We’re happy to announce that the 1.2.3 bug fix release is now available for all the Elastic Beats: Filebeat, Packetbeat, Topbeat and Winlogbeat. You can download the new versions from the usual place. You can find the full release notes here.
Fix Filebeat sending duplicate logs of rotated files on restart
This fixes an issue where Filebeat didn’t record the file offset on shutdown of rotated files. This could cause resending of already shipped files on restart. Note that while the bug is fixed with the 1.2.3 release, the duplicates can still happen one time only on the upgrade from 1.2.2.
Fix Topbeat high CPU usage on Windows
Before this release, Topbeat could cause high CPU usage on Windows when using a custom regular expression pattern to filter processes. The root cause was that the caching that we were using for command lines (getting the command line is fairly expensive on Windows) wasn’t working when most of the processes were filtered out.
Fix Winlogbeat panic on large events
Messages larger than 32K could cause Winlogbeat to crash on Windows XP or Windows 2003. There are more details in this pull request.