Skip to content

Latest commit

 

History

History
159 lines (80 loc) · 4.24 KB

CHANGELOG.next.asciidoc

File metadata and controls

159 lines (80 loc) · 4.24 KB
Raw

Beats version HEAD

Breaking changes

Affecting all Beats

Auditbeat

Filebeat

Heartbeat - Browser monitors (beta) no write to the synthetics-* index prefix. 32064 - Setting a custom index for a given monitor is now deprecated. Streams are preferred. 32064

Metricbeat

Packetbeat

Winlogbeat

Functionbeat

Bugfixes

Affecting all Beats

  • Improve syslog parser/processor error handling. 31246 31798

  • Expand fields in decode_json_fields if target is set. 31712 32010

Auditbeat

  • Fix handling of audit status messages for modern kernels with reduced audit message feature support. 31616 32141

Filebeat

  • Adding a fix for threatintel module where MISP was paginating forever. 31784xs

  • Fix deduplication in Google workspace module by changing fingerprint processor target field from @metadata.id to @metadata._id. 31898

  • Fix handling and mapping of syslog priority, facility and severity values in Cisco module. 32025

  • Fix http_endpoint input TLS handshake failures. 32105

Heartbeat

  • Send targetted error message for unexpected synthetics exits. 31936

  • Fix regression where we write a dotted (non-nested) key event.type. 32097

Metricbeat

  • update kubernetes apiserver metricset to not collect deprecated metrics and fix dashboard 31973

  • update kubernetes controllermanager metricset to not collect deprecated metrics and fix dashboard 32037

Packetbeat

Winlogbeat

  • Powershell: Fix processing of parameter details. 31833

  • Security: Fix processing of sidlist, access list and access mask. 31833

Functionbeat

Elastic Logging Plugin

Added

Affecting all Beats

  • Improve performance of disk queue by coalescing writes. 31935

Auditbeat

Filebeat

  • Add text/csv decoder to httpjson input 28564

  • Update aws-s3 input to connect to non AWS S3 buckets 28222 28234

  • Add support for '/var/log/pods/' path for add_kubernetes_metadata processor with resource_type: pod. 28868

  • Add documentation for add_kubernetes_metadata processors log_path matcher. 28868

  • Add support for parsers on journald input 29070

  • Add support in httpjson input for oAuth2ProviderDefault of password grant_type. 29087

  • threatintel module: Add new Recorded Future integration. 30030

  • Add auth.oauth2.google.jwt_json option to httpjson input. 31750

  • Add authentication fields to RabbitMQ module documents. 31159 31680

  • Add template helper function for decoding hexadecimal strings. 31886

  • Add new parser called include_message to filter based on message contents. 31794 32094

Auditbeat

Filebeat

Heartbeat

Metricbeat

  • Enhance Oracle Module: Change tablespace metricset collection period 30948 #31259

  • Add orchestrator cluster ECS fields in kubernetes events 31341

  • Enhance Oracle Module: Refactor module to properly use host parsers instead of doing its own parsing of hosts 31611 #31692

  • Enhance Oracle Module: Connection string for Oracle does not handle special characters properly 24609 #31368

  • Enhance Oracle Module: New sysmetric metricset 30946 #31462

  • Upgrade Mongodb library in Beats to v5 31185

Packetbeat

  • Add support for specifying default route interface sniffing. 31905 31950

Functionbeat

Winlogbeat

Elastic Log Driver

Deprecated

Affecting all Beats

Filebeat

Heartbeat

Metricbeat

Packetbeat

Winlogbeat

Functionbeat

Known Issue