Beats version 7.17.7edit

View commits

Breaking changesedit

Affecting all Beats

  • Upgrade to Go 1.18. Certificates signed with SHA-1 are now rejected. See the Go 1.18 release notes for details. 32493

Bugfixesedit

Affecting all Beats

  • Fix logging bug where setting ssl.verification_mode to full or certificate caused the test output command to incorrectly log that TLS was disabled. 30331
  • Fix Windows service timeouts when the "TCP/IP NetBIOS Helper" service is disabled. 31810 31835

Filebeat

  • cisco/asa: fix handling of user names when there are Security Group Tags present. 32009 32196
  • Fix file.path field in cloudtrail fileset to use json.digestS3Object. 32759
  • Fix not parsing as json when json and ndjson content types have charset information in aws-s3 input 32767
  • Fix handling of Cisco 302020 messages in ASA and FTD modules. 33089
  • Fix input metrics not being unregistered when an input closes. This led to panics when configuration was reloaded for the aws-s3 and aws-cloudwatch inputs. 33259
  • Fix handling of empty array in httpjson input. 32001

Metricbeat

  • Fix GCP storage field naming. 32806
  • In module/windows/perfmon, changed collection method of the second counter value required to create a displayable value. 32305
  • Fix and improve AWS metric period calculation to avoid zero-length intervals. 32724
  • Make system/filesystem code sensitive to hostfs and migrate libraries to elastic-agent-opts. 31001

Winlogbeat

  • Fix fatal invalid memory write on Windows 11. 32469 32519
  • Fix handling of event formatting when no metadata is available on Windows 11. 32468 32519
  • Reduce severity of message salvage failure logging. 32697