Support Matrix

Product and Operating System

	CentOS/RHEL 6.x/7.x	Oracle Enterprise Linux 6/7 with RHEL Kernel only	Ubuntu 14.04	Ubuntu 16.04	SLES 11 SP4**	SLES 12	openSUSE Leap 42	Windows Server 2012/R2	Windows Server 2016	Debian 7	Debian 8	Debian 9	Solaris/ SmartOS	Amazon Linux*
Elasticsearch 2.4.x
Elasticsearch 5.0.x
Elasticsearch 5.1.x
Elasticsearch 5.2.x
Elasticsearch 5.3.x
Elasticsearch 5.4.x
Elasticsearch 5.5.x
Elasticsearch 5.6.x
Elasticsearch 6.0.x
Elasticsearch 6.1.x
Elasticsearch 6.2.x
Elasticsearch 6.3.x
Elasticsearch 6.4.x

We currently only support and test x86_64 architectures.
Encryption at rest for Elasticsearch via dm-crypt is supported on all Linux OSs
*We might ask you to move to newer versions of Amazon Linux as part of our support process
**Zip/tar.gz archives only. RPM installation is not supported on SLES 11.

	CentOS/RHEL 6.x/7.x	Oracle Enterprise Linux 6/7 with RHEL Kernel only	Ubuntu 14.04	Ubuntu 16.04	SLES 11 SP4**	SLES 12	openSUSE Leap 42	Windows Server 2012/R2	Windows Server 2016	Debian 7	Debian 8	Debian 9	Solaris/ SmartOS	Amazon Linux*
Logstash 2.4.x
Logstash 5.0.x
Logstash 5.1.x
Logstash 5.2.x
Logstash 5.3.x
Logstash 5.4.x
Logstash 5.5.x
Logstash 5.6.x
Logstash 6.0.x
Logstash 6.1.x
Logstash 6.2.x
Logstash 6.3.x
Logstash 6.4.x

We currently only support and test x86_64 architectures.
*We might ask you to move to newer versions of Amazon Linux as part of our support process
**Zip/tar.gz archives only. RPM installation is not supported on SLES 11.

Auditbeat

	CentOS/RHEL 6.x/7.x	Ubuntu 14.04	Ubuntu 16.04	SLES 12	Debian 8	Debian 9	Windows Server 2012/R2	Windows Server 2016	Solaris/ SmartOS	FreeBSD	MacOS 10.13	AIX	Amazon Linux*
Auditbeat 6.0.x
Auditbeat 6.1.x
Auditbeat 6.2.x
Auditbeat 6.3.x
Auditbeat 6.4.x

Filebeat

	CentOS/RHEL 6.x/7.x	Ubuntu 14.04	Ubuntu 16.04	SLES 12	Debian 8	Debian 9	Windows Server 2012/R2	Windows Server 2016	MacOS 10.13	AIX	Amazon Linux*
Filebeat 5.x
Filebeat 6.0.x
Filebeat 6.1.x
Filebeat 6.2.x
Filebeat 6.3.x
Filebeat 6.4.x

Heartbeat

	CentOS/RHEL 6.x/7.x	Ubuntu 14.04	Ubuntu 16.04	SLES 12	Debian 8	Debian 9	Windows Server 2012/R2	Windows Server 2016	MacOS 10.13	AIX	Amazon Linux*
Heartbeat 5.2.x-5.6.x
Heartbeat 6.0.x
Heartbeat 6.1.x
Heartbeat 6.2.x
Heartbeat 6.3.x
Heartbeat 6.4.x

Metricbeat

	CentOS/RHEL 6.x/7.x	Ubuntu 14.04	Ubuntu 16.04	SLES 12	Debian 8	Debian 9	Windows Server 2012/R2	Windows Server 2016	Solaris/ SmartOS	FreeBSD	MacOS 10.13	AIX	Amazon Linux*
Metricbeat 5.x
Metricbeat 6.0.x
Metricbeat 6.1.x
Metricbeat 6.2.x
Metricbeat 6.3.x
Metricbeat 6.4.x

Packetbeat

	CentOS/RHEL 6.x/7.x	Ubuntu 14.04	Ubuntu 16.04	SLES 12	Debian 8	Debian 9	Windows Server 2012/R2	Windows Server 2016	MacOS 10.13	AIX	Amazon Linux*
Packetbeat 5.x
Packetbeat 6.0.x
Packetbeat 6.1.x
Packetbeat 6.2.x
Packetbeat 6.3.x
Packetbeat 6.4.x

Winlogbeat

	Windows Server 2008	Windows Server 2012/R2	Windows Server 2016
Winlogbeat 5.x
Winlogbeat 6.0.x
Winlogbeat 6.1.x
Winlogbeat 6.2.x
Winlogbeat 6.3.x
Winlogbeat 6.4.x

*We might ask you to move to newer versions of Amazon Linux as part of our support process
Additionally, we provide Beats binaries but not support for Windows XP, Windows Server 2008, OpenSuSE Leap 42, OpenSuSE 13.2, and Oracle Enterprise Linux 6/7 with RHEL Kernel only.
You may also self compile without support on Linux ARM, Linux PPC/PPC64LE, Solaris/SmartOS, and FreeBSD.

Elastic Cloud Enterprise

	CentOS/RHEL 6x	CentOS/RHEL 7.x	Oracle Enterprise Linux 6/7 with RHEL Kernel only	Ubuntu 16.04	Ubuntu 14.04	SLES 11 SP4**/12	OpenSuSE 13.2	Windows Server 2012/R2	Windows Server 2016	Debian 7	Debian 8	Solaris/ SmartOS	Amazon Linux
Elastic Cloud Enterprise 1.0
Elastic Cloud Enterprise 1.1
Elastic Cloud Enterprise 2.0

Supported Docker and Linux Kernel versions:
ECE 1.X requires Docker version 1.11. While it may work with other Docker versions, it is known to break with certain combinations of Docker and kernel version, and has not been thoroughly tested with any Docker version other than 1.11.
ECE 2.0 supports the following Docker and OS combinations:
- Ubuntu 16.04 + Docker 1.11 or Docker 18.03
- Ubuntu 14.04 or RHEL/CentOS 7.x. + Docker 1.11.
While ECE 2.0 may work with other Docker versions, it is known to break with RHEL/CentOS 7.x + and Docker 1.12+.
ECE requires Linux kernel version 3.10 or higher.
ECE requires kernel memory accounting to be disabled for all memory cgroups. Disable it by passing `cgroup.memory=nokmem` to the kernel at boot time.
**Zip/tar.gz archives only. RPM installation is not supported on SLES 11.

APM Server

	CentOS/RHEL 6.x/7.x	Ubuntu 14.04	Ubuntu 16.04	Debian 9	Windows Server 2016	OSX 10.12	Amazon Linux*
APM Server 6.2.x
APM Server 6.3.x
APM Server 6.4.x

Elasticsearch and JVM

	Oracle JVM 1.7u55+*	Oracle JVM 1.8u60+	Oracle JVM 9	Oracle JVM 10	IcedTea OpenJDK 1.7.0.55+*	IcedTea OpenJDK 1.8.0.111+	OpenJDK 9	OpenJDK 10	Azul Zing 16.01.9.0+	IBM JVM 7, 8, 9 & 10
Elasticsearch 2.4.x
Elasticsearch 5.0.x
Elasticsearch 5.1.x
Elasticsearch 5.2.x
Elasticsearch 5.3.x
Elasticsearch 5.4.x
Elasticsearch 5.5.x
Elasticsearch 5.6.x
Elasticsearch 6.0.x
Elasticsearch 6.1.x
Elasticsearch 6.2.x
Elasticsearch 6.3.x
Elasticsearch 6.4.x

* We have seen rare reports of users on JDK 7 impacted by https://bugs.openjdk.java.net/browse/JDK-8152921; the only known workaround is to upgrade to JDK 8

** Java 9 and Java 10 are short term releases. We advise against using them unless you're prepared to handle the fast release cadence this imposes. See Oracle's schedule for JVM support at http://www.oracle.com/technetwork/java/eol-135779.html

The Elasticsearch/JVM support information on this page applies to both server and client (e.g., client api) implementations.

Logstash and JVM

	Oracle JVM 1.7u55+*	Oracle JVM 1.8u60+	Oracle JVM 9, 10	IcedTea OpenJDK 1.7.0.55+*	IcedTea OpenJDK 1.8.0.111+	OpenJDK 9 , 10	Azul Zing 16.01.9.0+	IBM JVM 7, 8, 9 & 10
Logstash 2.4.x
Logstash 5.0.x
Logstash 5.1.x
Logstash 5.2.x
Logstash 5.3.x
Logstash 5.4.x
Logstash 5.5.x
Logstash 5.6.x
Logstash 6.0.x
Logstash 6.1.x
Logstash 6.2.x
Logstash 6.3.x
Logstash 6.4.x

* We have seen rare reports of users on JDK 7 impacted by https://bugs.openjdk.java.net/browse/JDK-8152921; the only known workaround is to upgrade to JDK 8

Supported Browsers *

	IE9	IE11+	Firefox	Chrome	Safari (Mac)
Kibana 4.x
Kibana 5.x
Kibana 6.0.x
Kibana 6.1.x
Kibana 6.2.x
Kibana 6.3.x
Kibana 6.4.x

* Kibana only
Latest GA versions of listed browsers supported.

Product Compatibility

Compatibility with Elasticsearch (5.x, 6.x)

Elasticsearch	Kibana	X-Pack	Beats^*	Logstash^*	ES-Hadoop (jar)*	APM Server
5.0.x	5.0.x	5.0.x	1.3.x-5.6.x	2.4.x-5.6.x	5.0.x-5.6.x
5.1.x	5.1.x	5.1.x	1.3.x-5.6.x	2.4.x-5.6.x	5.0.x-5.6.x
5.2.x	5.2.x	5.2.x	1.3.x-5.6.x	2.4.x-5.6.x	5.0.x-5.6.x
5.3.x	5.3.x	5.3.x	1.3.x-5.6.x	2.4.x-5.6.x	5.0.x-5.6.x
5.4.x	5.4.x	5.4.x	1.3.x-5.6.x	2.4.x-5.6.x	5.0.x-5.6.x
5.5.x	5.5.x	5.5.x	1.3.x-5.6.x	2.4.x-5.6.x	5.0.x-5.6.x
5.6.x	5.6.x	5.6.x	1.3.x-6.0.x	2.4.x-6.0.x	5.0.x-6.0.x
6.0.x	6.0.x	6.0.x	5.6.x-6.4.x	5.6.x-6.4.x	6.0.x-6.4.x
6.1.x	6.1.x	6.1.x	5.6.x-6.4.x	5.6.x-6.4.x	6.0.x-6.4.x
6.2.x	6.2.x	6.2.x	5.6.x-6.4.x	5.6.x-6.4.x	6.0.x-6.4.x	6.2.x-6.4.x
6.3.x	6.3.x	N/A**	5.6.x-6.4.x	5.6.x-6.4.x	6.0.x-6.4.x	6.2.x-6.4.x
6.4.x	6.4.x	N/A**	5.6.x-6.4.x	5.6.x-6.4.x	6.0.x-6.4.x	6.2.x-6.4.x

^ Elasticsearch output compatibility - Beats & Logstash indexing data to Elasticsearch
* We recommend running the latest version of Beats, Logstash, and ES-Hadoop; earlier versions will work with reduced functionality.
** Starting in version 6.3, X-Pack features are included in the default distributions of Elastic Stack. See https://www.elastic.co/products/x-pack/open

Compatibility with Elasticsearch (2.x)

Elasticsearch	Kibana	Marvel	Shield	Graph	Reporting	Beats**	Logstash**	ES-Hadoop (jar)
2.0.x	4.2.x	2.0.x	2.0.x	N/A	N/A	1.0.x - 5.6.x	2.0.x - 5.6.x	2.2.x - 2.4.x
2.1.x	4.3.x	2.1.x	2.1.x	N/A	N/A	1.0.x - 5.6.x	2.0.x - 5.6.x	2.2.x - 2.4.x
2.2.x	4.4.x	2.2.x	2.2.x	N/A	N/A	1.0.x - 5.6.x	2.0.x - 5.6.x	2.2.x - 2.4.x
2.3.x	4.5.x	2.3.x	2.3.x	2.3.x	N/A	1.0.x - 5.6.x	2.0.x - 5.6.x	2.2.x - 2.4.x
2.4.x	4.6.x	2.4.x	2.4.x	2.4.x	2.4.x	1.0.x - 5.6.x	2.0.x - 5.6.x	2.2.x - 2.4.x

** Beats to Logstash has a separate compatibility chart

Compatibility with Logstash

Logstash	Beats	Monitoring & Management Elasticsearch Cluster*
2.4.x	1.0.x-5.6.x	N/A
5.0.x	1.3.x-5.6.x	N/A
5.1.x	5.0.x-5.6.x	N/A
5.2.x	5.0.x-5.6.x	5.2.x - 5.6.x
5.3.x	5.0.x-5.6.x	5.3.x - 5.6.x
5.4.x	5.0.x-5.6.x	5.4.x - 5.6.x
5.5.x	5.0.x-5.6.x	5.5.x - 5.6.x
5.6.x	5.0.x-6.4.x	5.6.x - 6.0.x
6.0.x	5.6.x-6.4.x	6.0.x - 6.4.x
6.1.x	5.6.x-6.4.x	6.1.x - 6.4.x
6.2.x	5.6.x-6.4.x	6.2.x - 6.4.x
6.3.x	5.6.x-6.4.x	6.3.x - 6.4.x
6.4.x	5.6.x-6.4.x	6.4.x

* Compatibility applies to the monitoring & management Elasticsearch cluster and any Elasticsearch clusters that metrics are routed through. This includes any cluster(s) referenced in the xpack.monitoring.elasticsearch.url and xpack.management.elasticsearch.url settings. It's highly recommended to run the same minor versions across Elasticsearch, Kibana, and Logstash for best monitoring & management functionality. For versions 6.2 and older, X-Pack must be installed on all products.

Compatibility with Beats

Beats	Logstash	Monitoring Elasticsearch Cluster*
1.3.x	2.0.x - 5.0.x	N/A
5.0.x	2.0.x - 5.6.x	N/A
5.1.x	2.0.x - 5.6.x	N/A
5.2.x	2.0.x - 5.6.x	N/A
5.3.x	2.0.x - 5.6.x	N/A
5.4.x	2.0.x - 5.6.x	N/A
5.5.x	2.0.x - 5.6.x	N/A
5.6.x	5.6.x - 6.4.x	N/A
6.0.x	5.6.x - 6.4.x	N/A
6.1.x	5.6.x - 6.4.x	N/A
6.2.x	5.6.x - 6.4.x	6.2.x
6.3.x	5.6.x - 6.4.x	6.3.x-6.4.x
6.4.x	5.6.x - 6.4.x	6.4.x

* Compatibility applies to the monitoring Elasticsearch cluster and any Elasticsearch clusters that metrics are routed through. This includes any cluster(s) referenced in the xpack.monitoring.elasticsearch settings. It's highly recommended to run the same minor versions across Elasticsearch, Kibana, and Beats for best monitoring functionality. For version 6.2, X-Pack must be installed on all products.

Compatibility with Elastic Cloud Enterprise

ECE	Elasticsearch	Kibana
1.0.x	2.4.x - 5.6.x	4.6.x - 5.6.x
1.1.x	2.4.x - 6.0.x	4.6.x - 6.0.x

Supported Logstash Plugins

The plugins listed below are maintained and supported by Elastic. Plugin versions that are installable on an Elastic supported Logstash release are considered supported.

The full list of all plugins in the Logstash ecosystem can be found in the product documentation:

• Input plugins
• Codec plugins
• Filter plugins
• Output plugins

Tier 1 Plugins

Definition: These incorporate Logstash plugins that Elastic have published directly and plugins that Elastic has a high degree of experience with. Elastic will provide support to new Support Requests at point of entry for all Severity Levels (1 through 3) but retain the right to downgrade Support Requests to Severity 3 should the root cause be isolated to an external system, service, or library.

Input Plugins azure_event_hubs beats elasticsearch file generator heartbeat http http_poller jdbc kafka rabbitmq redis s3* stdin syslog tcp udp

Codec plugins avro cef es_bulk json json_lines line multiline plain rubydebug

Filter plugins csv date dissect dns drop elasticsearch fingerprint geoip grok jdbc_static jdbc_streaming json kv mutate ruby sleep split syslog_pri translate truncate urldecode useragent uuid xml

Output plugins elasticsearch email file http kafka rabbitmq redis s3* stdout tcp udp

* Only for AWS S3. S3 compatible storage solutions are not supported.

Tier 2 Plugins

Definition: These incorporate Logstash plugins where Elastic has a more limited focus, such that Elastic's ability to effect a solution could be impaired. Elastic will provide support under Severity 3 only.

Input Plugins couchdb_changes gelf graphite sqs twitter

Codec plugins collectd dots fluent graphite msgpack netflow

Filter plugins aggregate de_dot throttle

Output plugins csv graphite lumberjack