IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
Elastic Docs ›Beats Platform Reference [8.1] ›Release notes
« Beats version 8.1.2 Beats version 8.1.0 »

Beats version 8.1.1edit

View commits

Bugfixesedit

Affecting all Beats

  • Fixes Beats crashing when glibc >= 2.35 is used 30576
  • Log errors when parsing and applying config blocks and if the input is disabled. 30534
  • Wildcard fields no longer have a default ignore_above setting of 1024. 30096 30668
  • Ensure that the Reloadable part of beats are initialized before the Manager is started. 30533
  • Ignore bugfix version when running version compatibility check against Elasticsearch. 30746

Filebeat

  • Fix compatibility with ECS by renaming source log key to source_file 30667
  • Report the starting offset of the line in log.offset when using filestream instead of the end to be ECS compliant. 30445
  • Update documentation for accessing last_response.url.params in httpjson input. 30739

Packetbeat

  • Prevent panic when querying Npcap version on Windows. 30820 30821

Known Issueedit

Affecting all Beats

  • During setup the Beat does not load the data stream. Thus, when running the Beat with a user that does not have enough privileges, publishing fails with the following error: action [indices:admin/auto_create] is unauthorized for user [publisher] with roles [publisher], this action is granted by the index privileges [auto_configure,create_index,manage,all]. The workaround is to either install the data stream manually using the following call: PUT /_data_stream/{beatname}-8.1 or to give manage permission on the data stream {beatname}-8.1 to the publishing user temporarily. 30647 31048
« Beats version 8.1.2 Beats version 8.1.0 »