Beats version 5.0.0-alpha5

View commits

Breaking changes

Affecting all Beats

  • Rename the filters section to processors. 1944
  • Introduce the condition with when in the processor configuration. 1949
  • The Elasticsearch template is now loaded by default. 1993
  • The Redis output index setting is renamed to key. index still works but it’s deprecated. 2077
  • The undocumented file output index setting was removed. Use filename instead. 2077

Metricbeat

  • Create a separate metricSet for load under the system module and remove load information from CPU stats. 2101
  • Add system.load.norm.1, system.load.norm.5 and system.load.norm.15. 2101
  • Add threads fields to mysql module. 2484

Packetbeat

  • Set enabled ` in packetbeat.protocols.icmp configuration to true by default. 1988

Bugfixes

Affecting all Beats

  • Fix sync publisher PublishEvents return value if client is closed concurrently. 2046

Metricbeat

  • Do not send zero values when no value was present in the source. 1972

Filebeat

  • Fix potential data loss between Filebeat restarts, reporting unpublished lines as published. 2041
  • Fix open file handler issue. 2028 2020
  • Fix filtering of JSON events when using integers in conditions. 2038

Winlogbeat

  • Fix potential data loss between Winlogbeat restarts, reporting unpublished lines as published. 2041

Added

Affecting all Beats

  • Periodically log internal metrics. 1955
  • Add enabled setting to all output modules. 1987
  • Command line flag -c can be used multiple times. 1985
  • Add OR/AND/NOT to the condition associated with the processors. 1983
  • Add -E CLI flag for overwriting single config options via command line. 1986
  • Choose the mapping template file based on the Elasticsearch version. 1993
  • Check stdout being available when console output is configured. 2035

Metricbeat

Packetbeat

  • Add enabled setting to Packetbeat protocols. 1988
  • Add enabled setting to Packetbeat network flows configuration. 1988

Filebeat

  • Introduce close_removed and close_renamed harvester options. 1600
  • Introduce close_eof harvester option. 1600
  • Add clean_removed and clean_inactive config option. 1600

Deprecated

Filebeat

  • Deprecate close_older option and replace it with close_inactive. 2051
  • Deprecate force_close_files option and replace it with close_removed and close_renamed. 1600