Beats breaking changesedit
This list summarizes the most important breaking changes in Beats. For the complete list, go to Beats breaking changes.
Field changesedit
The following field changes are potentially breaking for anything that relies on these fields:
-
In Filebeat, the
suricata.eve.timestampalias field has been removed from the Suricata module. -
In Auditbeat, the file integrity dataset no longer includes a leading dot
in
file.extensionvalues. For example, it will reportpnginstead of.pngto comply with Elastic Common Schema (ECS).