IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

› ›

Beats version 8.16.2

edit

Beats version 8.16.2

edit

View commits

Breaking changes

edit

Added

edit

In this release we’ve introduced an image based on the hardened Wolfi image to provide secure containers to our self-managed customers, help with compliance regulations, and improve our supply chain security posture.

Affecting all Beats

Auditbeat

Filebeat

Fixes filestream logging the error "filestream input with ID ID already exists, this will lead to data duplication[…]" on Kubernetes when using autodiscover. 41585

Heartbeat

Metricbeat

Fix incorrect handling of types in SQL module. 40090 41607

Osquerybeat

Packetbeat

Winlogbeat

Functionbeat

Elastic Logging Plugin

Bugfixes

edit

Affecting all Beats

Remove unnecessary reload for Elastic Agent managed beats when apm tracing config changes from nil to nil 41794
Fix incorrect cloud provider identification in add_cloud_metadata processor using provider priority mechanism 41636

Auditbeat

auditd: Request status from a separate socket to avoid data congestion 41207
auditd: Use ECS event.type: end instead of stop for SERVICE_STOP, DAEMON_ABORT, and DAEMON_END messages. 41558
auditd: Update syscall names for Linux 6.11. 41558
hasher: Geneneral improvements and fixes. 41863

Filebeat

Fix aws region in aws-s3 input s3 polling mode. 41572
Fix missing key in streaming input logging. 41600
Fix the "No such input type exist: salesforce" error on the Windows/AIX platform. 41664
Add support for Access Points in the aws-s3 input. 41495
Improve S3 object size metric calculation to support situations where Content-Length is not available. 41755
Log bad handshake details when websocket connection fails 41300
Fix double encoding of client_secret in the Entity Analytics input’s Azure Active Directory provider 41393
The azure-eventhub input now correctly reports its status to the Elastic Agent on fatal errors 41469
Fix handling of http_endpoint request exceeding memory limits. 41764 41765
Rate limiting fixes in the Okta provider of the Entity Analytics input. 40106 41583

Heartbeat

Metricbeat

Osquerybeat

Packetbeat

Winlogbeat

Elastic Logging Plugin

Added

edit

Affecting all Beats

Auditbeat

Split module/system/process into common and provider bits. 41868

Auditbeat

Filebeat

Improve S3 polling mode states registry when using list prefix option. 41869
Add support for SSL and Proxy configurations for websoket type in streaming input. 41934
AWS S3 input registry cleanup for untracked s3 objects. 41694
The environment variable BEATS_AZURE_EVENTHUB_INPUT_TRACING_ENABLED: true enables internal logs tracer for the azure-eventhub input. 41931 41932
Added default values in the streaming input for websocket retries and put a cap on retry wait time to be lesser than equal to the maximum defined wait time. 42012

Auditbeat

Libbeat

Heartbeat

Metricbeat

Add id field to all the vSphere metricsets. 41097
Only watch metadata for ReplicaSets in metricbeat k8s module 41289
Add support for region/zone for Vertex AI service in GCP module 41551

Metricbeat

Osquerybeat

Packetbeat

Winlogbeat

Functionbeat

Elastic Log Driver Elastic Logging Plugin

Deprecated

edit

Auditbeat

Filebeat

Heartbeat

Metricbeat

Osquerybeat

Packetbeat

Winlogbeat

Functionbeat

Elastic Logging Plugin

Known Issues

edit

« Release notes Beats version 8.16.1 »