Today we are releasing a patch release for the Beats, fixing some of the issues reported since the 1.0.0 release.
Changed the default bulk size for the communication with Logstash
The previous default was quite high (10000), which worked good in normal operations but could cause a significant increase in memory usage when Logstash was temporary unavailable. We have reduced the default to 200, which worked good in the real world installations that we tried it on. The setting can be changed from the
bulk_max_size option from the logstash setting in the configuration of any of the Beats.
Improved the force_close_files configuration setting
force_close_files settings exists in Filebeat to deal with the way Windows still shows deleted files in the file system until they are closed by all the processes that have them open. We tweaked its behavior a little to better detect when files are rotated on Windows. See this ticket for the discussion.