IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Beats version 8.5.1 Beats version 8.4.3 »
Elastic Docs ›Beats Platform Reference [8.9] ›Release notes

Beats version 8.5.0

edit

Beats version 8.5.0

edit

View commits

Breaking changes

edit

Affecting all Beats

  • Upgrade to Go 1.18. Certificates signed with SHA-1 are now rejected. See the Go 1.18 release notes for details. 32493
  • Fix formatting of MAC hardware addresses populated by the add_host_metadata processor. 32264 32265

Bugfixes

edit

Affecting all Beats

  • Fix metric namespacing for self-monitoring to correct some process incorrectly reading as zero. 32336

Auditbeat

  • Fix rendering of MAC addresses to conform to ECS. 32621 32622

Filebeat

  • Fix rendering of MAC addresses to conform to ECS. 32621 32622
  • Import dashboards from CEF integration. 32766
  • Fix how to handle IPv6 addresses in the fileset nginx/ingress_controller for Filebeat. 32989
  • Fix requestID parsing in AWS cloudtrail fileset. 33143
  • Fix input metrics not being unregistered when an input closes. This led to panics when configuration was reloaded for the aws-s3, aws-cloudwatch, and lumberjack inputs. 33259
  • Add handling of AAA operations for Cisco ASA module. 32257 32789
  • Fix gc.log always shipped even if gc fileset is disabled 30995
  • Fix handling of Cisco 302020 messages in ASA and FTD modules. 33089

Heartbeat - Fix bug affecting Let’s Encrypt and other users of cross-signed certs, where cert expiration was incorrectly calculated. 33215 - Fix broken disable feature for Kibana-configured monitors. 33293

Metricbeat

  • Fix GCP storage field naming 32806
  • In module/windows/perfmon, changed collection method of the second counter value required to create a displayable value 32305
  • Change max query size for GetMetricData API to 500 and add RecentlyActive for ListMetrics API call. 33105
  • Add GCP CloudSQL region filter. 32943
  • Fix Logstash cgroup mappings. 33131
  • Remove unused elasticsearch.node_stats.indices.bulk.avg_time.bytes mapping. 33263

Packetbeat

  • Fix formatting of debug logs. 32698
  • Fix rendering of MAC addresses to conform to ECS. 32621 32622

Winlogbeat

  • Reduce severity of message salvage failure logging. 32697

Added

edit

Filebeat - Import dashboard from Fortinet Fortigate firewall integration. 19810 33003

Heartbeat - Add new states field for internal use by new synthetics app. 30632

Packetbeat - Add option to allow sniffer to change device when default route changes. 31905 32681 - Add option to allow sniffing multiple interface devices. 31905 32933 - Bump Windows Npcap version to v1.71. 33164 33172

Deprecated

edit

Heartbeat - Deprecate zip_url and local monitor options. 33123

« Beats version 8.5.1 Beats version 8.4.3 »