. (#196675)
Fleet Server
  • Replace the use of context.TODO and context.Background in logger function calls for most use cases. #4168 #3087
  • Refactor the API constructor to use functional opts instead of a long list of pointers. #4169 #3823
  • Remove the deprecated policy_throttle configuration setting in favour of the newer policy-limit. #4288
  • Add the ability for Elastic Agent to enroll using a specific ID. #4290 #4226
Elastic Agent
  • Add the Filebeat receiver into Elastic Agent. #5833
  • Update OTel components to v0.119.0. #6713

Bug fixes

edit
Fleet
  • Fix a validation error that occurs on multi-text input fields. (#205768)
Fleet Server
  • Adding a context timeout to the bulker flush so it times out if it takes more time than the deadline. #3986
  • Remove a race condition that may occur when remote Elasticsearch outputs are used. #4171
  • Use the chi/middleware.Throttle package to track in-flight requests and return a 429 response when the limit is reached. #4402 #4400
Elastic Agent
  • Fix logical race conditions in the kubernetes_secrets provider. #6623
  • Resolve the proxy to inject into agent component configurations using the Go http package. #6675 #6209