Beats version 5.6.0

View commits

Breaking changes

Affecting all Beats

  • The _all.norms setting in the Elasticsearch template is no longer disabled. This increases the storage size with one byte per document, but allows for a better upgrade experience to 6.0. 4901

Bugfixes

Filebeat

  • Fix issue where the fileset.module could have the wrong value. 4761

Packetbeat

  • Update flow timestamp on each packet being received. 4895

Metricbeat

  • Fix a debug statement that said a module wrapper had stopped when it hadn’t. 4264
  • Use MemAvailable value from /proc/meminfo on Linux 3.14. 4316
  • Fix panic when events were dropped by filters. 4327

Added

Affecting all Beats

  • Add option to the import_dashboards script to load the dashboards via Kibana API. 4682

Filebeat

  • Add support for loading Xpack Machine Learning configurations from the modules, and added sample configurations for the Nginx module. 4506 4609
  • Add ability to parse nginx logs exposing the X-Forwarded-For header instead of the remote address. 4351

Metricbeat

  • Add filesystem.ignore_types to system module for ignoring filesystem types. 4685

Deprecated

Affecting all Beats

  • Loading more than one output is deprecated and will be removed in 6.0. 4907