Beats version 8.15.2

edit

View commits

Known issues

edit

Affecting all Beats

  • Memory usage is not correctly limited by the number of events actively in the memory queue, but rather the maximum size of the memory queue regardless of usage. 41355

Metricbeat

  • Metrics can be lost when using Metricbeat due to the total fields limit of the Metricbeat index template. We recommend increasing the index.mapping.total_fields.limit setting of the Metricbeat index template to 12500 and perform a rollover of the Metricbeat data stream. If you’ve customized the name of the index associated to Metricbeat, apply the same change accordingly.

Bugfixes

edit

Affecting all Beats

  • Fix bug that prevented the Elasticsearch output from recovering from an interrupted connection. 40705 40796

Filebeat

  • Fix publication of group data from the Okta entity analytics provider. 40681
  • Ensure netflow custom field configuration is applied. 40735 40730

Metricbeat

  • Add AWS OwningAccount support for cross account monitoring. 40570 40691
  • Add missing ECS Cloud fields in GCP metrics metricset when using exclude_labels: true. 40437 40467

Added

edit

Affecting all Beats

  • When running under Elastic Agent, Kafka output allows dynamic topic in topic field. 40415
  • The script processor has a new configuration option that only uses the cached JavaScript sessions and prevents the creation of new javascript sessions.

Metricbeat

  • Add new metrics for the vSphere Host metricset. 40429
  • Add new metrics for the vSphere Datastore metricset. 40441
  • Add metrics for the vSphere Virtualmachine metricset. 40485
  • Add new metricset network for the vSphere module. 40559
  • Add new metricset cluster for the vSphere module. 40536
  • Add new metricset resourcepool for the vSphere module. 40456
  • Add new metricset datastorecluster for vSphere module. 40634
  • Add support for snapshot in vSphere virtualmachine metricset. 40683
  • Add support for new metrics in datastorecluster metricset. 40694
  • Update fields to use mapstr in vSphere virtualmachine metricset. 40707
  • Add metrics related to triggered alarms in all the vSphere metricsets. 40714 40876
  • Add support for period based intervalID in vSphere host and datastore metricsets. 40678
  • Add new metrics for datastore and minor changes to overall vSphere metrics. 40766
  • Log the total time taken for GCP ListTimeSeries and AggregatedList requests. 40661
  • Added Cisco Meraki module. 40836
  • Added Palo Alto Networks module. 40686