Release Notes

Backward Compatibility Breaks

  • Removed utf-16be-bom encoding support. Support will be added with fix for #205
  • Rename force_close_windows_files to force_close_files and make it available for all platforms.
  • The shipper output field is renamed to
  • Use of enabled as a configuration option for outputs (elasticsearch, logstash, etc.) has been removed. #264
  • Use of disabled as a configuration option for tls has been removed. #264
  • The -test command line flag was renamed to -configtest#264
  • Disable geoip by default. To enable it uncomment in config file. #305


  • Filebeat will now exit if a configuration error is detected. #198
  • Fix to enable prospector to harvest existing files that are modified. #199
  • Improve line reading and encoding to better keep track of file offsets based on encoding. #224
  • Disable logging to stderr after configuration phase. #276
  • Set the default file logging path when not set in config. #275
  • Fix bug silently dropping records based on current window size. #226
  • Fix direction field in published events. #300
  • Fix elasticsearch structured errors breaking error handling. #309


  • Handling end of line under windows was improved #233
  • Added beat.hostname to contain the hostname where the Beat is running on as returned by the operating system. #285
  • Added timestamp for file logging. #291