Beats version 8.6.1

edit

Beats version 8.6.1

edit

View commits

Bugfixes

edit

Affecting all Beats

Fix unnecessarily restarting every time a new configuration was received from the Elastic Agent. 34346

Filebeat - [google_workspace] Fix pagination and cursor value update. 34274 - Fix handling of quoted values in auditd module. 22587 34069 - The close.on_state_change.inactive default value is now set to 5 minutes, matching the documentation. - Fix handling of null or empty arrays during split with keep parent option. 34322

Metricbeat

Support Oracle-specific connection strings in SQL module 32089 32293
Remove deprecated metrics from controller manager, scheduler and proxy 34161

Osquerybeat

Fix data_stream configuration, enforce the default values used before 8.6.0. 34246

Winlogbeat

Corrects issue with security events with source IP of "LOCAL" or "Unknown" failing to ingest 19627 34295

Added

edit

Filebeat

Allow user configuration of keep-alive behaviour for HTTPJSON and CEL inputs. 33951 34014
[GCS] Added support for more mime types & introduced offset tracking via cursor state. Also added support for automatic splitting at root level, if root level element is an array. 34155

« Beats version 8.6.2 Beats version 8.6.0 »