A newer version is available. Check out the latest documentation.

Beats version 8.17.6

edit

View commits

Bugfixes

edit

Filebeat

  • Journald input is again usable in the Filebeat Docker container (except Wolfi) by including journalctl by default. The included version of journalctl must be compatible with the one on that wrote the journal files being ingested. The Wolfi container remains distroless and does not contain journalctl or any part of systemd. 41278 44040 44056
  • Fixed websocket input panic on sudden network error or server crash. 44063 44068

Added

edit

Filebeat

  • Add pagination batch size support to Entity Analytics input’s Okta provider. 43655