Logstash 8.12.0 Release Notes

New features and enhancements

  • Add support for adding and removing multiple keystore keys in a single operation #15739
  • Docker: Update Iron Bank base image to ubi9.2 #15490
  • Internal: extract GeoIP database manager to stand-alone feature #15348

Notable issues fixed

  • Add missing method of logger wrapper for puma #15640
  • Fix logstash-keystore multiple keys operations with command flags #15737
  • Separate scheduling of segments flushes from time #15697
  • Add system properties to configure Jackson’s stream read constraints #15763
  • Fix issue with Jackson 2.15: Can not write a field name, expecting a value #15564

Updates to dependencies

  • Add bigdecimal > 3.1 dependency. #15384
  • Update Guava dependency to 32.1.2 #15394
  • Swap dataformat-yaml with snakeyaml #15606
  • Bump Puma to 6.4.2+ #15776
  • Update jackson to 2.15.3 #15477

Documentation enhancements

Plugins

Elasticsearch Input - 4.19.1

  • Plugin version bump to pick up docs fix in #199 required to clear build error in docgen. #200
  • Add search_api option to support search_after and scroll #198
  • The default value auto uses search_after for Elasticsearch >= 8, otherwise, fall back to scroll

Http Input - 3.8.0

  • Fixed SSL Java KeyStore support #171
  • Added ssl_keystore_type configuration
  • Added SSL Java TrustStore configurations (ssl_truststore_type, ssl_truststore_path and ssl_truststore_password)

Elastic_enterprise_search Integration - 3.0.0

  • [BREAKING] Swiftype endpoints are no longer supported for both plugins App Search and Workplace Search
  • Bumped Enterprise Search clients to version >= 7.16, < 9 #18
  • Added support to SSL configurations (ssl_certificate_authorities, ssl_truststore_path, ssl_truststore_password, ssl_truststore_type, ssl_verification_mode, ssl_supported_protocols and ssl_cipher_suites)
  • The App Search deprecated options host and path were removed

Kafka Integration - 11.3.3

  • Fixed: "Can’t modify frozen string" error when record value is nil (tombstones) #155

Logstash Integration - 1.0.1

  • Fixed: improves throughput by allowing pipeline workers to share a plugin instance concurrently instead of sequentially #19
  • Introduced load balancing mechanism to distribute the requests among the hosts #16

Elasticsearch Output - 11.22.2

  • Fixed: avoid to populate version and version_type attributes when processing integration metadata and datastream is enabled. #1161
  • Added support for propagating event processing metadata when this output is downstream of an Elastic Integration Filter and configured without explicit version, version_type, or routing directives #1158
  • Added support for propagating event processing metadata when this output is downstream of an Elastic Integration Filter and configured without explicit index, document_id, or pipeline directives #1155
  • Changed the register to initiate pipeline shutdown upon bootstrap failure instead of simply logging the error #1151
  • Doc: Replace document_already_exist_exception with version_conflict_engine_exception in the silence_errors_in_log setting example #1159
  • Doc: Add content for sending data to Elasticsearch on serverless #1164