Beats version 8.9.0
editBeats version 8.9.0
editBugfixes
editAffecting all Beats
Filebeat
- Add support in s3 input for JSON with array of objects. 35475
- RFC5424 syslog timestamps with offset Z will be treated as UTC rather than using the default timezone. 35360
- Fixed a minor code error in the GCS input scheduler where a config value was being used directly instead of the source struct. 35729
- Fix CEL input JSON marshalling of nested objects. 35763 35774
- Fix metric collection in GCPPubSub input. 35773
- Fix end point deregistration in http_endpoint input. 35899 35903
- Fix duplicate ID panic in filestream metrics. 35964 35972
- Improve error reporting and fix IPv6 handling of TCP and UDP metric collection. 35996
- Fix handling of NUL-terminated log lines in Fortinet Firewall module. 36026 36027
- Make redact field configuration recommended in CEL input and log warning if missing. 36008
- Fix handling of region name configuration in awss3 input 36034
Heartbeat
Metricbeat
- Fix no error logs displayed in CloudWatch EC2, RDS and SQS metadata 34985 35035
- Remove Beta warning from IIS application_pool metricset 35480
- Improve documentation for ActiveMQ module 35113 35558
- Resolve statsd module’s prematurely halting of metrics parsing upon encountering an invalid packet. 35075
Packetbeat
- Fix double channel close panic when reloading. 35324
Winlogbeat
Added
editAffecting all Beats
-
Add Hetzner Cloud as a provider for
add_cloud_metadata
. 35456 - Upgrade version of elastic-agent-autodiscover to v0.6.1 for improved memory consumption on k8s. 35483
-
Added
orchestrator.cluster.id
andorchestrator.cluster.name
fields to the add_cloud_metadata processor, AWS cloud provider. 35182 - Lowercase reported hostnames per Elastic Common Schema (ECS) guidelines for the host.name field. Upgraded github.com/elastic/go-sysinfo to 1.11.0. 35652
Filebeat
- Added support for decoding apache parquet files in awss3 input. 34662 35578
- Add support for CRC validation in Filebeat’s HTTP endpoint input. 35204
- Add support for CRC validation in Zoom module. 35604
- Add execution budget to CEL input. 35409
- Add XML decoding support to HTTPJSON. 34438 35235
-
Add delegated account support when using Google ADC in
httpjson
input. 35507 - Add metrics for filestream input. 35529
-
Add support for collecting
httpjson
metrics. 35392 - Add XML decoding support to CEL. 34438 35372
- Mark CEL input as GA. 35559
- Add metrics for gcp-pubsub input. 35614
- Allow non-AWS endpoints for awss3 input. 35496 35520
- Add Okta input package for entity analytics. 35611
- Expose harvester metrics from filestream input 35835 33771
- Add device support for Azure AD entity analytics. 35807
Libbeat - Added support for Apache Parquet file reader. 34662 35183
Metricbeat
Packetbeat
Winlogbeat