IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Breaking changes in 7.11
editBreaking changes in 7.11
editField changes
editThe following field changes are potentially breaking for anything that relies on these fields:
-
In Filebeat, the
suricata.eve.timestamp
alias field has been removed from the Suricata module. -
In Auditbeat, the file integrity dataset no longer includes a leading dot
in
file.extension
values. For example, it will reportpng
instead of.png
to comply with Elastic Common Schema (ECS).
See the release notes for a complete list of changes, including changes to beta or experimental functionality.