diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index f86c7544ea2..8573206e620 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -12,9 +12,9 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits] *Affecting all Beats* - Remove the deprecated `xpack.monitoring.*` settings. Going forward only `monitoring.*` settings may be used. {issue}9424[9424] {pull}18608[18608] -- Remove deprecated/undocumented IncludeCreatorMetadata setting from kubernetes metadata config options {pull}28006[28006] -- Remove deprecated fields from kubernetes module {pull}28046[28046] -- Remove deprecated config option aws_partition. {pull}28120[28120] +- Remove deprecated/undocumented `IncludeCreatorMetadata` setting from kubernetes metadata config options. {pull}28006[28006] +- Remove deprecated fields from kubernetes module. {pull}28046[28046] +- Remove deprecated config option `aws_partition`. {pull}28120[28120] - Improve stats API by adding host metadata. {pull}27963[27963] - Libbeat: logp package forces ECS compliant logs. Logs are JSON formatted. Options to enable ECS/JSON have been removed. {issue}15544[15544] {pull}28573[28573] - Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671] @@ -22,37 +22,36 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits] - add_docker_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620] - Use data streams instead of indices for storing events from Beats. {pull}28450[28450] - Remove option `setup.template.type` and always load composable template with data streams. {pull}28450[28450] -- Remove several ILM options (`rollover_alias` and `pattern`) as data streams does not require index aliases. {pull}28450[28450] -- Index template's default_fields setting is only populated with ECS fields. {pull}28596[28596] {issue}28215[28215] -- Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671] +- Remove several ILM options (`rollover_alias` and `pattern`) as data streams do not require index aliases. {pull}28450[28450] +- Populate index template's `default_fields` setting with ECS fields only. {pull}28596[28596] {issue}28215[28215] - Remove deprecated `--template` and `--ilm-policy` flags. Use `--index-management` instead. {pull}28870[28870] -- Remove options `logging.files.suffix` and default to datetime endings in log file names. The format of the new name is `{beatname}-{date}(-n)?.ndjson`. Exmaple log files names from oldest to newest: `filebeat-20200101.ndjson`, `filebeat-20200101-1.ndjson`, `filebeat-20200101-2.ndjson`. {pull}28927[28927] -- Allign kubernetes configuration settings. {pull}29908[29908] -- The extension of the log files of Beats and Elastic Agent is changed to `.ndjson`. If you are collecting the logs, you must change the path configuration to `/path/to/logs/{beatname}*.ndjson` to avoid any issues. {pull}28927[28927] +- Remove `logging.files.suffix` option, and default to datetime endings in log file names. The format of the new name is `{beatname}-{date}(-n)?.ndjson`. Example log file names from oldest to newest: `filebeat-20200101.ndjson`, `filebeat-20200101-1.ndjson`, `filebeat-20200101-2.ndjson`. {pull}28927[28927] +- Align kubernetes configuration settings. {pull}29908[29908] +- Change log file extension for Beats and Elastic Agent to `.ndjson`. If you are collecting the logs, you must change the path configuration to `/path/to/logs/{beatname}*.ndjson` to avoid any issues. {pull}28927[28927] - Remove legacy support for SSLv3. {pull}30071[30071] *Filebeat* - Add `while_pattern` type to multiline reader. {pull}19662[19662] -- auditd dataset: Use process.args to store program arguments instead of auditd.log.aNNN fields. {pull}29601[29601] -- Remove deprecated old awscloudwatch input name. {pull}29844[29844] +- auditd dataset: Use `process.args` to store program arguments instead of `auditd.log.aNNN` fields. {pull}29601[29601] +- Remove deprecated old `awscloudwatch` input name. {pull}29844[29844] *Metricbeat* - Remove network and diskio metrics from ec2 metricset. {pull}28316[28316] -- Rename read/write_io.ops_per_sec to read/write.iops in rds metricset. {pull}28350[28350] +- Rename `read/write_io.ops_per_sec` to `read/write.iops` in rds metricset. {pull}28350[28350] - system/process metricset: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620] *Packetbeat* - `event.category` no longer contains the value `network_traffic` because this is not a valid ECS event category value. {pull}20556[20556] -- Remove deprecated TLS fields in favor of tls.server.x509 and tls.client.x509 ECS fields. {pull}28487[28487] +- Remove deprecated TLS fields in favor of `tls.server.x509` and `tls.client.x509` ECS fields. {pull}28487[28487] - HTTP: The field `http.request.method` will maintain its original case. {pull}28620[28620] *Winlogbeat* -- Remove top level `hash` property from sysmon events {pull}20653[20653] -- Move module processing from local Javascript processor to ingest node {issue}29184[29184] {pull}29435[29435] +- Remove top level `hash` property from sysmon events. {pull}20653[20653] +- Move module processing from local Javascript processor to ingest node. {issue}29184[29184] {pull}29435[29435] ==== Bugfixes @@ -62,15 +61,15 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits] *Filebeat* -- Fix using log_group_name_prefix in aws-cloudwatch input. {pull}29695[29695] +- Fix using `log_group_name_prefix` in `aws-cloudwatch` input. {pull}29695[29695] *Heartbeat* -- Add fonts to support more different types of characters for multiple languages. {pull}29861[29861] +- Add fonts to support more types of characters for multiple languages. {pull}29861[29861] *Metricbeat* -- Extract correct index property in kibana.stats metricset {pull}29622[29622] +- Extract correct index property in `kibana.stats` metricset. {pull}29622[29622] - Fixed bug with `elasticsearch/cluster_stats` metricset not recording license expiration date correctly. {pull}29711[29711] *Packetbeat* @@ -84,13 +83,13 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits] *Affecting all Beats* -- Add config option `rotate_on_startup` to file output {issue}19150[19150] {pull}19347[19347] +- Add config option `rotate_on_startup` to file output. {issue}19150[19150] {pull}19347[19347] - Update to ECS 8.0 fields. {pull}28620[28620] -- Support custom analyzers in fields.yml. {issue}28540[28540] {pull}28926[28926] -- Support self signed certificates on outputs {pull}29229[29229] +- Support custom analyzers in `fields.yml`. {issue}28540[28540] {pull}28926[28926] +- Support self-signed certificates on outputs. {pull}29229[29229] - Add FIPS configuration option for all AWS API calls. {pull}[28899] - Warn users when connecting to older versions of Elasticsearch instances. {pull}29723[29723] -- `add_fields` processor is now able to set metadata in events {pull}30092[30092] +- `add_fields` processor is now able to set metadata in events. {pull}30092[30092] *Auditbeat* @@ -98,18 +97,18 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits] *Metricbeat* -- Preliminary AIX support {pull}27954[27954] -- Add option to skip older k8s events {pull}29396[29396] +- Add preliminary AIX support. {pull}27954[27954] +- Add option to skip older k8s events. {pull}29396[29396] - Add `elasticsearch.cluster.id` field to Beat and Kibana modules. {pull}29577[29577] - Add `elasticsearch.cluster.id` field to Logstash module. {pull}29625[29625] *Winlogbeat* -- Add support for sysmon event ID 26; FileDeleteDetected. {issue}26280[26280] {pull}29957[29957] +- Add support for sysmon event ID 26; `FileDeleteDetected`. {issue}26280[26280] {pull}29957[29957] *Elastic Log Driver* -- Fixed docs for hosts {pull}23644[23644] +- Fixed docs for hosts. {pull}23644[23644] [[release-notes-7.17.0]] === Beats version 7.17.0