IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.19.22

edit

View commits

Enhancements

edit

Filebeat

  • Add api_endpoint configuration option to gcp-pubsub input to allow overriding the default Pub/Sub API endpoint. #53080
  • Add hints.input_allow_list to restrict Filebeat hints-generated input types. #52624

Packetbeat

  • Log Npcap installer diagnostic files on installation failure. #52667

Bug fixes

edit

All

  • Revert non-Ironbank container images to UBI9. #52823

Filebeat

  • Scope the aws-s3 polling state registry to the input's bucket. #52728 #52721
  • Prevent httpjson chain pagination from advancing the cursor when a chained request fails.
  • Follow every CrowdStrike discover resource instead of only the first feed.
  • Fix race condition in Kafka input when multiple inputs are configured. #34919
  • Fix Azure AD entity analytics accumulating stale registered owners and users on devices.
  • Fix Active Directory entity analytics panic when ssl.certificate_authorities is set.

Heartbeat

  • Align maintenance window recurrence handling with Kibana, including nth-weekday rules, tzid timezone evaluation, until end bounds, hourly recurrences, inclusive duration behavior, and legacy dtstart formats. #52572 #52571

Metricbeat

  • Fix Kubernetes metadata watcher deadlock that blocked metricset shutdown.

Packetbeat

  • Censor HTTP parameters for mixed-case hide_keywords entries. #52650
  • Fix bounds-check panics in Packetbeat TLS and Cassandra protocol parsers.
  • Fix rendering of TLS certificate serial numbers so each byte is always represented as two hex digits, matching OpenSSL output.