diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index 26e57a5fb7e0..f2e1438fe31f 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -3,6 +3,95 @@ :issue: https://github.com/elastic/beats/issues/ :pull: https://github.com/elastic/beats/pull/ +[[release-notes-8.15.0]] +=== Beats version 8.15.0 +https://github.com/elastic/beats/compare/v8.14.3\...v8.15.0[View commits] + +==== Breaking changes + +*Filebeat* + +- Tag events that come from a filestream in "take over" mode. {pull}39828[39828] +- Fix filestream's registry garbage collection: registry entries will never be removed if `clean_inactive` is set to "-1". {pull}40258[40258] + +*Metricbeat* + +- Remove fallback to the node limit for the `kubernetes.pod.cpu.usage.limit.pct` and `kubernetes.pod.memory.usage.limit.pct` metrics calculation. +- Add support for Kibana status metricset in v8 format. {pull}40275[40275] + +*Osquerybeat* + +- Add action responses data stream, allowing Osquerybeat to post action results directly to Elasticsearch. {pull}39143[39143] + +==== Bugfixes + +*Affecting all Beats* + +- Rename the field "apache2.module.error" to "apache.module.error" in Apache error visualization. {issue}39480[39480] {pull}39481[39481] +- Validate config of the `replace` processor. {pull}40047[40047] + +*Filebeat* + +- Fix for Google Workspace duplicate events issue by adding canonical sorting over fingerprint keys array to maintain key order. {pull}40055[40055] {issue}39859[39859] +- Prevent panic in CEL and salesforce inputs when `github.com/hashicorp/go-retryablehttp` exceeds maximum retries. {pull}40144[40144] +- Update CEL mito extensions to v1.13.1. {pull}40307[40307] +- Fix bug in CEL input rate limit logic. {issue}40106[40106] {pull}40270[40270] + +*Metricbeat* + +- Set GCP metrics config period to the default (60s) when the value is below the minimum allowed period. {issue}30434[30434] {pull}40020[40020] +- Fix statistic methods for metrics collected for SQS. {pull}40207[40207] +- Update beat module with apm-server monitoring metrics fields. {pull}40127[40127] +- Fix Azure Monitor metric timespan to restore Storage Account PT1H metrics. {issue}40376[40376] {pull}40367[40367] + +==== Added + +*Affecting all Beats* + +- Update Go version to 1.22.5. {pull}40082[40082] +- Introduce log message for not supported annotations for Hints based autodiscover. {pull}38213[38213] +- Add persistent volume claim name to volume if available. {pull}38839[38839] +- Raw events are now logged to a different file, this prevents potentially sensitive information from leaking into log files. {pull}38767[38767] +- Websocket input: Added runtime URL modification support based on state and cursor values. {issue}39858[39858] {pull}39997[39997] + +*Auditbeat* + +- Reduce data size for `add_session_metadata` processor by removing unneeded fields. {pull}39500[39500] +- Enrich process events with user and group names, with `add_session_metadata` processor. {pull}39537[39537] + +*Filebeat* + +- Ensure all responses sent by HTTP Endpoint are HTML-escaped. {pull}39329[39329] +- Improve logging of request and response with request trace logging in error conditions. {pull}39455[39455] +- Implement Elastic Agent status and health reporting for CEL Filebeat input. {pull}39209[39209] +- Add HTTP metrics to CEL input. {issue}39501[39501] {pull}39503[39503] +- Add default user-agent to CEL HTTP requests. {issue}39502[39502] {pull}39587[39587] +- Improve reindexing support in security module pipelines. {issue}38224[38224] {pull}39588[39588] +- Make HTTP Endpoint input GA. {issue}38979[38979] {pull}39410[39410] +- Add support for base64-encoded HMAC headers to HTTP Endpoint. {pull}39655[39655] +- Add user group membership support to Okta entity analytics provider. {issue}39814[39814] {pull}39815[39815] +- Add request trace support for Okta and EntraID entity analytics providers. {pull}39821[39821] +- Allow elision of set and append failure logging. {issue}34544[34544] {pull}39929[39929] +- Add ability to remove request trace logs from CEL input. {pull}39969[39969] +- Add ability to remove request trace logs from HTTPJSON input. {pull}40003[40003] +- Update CEL mito extensions version to v1.13.0 {pull}40035[40035] +- Add Jamf entity analytics provider. {pull}39996[39996] +- Add ability to remove request trace logs from `http_endpoint` input. {pull}40005[40005] +- Add ability to remove request trace logs from `entityanalytics` input. {pull}40004[40004] +- Relax constraint on Base DN in entity analytics Active Directory provider. {pull}40054[40054] +- Enhance input state reporting for CEL evaluations that return a single error object in events. {pull}40083[40083] +- Allow absent credentials when using GCS with Application Default Credentials. {issue}39977[39977] {pull}40072[40072] +- Allow cross-region bucket configuration in S3 input. {issue}22161[22161] {pull}40309[40309] + +*Metricbeat* + +- Support `schema_name` for MySQL performance metricset. {pull}38363[38363] +- Add `last_terminated_timestamp` metric in Kubernetes module. {pull}39200[39200] {issue}3802[3802] +- Add `pod.status.ready_time` and `pod.status.reason` metrics in Kubernetes module. {pull}39316[39316] +- Add "Buffer cache hit ratio base" to calculate "Buffer cache hit ratio" for performance metrics. {pull}40022[40022] +- Add support of Graphite series 1.1.0+ tagging extension for statsd module. {pull}39619[39619] + + [[release-notes-8.14.3]] === Beats version 8.14.3 https://github.com/elastic/beats/compare/v8.14.2\...v8.14.3[View commits] diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 0bf7dd2ce9ad..2892d8b241b7 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -10,7 +10,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Affecting all Beats* -- Update Go version to 1.22.5. {pull}40082[40082] *Auditbeat* @@ -18,35 +17,15 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Filebeat* - Convert netflow input to API v2 and disable event normalisation {pull}37901[37901] -- Removed deprecated ZScaler from Beats. Use the https://docs.elastic.co/integrations/zscaler_zia[Zscaler Internet Access] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Tomcat from Beats. Use the https://docs.elastic.co/integrations/apache_tomcat[Apache Tomcat] Elastic integration instead. {pull}38037[38037] - Removed deprecated Squid from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated SonicWall from Beats. Use the https://docs.elastic.co/integrations/sonicwall[SonicWall Firewall] Elastic integration instead. {pull}38037[38037] - Removed deprecated Sonicwall from Beats. Use the https://docs.elastic.co/integrations/sonicwall[SonicWall Firewall] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Snort from Beats. Use the https://docs.elastic.co/integrations/snort[Snort] Elastic integration instead. {pull}38037[38037] - Removed deprecated Radware from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated Proofpoint from Beats. Use the https://docs.elastic.co/integrations/proofpoint_tap[Proofpoint TAP] Elastic integration instead. {pull}38037[38037] - Removed deprecated Netscout from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated Microsoft DHCP from Beats. Use the https://docs.elastic.co/integrations/microsoft_dhcp[Microsoft DHCP] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Juniper Junos from Beats. Use the https://docs.elastic.co/integrations/juniper_srx[Juniper SRX] Elastic integration instead. {pull}38037[38037] - Removed deprecated Juniper Netscreen from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated Infoblox from Beats. Use the https://docs.elastic.co/integrations/infoblox_nios[Infoblox NIOS] Elastic integration instead. {pull}38037[38037] - Removed deprecated Impreva from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated Fortinet Client Endpoint from Beats. Use the https://docs.elastic.co/integrations/fortinet_forticlient[Fortinet FortiClient Logs] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Fortinet Fortimail from Beats. Use the https://docs.elastic.co/integrations/fortinet_fortimail[Fortinet FortiMail] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Fortinet Fortimanager from Beats. Use the https://docs.elastic.co/integrations/fortinet_fortimanager[Fortinet FortiManager Logs] Elastic integration instead. {pull}38037[38037] -- Removed deprecated F5 from Beats. Use the https://docs.elastic.co/integrations/f5_bigip[F5 BIG-IP] Elastic integration instead. {pull}38037[38037] - Removed deprecated Cylance from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated Cisco Meraki from Beats. Use the https://docs.elastic.co/integrations/cisco_meraki[Cisco Meraki] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Cisco Nexus from Beats. Use the https://docs.elastic.co/integrations/cisco_nexus[Cisco Nexus] Elastic integration instead. {pull}38037[38037] - Removed deprecated Bluecoat from Beats. See <> for migration options. {pull}38037[38037] -- Removed deprecated Barracuda from Beats. Use the https://docs.elastic.co/integrations/barracuda[Barracuda Web Application Firewall] Elastic integration instead. {pull}38037[38037] -- Removed deprecated Sophos UTM from Beats. Use the https://docs.elastic.co/integrations/sophos[Sophos] Elastic integration instead. {pull}38037[38037] - Introduce input/netmetrics and refactor netflow input metrics {pull}38055[38055] -- Update Salesforce module to use new Salesforce input. {pull}37509[37509] -- Tag events that come from a filestream in "take over" mode. {pull}39828[39828] -- Fix high IO and handling of a corrupted registry log file. {pull}35893[35893] -- Fix filestream's registry GC: registry entries will never be removed if clean_inactive is set to "-1". {pull}40258[40258] *Heartbeat* @@ -54,13 +33,9 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Metricbeat* - Setting period for counter cache for Prometheus remote_write at least to 60sec {pull}38553[38553] -- Add support of Graphite series 1.1.0+ tagging extension for statsd module. {pull}39619[39619] -- Remove fallback to the node limit for the `kubernetes.pod.cpu.usage.limit.pct` and `kubernetes.pod.memory.usage.limit.pct` metrics calculation -- Add support for Kibana status metricset in v8 format {pull}40275[40275] *Osquerybeat* -- Add action responses data stream, allowing osquerybeat to post action results directly to elasticsearch. {pull}39143[39143] *Packetbeat* @@ -79,7 +54,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Affecting all Beats* -- Fix `namespace` filter option on `add_kubernetes_metadata` processor. {pull}39934[39934] - Support for multiline zookeeper logs {issue}2496[2496] - Add checks to ensure reloading of units if the configuration actually changed. {pull}34346[34346] - Fix namespacing on self-monitoring {pull}32336[32336] @@ -94,13 +68,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Support Elastic Agent control protocol chunking support {pull}37343[37343] - Lower logging level to debug when attempting to configure beats with unknown fields from autodiscovered events/environments {pull}[37816][37816] - Set timeout of 1 minute for FQDN requests {pull}37756[37756] -- Fix the paths in the .cmd script added to the path by the Windows MSI to point to the new C:\Program Files installation location. https://github.com/elastic/elastic-stack-installers/pull/238 -- Change cache processor documentation from `write_period` to `write_interval`. {pull}38561[38561] -- Fix cache processor expiries heap cleanup on partial file writes. {pull}38561[38561] -- Fix cache processor expiries infinite growth when large a large TTL is used and recurring keys are cached. {pull}38561[38561] -- Fix parsing of RFC 3164 process IDs in syslog processor. {issue}38947[38947] {pull}38982[38982] -- Rename the field "apache2.module.error" to "apache.module.error" in Apache error visualization. {issue}39480[39480] {pull}39481[39481] -- Validate config of the `replace` processor {pull}40047[40047] *Auditbeat* @@ -123,39 +90,13 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - [threatintel] MISP pagination fixes {pull}37898[37898] - Fix file handle leak when handling errors in filestream {pull}37973[37973] - Fix a race condition that could crash Filebeat with a "negative WaitGroup counter" error {pull}38094[38094] -- Prevent HTTPJSON holding response bodies between executions. {issue}35219[35219] {pull}38116[38116] - Fix "failed processing S3 event for object key" error on aws-s3 input when key contains the "+" character {issue}38012[38012] {pull}38125[38125] -- Fix duplicated addition of regexp extension in CEL input. {pull}38181[38181] -- Fix the incorrect values generated by the uri_parts processor. {pull}38216[38216] -- Fix HTTPJSON handling of empty object bodies in POST requests. {issue}33961[33961] {pull}38290[38290] -- Fix PEM key validation for CEL and HTTPJSON inputs. {pull}38405[38405] - Fix filebeat gcs input panic {pull}38407[38407] -- Rename `activity_guid` to `activity_id` in ETW input events to suit other Windows inputs. {pull}38530[38530] -- Add missing provider registration and fix published entity for Active Directory entityanalytics provider. {pull}38645[38645] -- Fix handling of un-parsed JSON in O365 module. {issue}37800[37800] {pull}38709[38709] - Fix filestream's registry GC: registry entries are now removed from the in-memory and disk store when they're older than the set TTL {issue}36761[36761] {pull}38488[38488] -- Fix indexing failures by re-enabling event normalisation in netflow input. {issue}38703[38703] {pull}38780[38780] -- Fix handling of truncated files in Filestream {issue}38070[38070] {pull}38416[38416] -- Fix panic when more than 32767 pipeline clients are active. {issue}38197[38197] {pull}38556[38556] - Fix filestream's registry GC: registry entries are now removed from the in-memory and disk store when they're older than the set TTL {issue}36761[36761] {pull}38488[38488] - [threatintel] MISP splitting fix for empty responses {issue}38739[38739] {pull}38917[38917] -- Fix a bug in cloudwatch task allocation that could skip some logs {issue}38918[38918] {pull}38953[38953] - Prevent GCP Pub/Sub input blockage by increasing default value of `max_outstanding_messages` {issue}35029[35029] {pull}38985[38985] -- entity-analytics input: Improve structured logging. {pull}38990[38990] -- Fix config validation for CEL and HTTPJSON inputs when using password grant authentication and `client.id` or `client.secret` are not present. {pull}38962[38962] - Updated Websocket input title to align with existing inputs {pull}39006[39006] -- Restore netflow input on Windows {pull}39024[39024] -- Upgrade azure-event-hubs-go and azure-storage-blob-go dependencies. {pull}38861[38861] -- Fix concurrency/error handling bugs in the AWS S3 input that could drop data and prevent ingestion of large buckets. {pull}39131[39131] -- Fix EntraID query handling. {issue}39419[39419] {pull}39420[39420] -- Fix request trace filename handling in http_endpoint input. {pull}39410[39410] -- Fix filestream not correctly tracking the offset of a file when using the `include_message` parser. {pull}39873[39873] {issue}39653[39653] -- Upgrade github.com/hashicorp/go-retryablehttp to mitigate CVE-2024-6104 {pull}40036[40036] -- Fix for Google Workspace duplicate events issue by adding canonical sorting over fingerprint keys array to maintain key order. {pull}40055[40055] {issue}39859[39859] -- Fix handling of deeply nested numeric values in HTTP Endpoint CEL programs. {pull}40115[40115] -- Prevent panic in CEL and salesforce inputs when github.com/hashicorp/go-retryablehttp exceeds maximum retries. {pull}40144[40144] -- Update CEL mito extensions to v1.13.1. {pull}40307[40307] -- Fix bug in CEL input rate limit logic. {issue}40106[40106] {pull}40270[40270] - Relax requirements in Okta entity analytics provider user and device profile data shape. {pull}40359[40359] *Heartbeat* @@ -166,26 +107,9 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Metricbeat* -- Fix `namespace` filter option on metricset `state_namespace` enricher. {pull}39934[39934] -- Fix `namespace` filter option at Kubernetes provider level. {pull}39881[39881] - Fix Azure Monitor 429 error by causing metricbeat to retry the request again. {pull}38294[38294] - Fix fields not being parsed correctly in postgresql/database {issue}25301[25301] {pull}37720[37720] - rabbitmq/queue - Change the mapping type of `rabbitmq.queue.consumers.utilisation.pct` to `scaled_float` from `long` because the values fall within the range of `[0.0, 1.0]`. Previously, conversion to integer resulted in reporting either `0` or `1`. -- Fix timeout caused by the retrival of which indices are hidden {pull}39165[39165] -- Fix Azure Monitor support for multiple aggregation types {issue}39192[39192] {pull}39204[39204] -- Fix handling of access errors when reading process metrics {pull}39627[39627] -- Fix behavior of cgroups path discovery when monitoring the host system from within a container {pull}39627[39627] -- Fix issue where beats may report incorrect metrics for its own process when running inside a container {pull}39627[39627] -- Fix for MySQL/Performance - Query failure for MySQL versions below v8.0.1, for performance metric `quantile_95`. {pull}38710[38710] -- Fix Prometheus helper text parser to store each metric family type. {pull}39743[39743] -- Normalize AWS RDS CPU Utilization values before making the metadata API call. {pull}39664[39664] -- Fix behavior of pagetypeinfo metrics {pull}39985[39985] -- Fix query logic for temp and non-temp tablespaces in Oracle module. {issue}38051[38051] {pull}39787[39787] -- Set GCP metrics config period to the default (60s) when the value is below the minimum allowed period. {issue}30434[30434] {pull}40020[40020] -- Fix statistic methods for metrics collected for SQS. {pull}40207[40207] -- Fix missing metrics from CloudWatch when include_linked_accounts set to false. {issue}40071[40071] {pull}40135[40135] -- Update beat module with apm-server monitoring metrics fields {pull}40127[40127] -- Fix Azure Monitor metric timespan to restore Storage Account PT1H metrics {issue}40376[40376] {pull}40367[40367] *Osquerybeat* @@ -210,27 +134,15 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Beats will now connect to older Elasticsearch instances by default {pull}36884[36884] - Raise up logging level to warning when attempting to configure beats with unknown fields from autodiscovered events/environments - elasticsearch output now supports `idle_connection_timeout`. {issue}35616[35615] {pull}36843[36843] -- Update to Go 1.21.12. {pull}40114[40114] - Enable early event encoding in the Elasticsearch output, improving cpu and memory use {pull}38572[38572] - The environment variable `BEATS_ADD_CLOUD_METADATA_PROVIDERS` overrides configured/default `add_cloud_metadata` providers {pull}38669[38669] -- Introduce log message for not supported annotations for Hints based autodiscover {pull}38213[38213] -- Add persistent volume claim name to volume if available {pull}38839[38839] -- Raw events are now logged to a different file, this prevents potentially sensitive information from leaking into log files {pull}38767[38767] -- Websocket input: Added runtime URL modification support based on state and cursor values {issue}39858[39858] {pull}39997[39997] *Auditbeat* - Added `add_session_metadata` processor, which enables session viewer on Auditbeat data. {pull}37640[37640] - Add linux capabilities to processes in the system/process. {pull}37453[37453] -- Add opt-in eBPF backend for file_integrity module. {pull}37223[37223] - Add linux capabilities to processes in the system/process. {pull}37453[37453] -- Add opt-in eBPF backend for file_integrity module. {pull}37223[37223] -- Add process data to file events (Linux only, eBPF backend). {pull}38199[38199] -- Add container id to file events (Linux only, eBPF backend). {pull}38328[38328] -- Add procfs backend to the `add_session_metadata` processor. {pull}38799[38799] - Add process.entity_id, process.group.name and process.group.id in add_process_metadata processor. Make fim module with kprobes backend to always add an appropriately configured add_process_metadata processor to enrich file events {pull}38776[38776] -- Reduce data size for add_session_metadata processor by removing unneeded fields {pull}39500[39500] -- Enrich process events with user and group names, with add_session_metadata processor {pull}39537[39537] *Auditbeat* @@ -261,58 +173,11 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Add setup option `--force-enable-module-filesets`, that will act as if all filesets have been enabled in a module during setup. {issue}30915[30915] {pull}99999[99999] - Made Azure Blob Storage input GA and updated docs accordingly. {pull}37128[37128] - Made GCS input GA and updated docs accordingly. {pull}37127[37127] -- Suppress and log max HTTP request retry errors in CEL input. {pull}37160[37160] -- Prevent CEL input from re-entering the eval loop when an evaluation failed. {pull}37161[37161] -- Update CEL extensions library to v1.7.0. {pull}37172[37172] -- Add support for complete URL replacement in HTTPJSON chain steps. {pull}37486[37486] -- Add support for user-defined query selection in EntraID entity analytics provider. {pull}37653[37653] -- Update CEL extensions library to v1.8.0 to provide runtime error location reporting. {issue}37304[37304] {pull}37718[37718] -- Add request trace logging for chained API requests. {issue}37551[36551] {pull}37682[37682] -- Relax TCP/UDP metric polling expectations to improve metric collection. {pull}37714[37714] -- Add support for PEM-based Okta auth in HTTPJSON. {pull}37772[37772] -- Prevent complete loss of long request trace data. {issue}37826[37826] {pull}37836[37836] -- Added experimental version of the Websocket Input. {pull}37774[37774] -- Add support for PEM-based Okta auth in CEL. {pull}37813[37813] -- Add Salesforce input. {pull}37331[37331] -- Add ETW input. {pull}36915[36915] -- Update CEL mito extensions to v1.9.0 to add keys/values helper. {pull}37971[37971] -- Add logging for cache processor file reads and writes. {pull}38052[38052] - Add parseDateInTZ value template for the HTTPJSON input {pull}37738[37738] -- Support VPC endpoint for aws-s3 input SQS queue url. {pull}38189[38189] - Improve rate limit handling by HTTPJSON {issue}36207[36207] {pull}38161[38161] {pull}38237[38237] -- Add parseDateInTZ value template for the HTTPJSON input. {pull}37738[37738] -- Add support for complex event objects in the HTTP Endpoint input. {issue}37910[37910] {pull}38193[38193] - Parse more fields from Elasticsearch slowlogs {pull}38295[38295] -- Update CEL mito extensions to v1.10.0 to add base64 decode functions. {pull}38504[38504] -- Add support for Active Directory an entity analytics provider. {pull}37919[37919] -- Add AWS AWSHealth metricset. {pull}38370[38370] -- Add debugging breadcrumb to logs when writing request trace log. {pull}38636[38636] - added benchmark input {pull}37437[37437] - added benchmark input and discard output {pull}37437[37437] -- Ensure all responses sent by HTTP Endpoint are HTML-escaped. {pull}39329[39329] -- Update CEL mito extensions to v1.11.0 to improve type checking. {pull}39460[39460] -- Improve logging of request and response with request trace logging in error conditions. {pull}39455[39455] -- Implement Elastic Agent status and health reporting for CEL Filebeat input. {pull}39209[39209] -- Add HTTP metrics to CEL input. {issue}39501[39501] {pull}39503[39503] -- Add default user-agent to CEL HTTP requests. {issue}39502[39502] {pull}39587[39587] -- Improve reindexing support in security module pipelines. {issue}38224[38224] {pull}39588[39588] -- Make HTTP Endpoint input GA. {issue}38979[38979] {pull}39410[39410] -- Update CEL mito extensions to v1.12.2. {pull}39755[39755] -- Add support for base64-encoded HMAC headers to HTTP Endpoint. {pull}39655[39655] -- Add user group membership support to Okta entity analytics provider. {issue}39814[39814] {pull}39815[39815] -- Add request trace support for Okta and EntraID entity analytics providers. {pull}39821[39821] -- Fix handling of infinite rate values in CEL rate limit handling logic. {pull}39940[39940] -- Allow elision of set and append failure logging. {issue}34544[34544] {pull}39929[39929] -- Add ability to remove request trace logs from CEL input. {pull}39969[39969] -- Add ability to remove request trace logs from HTTPJSON input. {pull}40003[40003] -- Update CEL mito extensions to v1.13.0 {pull}40035[40035] -- Add Jamf entity analytics provider. {pull}39996[39996] -- Add ability to remove request trace logs from http_endpoint input. {pull}40005[40005] -- Add ability to remove request trace logs from entityanalytics input. {pull}40004[40004] -- Relax constraint on Base DN in entity analytics Active Directory provider. {pull}40054[40054] -- Enhance input state reporting for CEL evaluations that return a single error object in events. {pull}40083[40083] -- Allow absent credentials when using GCS with Application Default Credentials. {issue}39977[39977] {pull}40072[40072] -- Allow cross-region bucket configuration in s3 input. {issue}22161[22161] {pull}40309[40309] *Auditbeat* @@ -324,7 +189,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Heartbeat* - Added status to monitor run log report. -- Upgrade node to latest LTS v18.20.3. {pull}40038[40038] *Metricbeat* @@ -336,12 +200,8 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Align on the algorithm used to transform Prometheus histograms into Elasticsearch histograms {pull}36647[36647] - Add linux IO metrics to system/process {pull}37213[37213] - Add new memory/cgroup metrics to Kibana module {pull}37232[37232] -- Support schema_name for MySQL performance metricset {pull}38363[38363] - Add SSL support to mysql module {pull}37997[37997] - Add SSL support for aerospike module {pull}38126[38126] -- Add last_terminated_timestamp metric in kubernetes module {pull}39200[39200] {issue}3802[3802] -- Add pod.status.ready_time and pod.status.reason metrics in kubernetes module {pull}39316[39316] -- Add "Buffer cache hit ratio base" to calculate "Buffer cache hit ratio" for performance metrics {pull}40022[40022] *Metricbeat* @@ -355,8 +215,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] *Winlogbeat* -- Use fixed size buffer at first pass for event parsing, improving throughput {issue}39530[39530] {pull}39544[39544] -- Add ERROR_INVALID_PARAMETER to the list of recoverable errors. {pull}39781[39781] *Functionbeat* @@ -402,3 +260,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] + + + diff --git a/libbeat/docs/release.asciidoc b/libbeat/docs/release.asciidoc index 6f56fdc6ff69..8dfc6167732b 100644 --- a/libbeat/docs/release.asciidoc +++ b/libbeat/docs/release.asciidoc @@ -8,6 +8,7 @@ This section summarizes the changes in each release. Also read <> for more detail about changes that affect upgrade. +* <> * <> * <> * <>