This list summarizes the most important breaking changes in Beats. For the complete list, go to Beats breaking changes.
The following field changes are potentially breaking for anything that relies on these fields:
In Filebeat, the
suricata.eve.timestampalias field has been removed from the Suricata module.
In Auditbeat, the file integrity dataset no longer includes a leading dot
file.extensionvalues. For example, it will report
.pngto comply with Elastic Common Schema (ECS).