Beats version 8.3.1

edit

View commits

Bugfixes

edit

Affecting all Beats

  • Improve syslog parser/processor error handling. 31246 31798

Auditbeat

  • Fix handling of audit status messages for modern kernels with reduced audit message feature support. 31616 32141

Filebeat

  • Fix handling and mapping of syslog priority, facility and severity values in Cisco module. 32025
  • Fix deduplication in Google workspace module by changing fingerprint processor target field from @metadata.id to @metadata._id. 31898
  • Adding a fix for threatintel module where MISP was paginating forever. 31784
  • Fix http_endpoint input TLS handshake failures. 32105
  • Fix last write pagination commit checkpoint on aws-s3 input for s3 direct polling when using the same bucket and different list prefixes. 31776