› ›

Beats version 8.19.17

edit

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.17

edit

View commits

Security updates

edit

All

Upgrade Go to v1.26.4. #51163

Deprecations

edit

The following functionality is deprecated in 8.19.17, and will be removed in 8.19.17. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.19.17.

Beats

Deprecate ssl.restart_on_cert_change in favor of ssl.certificate_reload. #51022

New features

edit

All

Update Go to v1.26.3. #50843

Beats

Allow TLS certificate and CA hot-reload without restarting. #51022

Enhancements

edit

All

Migrate from the deprecated github.com/docker/docker module to the github.com/moby/moby split modules. #50300

Filebeat

Add input redirection support through a new Redirector mechanism. #51310

Metricbeat

Migrate azure/app_insights metricset off the deprecated track-1 Azure SDK and go-autorest, using azcore directly. #50648

Bug fixes

edit

Beats

Disable TLS certificate hot-reload by default on patch branches. #51105
Fix panic in the Elastic Agent V2 manager when reloading with no output unit. #51260

Filebeat

Fix token refresh for jwk_pem/jwk_file in the cel and httpjson inputs. #50826 #50426
Respect max_bytes/message_max_bytes when reading the first chunk of CRI partial lines. #50796
Fix request tracer path validation for the cel, httpjson, http_endpoint, and entityanalytics inputs when Filebeat runs as an OTel receiver. #51026
Make CrowdStrike streaming input cancel refresh goroutines on session reconnect. #50864
Fix goroutine leak in filestream task group. #50839 #50824
Cache Okta OAuth2 token in cel and httpjson to avoid unnecessary JWT regeneration. #51177
Fix filestream registry leak on file renames. #51290
Guard event.original rename in Azure module ingest pipelines to prevent a "field already exists" error when the field is pre-populated. #51271

Libbeat

Fix bulk indexing failures that could occur when using the Elasticsearch output with some non-Elastic backends. #49557 #49558
Fix a data race in add_cloud_metadata processor when fetching metadata from multiple providers concurrently. #51317

Osquerybeat

Respect Osquery pack query platform filters for Live Query actions. #51118

Packetbeat

Fix janitor goroutine leaks and decoder cleanup lifecycle on route changes. #48836

Winlogbeat

Treat RPC_S_UNKNOWN_IF (1717) as a recoverable error so Winlogbeat reopens the event log session instead of exiting on this transient RPC error. #51031

« Release notes Beats version 8.19.16 »