« Release notes Beats version 8.19.22 »

›

Beats version 8.19.23

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.23

Enhancements

All

Update Go to 1.26.8. #53026

Filebeat

Reuse the UDP and Unix datagram read buffer so each packet allocates only its own length. #53490

Bug fixes

Auditbeat

Fix Auditbeat file_integrity kprobe leak that could prevent FIM from starting when the running kernel does not match the first candidate BTF spec. #53253 #45827
Fix process misattribution in system/socket where TCP/UDP flows were attributed to wrong processes. #53421 #44741

Filebeat

Wire Sarama client logs in the Filebeat Kafka input so consumer-group lifecycle is visible. #52871 #51305
Respond to http_endpoint requests that contain no events instead of closing the connection. #53261
Fix httpjson rate limiter marking the input "Degraded" when rate-limit headers are absent. #53326 #53185

Packetbeat

Fix panic in DHCPv4 parser when the OptionTimeOffset value is shorter than 4 bytes. #53419 #53330

Winlogbeat

Fix binary event data fields being overread into subsequent buffer contents. #53327 #53260

« Release notes Beats version 8.19.22 »