Affecting all Beats
Auditbeat
Filebeat
Heartbeat
Metricbeat
Packetbeat
Winlogbeat
Functionbeat
Affecting all Beats
Auditbeat
-
auditd: Add error.message to events when processing fails. 30009
Filebeat
-
tcp/unix input: Stop accepting connections after socket is closed. 29712
-
Fix using log_group_name_prefix in aws-cloudwatch input. 29695
-
Fix multiple instances of the same module configured within
filebeat.modules
in filebeat.yml. 29649 29952 -
aws-s3: fix race condition in states used by s3-poller. 30123 30131
-
auditd: Prevent mapping explosion when truncated EXECVE records are ingested. 30382
Heartbeat
- Fix missing mapping for service.name
. 30324
Metricbeat
Packetbeat
Winlogbeat
Functionbeat
Elastic Logging Plugin
Affecting all Beats
-
Name all k8s workqueue. 28085
-
Discover changes in Kubernetes nodes metadata as soon as they happen. 23139
-
Update k8s library 29394
-
Add FIPS configuration option for all AWS API calls. 28899
-
Add support for latest k8s versions v1.23 and v1.22 29575
-
Only connect to Elasticsearch instances with the same version or newer. 29683
-
Move umask from code to service files. 29708
-
Add support for kafka message headers. 29940
-
Add FIPS configuration option for all AWS API calls. 28899
-
Add metadata change support for some processors 30183
Auditbeat
Filebeat
-
Add
text/csv
decoder tohttpjson
input 28564 -
Update
aws-s3
input to connect to non AWS S3 buckets 28222 28234 -
Add support for '/var/log/pods/' path for add_kubernetes_metadata processor with
resource_type: pod
. 28868 -
Add documentation for add_kubernetes_metadata processors
log_path
matcher. 28868 -
Add support for parsers on journald input 29070
-
Add support in httpjson input for oAuth2ProviderDefault of password grant_type. 29087
-
Add support for filtering in journald input with
unit
,kernel
,identifiers
andinclude_matches
. 29294 -
Add new
userAgent
andbeatInfo
template functions for httpjson input 29528 -
threatintel module: Add new Recorded Future integration. 30030
-
Add pipeline in FB’s supported hints. 30212
Auditbeat
Filebeat
Heartbeat
Metricbeat
-
Add
add_resource_metadata
configuration to Kubernetes module. 29133 -
Add
containerd
module withcpu
,memory
,blkio
metricsets. 29247 -
Add
container.id
andcontainer.runtime
ECS fields in container metricset. 29560 -
Add
memory.workingset.limit.pct
field in Kubernetes container/pod metricset. 29547 -
Add k8s metadata in state_cronjob metricset. 29572
-
Add
xpack.enabled
support for Enterprise Search module. 29871 -
Add gcp firestore metricset. 29918
-
Remove strict parsing on RabbitMQ module 30090
-
Add
kubernetes.container.status.last.reason
metric 30306
Packetbeat
Functionbeat
Winlogbeat
Elastic Log Driver