IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

› ›

Beats version 8.15.4

edit

Beats version 8.15.4

edit

View commits

Known issues

edit

Metricbeat

Metrics can be lost when using Metricbeat due to the total fields limit of the Metricbeat index template. We recommend increasing the index.mapping.total_fields.limit setting of the Metricbeat index template to 12500 and perform a rollover of the Metricbeat data stream. If you’ve customized the name of the index associated to Metricbeat, apply the same change accordingly.

Breaking changes

edit

Osquerybeat

Disable allow_unsafe osquery configuration. 40130

Bugfixes

edit

Affecting all Beats

Fix issue where old data could be saved in the memory queue after acknowledgment, increasing memory use. 41356

Filebeat

Log bad handshake details when websocket connection fails. 41300
Improve modification time handling for entities and entity deletion logic in the Active Directory entityanalytics input. 41179
Fix double encoding of client_secret in the Entity Analytics input’s Azure Active Directory provider. 41393
The azure-eventhub input now correctly reports its status to the Elastic Agent on fatal errors. 41469

Metricbeat

Fix Kubernetes metadata sometimes not being present after startup. 41216

Winlogbeat

Fix truncated windows event log message. 41327

Added

edit

Affecting all Beats

Replace Ubuntu 20.04 with 24.04 for Docker base images. 40743 40942
Reduce memory consumption of k8s autodiscovery and the add_kubernetes_metadata processor when Deployment metadata is enabled.

Heartbeat

Add monitor status reporter under managed mode. 41077

Metricbeat

Only watch metadata for ReplicaSets in metricbeat k8s module. 41289

« Release notes Beats version 8.15.3 »