Beats version 8.5.3edit

View commits

Breaking changesedit

Filebeat

  • Fixed error spam from add_kubernetes_metadata processor when running on AKS. 33697

Bugfixesedit

Heartbeat

  • Fix broken zip URL monitors. NOTE: Zip URL Monitors will be removed in version 8.7 and replaced with project monitors. 33723
  • Fix handling of long UDP messages in UDP input. 33836 33837

Known issuesedit

Heartbeat

If you are using either the Elastic Synthetics Integration package (beta) or private locations in the Uptime app’s Monitor Management (beta) in an airgapped environment, observer.geo.name may not be indexed with your Heartbeat documents, resulting in location data missing from the Uptime app.

This issue does not impact clusters with external network access. This issue will be fixed in the next release.

Suggested resolution: Manually add custom ingest pipelines to the synthetics-* data streams.

The instructions provided below assume manage_pipeline cluster privilege.

Execute the following request in Kibana Dev Tools

PUT _ingest/pipeline/synthetics-browser.screenshot@custom
{
  "description": "Applies location name (observe.geo.name) to Synthetics documents",
  "processors": [
    {
      "set": {
        "field": "observer.geo.name",
        "override": false,
        "ignore_failure": true,
        "copy_from": "observer.name"
      }
    }
  ]
}

PUT _ingest/pipeline/synthetics-browser.network@custom
{
  "description": "Applies location name (observe.geo.name) to Synthetics documents",
  "processors": [
    {
      "set": {
        "field": "observer.geo.name",
        "override": false,
        "ignore_failure": true,
        "copy_from": "observer.name"
      }
    }
  ]
}

PUT _ingest/pipeline/synthetics-browser@custom
{
  "description": "Applies location name (observe.geo.name) to Synthetics documents",
  "processors": [
    {
      "set": {
        "field": "observer.geo.name",
        "override": false,
        "ignore_failure": true,
        "copy_from": "observer.name"
      }
    }
  ]
}

PUT _ingest/pipeline/synthetics-http@custom
{
  "description": "Applies location name (observe.geo.name) to Synthetics documents",
  "processors": [
    {
      "set": {
        "field": "observer.geo.name",
        "override": false,
        "ignore_failure": true,
        "copy_from": "observer.name"
      }
    }
  ]
}


PUT _ingest/pipeline/synthetics-tcp@custom
{
  "description": "Applies location name (observe.geo.name) to Synthetics documents",
  "processors": [
    {
      "set": {
        "field": "observer.geo.name",
        "override": false,
        "ignore_failure": true,
        "copy_from": "observer.name"
      }
    }
  ]
}

PUT _ingest/pipeline/synthetics-icmp@custom
{
  "description": "Applies location name (observe.geo.name) to Synthetics documents",
  "processors": [
    {
      "set": {
        "field": "observer.geo.name",
        "override": false,
        "ignore_failure": true,
        "copy_from": "observer.name"
      }
    }
  ]
}

Check that each request is acknowledged

{
  "acknowledged": true
}

After navigating back to Uptime, you should now see the appropriate location name for your monitor.