elastic · dedemorton · Feb 15, 2022 · Feb 15, 2022
diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
@@ -12,47 +12,46 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits]
 *Affecting all Beats*
 
 - Remove the deprecated `xpack.monitoring.*` settings. Going forward only `monitoring.*` settings may be used. {issue}9424[9424] {pull}18608[18608]
-- Remove deprecated/undocumented IncludeCreatorMetadata setting from kubernetes metadata config options {pull}28006[28006]
-- Remove deprecated fields from kubernetes module {pull}28046[28046]
-- Remove deprecated config option aws_partition. {pull}28120[28120]
+- Remove deprecated/undocumented `IncludeCreatorMetadata` setting from kubernetes metadata config options. {pull}28006[28006]
+- Remove deprecated fields from kubernetes module. {pull}28046[28046]
+- Remove deprecated config option `aws_partition`. {pull}28120[28120]
 - Improve stats API by adding host metadata. {pull}27963[27963]
 - Libbeat: logp package forces ECS compliant logs. Logs are JSON formatted. Options to enable ECS/JSON have been removed. {issue}15544[15544] {pull}28573[28573]
 - Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671]
 - add_process_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
 - add_docker_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
 - Use data streams instead of indices for storing events from Beats. {pull}28450[28450]
 - Remove option `setup.template.type` and always load composable template with data streams. {pull}28450[28450]
-- Remove several ILM options (`rollover_alias` and `pattern`) as data streams does not require index aliases. {pull}28450[28450]
-- Index template's default_fields setting is only populated with ECS fields. {pull}28596[28596] {issue}28215[28215]
-- Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671]
+- Remove several ILM options (`rollover_alias` and `pattern`) as data streams do not require index aliases. {pull}28450[28450]
+- Populate index template's `default_fields` setting with ECS fields only. {pull}28596[28596] {issue}28215[28215]
 - Remove deprecated `--template` and `--ilm-policy` flags. Use `--index-management` instead. {pull}28870[28870]
-- Remove options `logging.files.suffix` and default to datetime endings in log file names. The format of the new name is `{beatname}-{date}(-n)?.ndjson`. Exmaple log files names from oldest to newest: `filebeat-20200101.ndjson`, `filebeat-20200101-1.ndjson`, `filebeat-20200101-2.ndjson`. {pull}28927[28927]
-- Allign kubernetes configuration settings. {pull}29908[29908]
-- The extension of the log files of Beats and Elastic Agent is changed to `.ndjson`. If you are collecting the logs, you must change the path configuration to `/path/to/logs/{beatname}*.ndjson` to avoid any issues. {pull}28927[28927]
+- Remove `logging.files.suffix` option, and default to datetime endings in log file names. The format of the new name is `{beatname}-{date}(-n)?.ndjson`. Example log file names from oldest to newest: `filebeat-20200101.ndjson`, `filebeat-20200101-1.ndjson`, `filebeat-20200101-2.ndjson`. {pull}28927[28927]
+- Align kubernetes configuration settings. {pull}29908[29908]
+- Change log file extension for Beats and Elastic Agent to `.ndjson`. If you are collecting the logs, you must change the path configuration to `/path/to/logs/{beatname}*.ndjson` to avoid any issues. {pull}28927[28927]
 - Remove legacy support for SSLv3. {pull}30071[30071]
 
 *Filebeat*
 
 - Add `while_pattern` type to multiline reader. {pull}19662[19662]
-- auditd dataset: Use process.args to store program arguments instead of auditd.log.aNNN fields. {pull}29601[29601]
-- Remove deprecated old awscloudwatch input name. {pull}29844[29844]
+- auditd dataset: Use `process.args` to store program arguments instead of `auditd.log.aNNN` fields. {pull}29601[29601]
+- Remove deprecated old `awscloudwatch` input name. {pull}29844[29844]
 
 *Metricbeat*
 
 - Remove network and diskio metrics from ec2 metricset. {pull}28316[28316]
-- Rename read/write_io.ops_per_sec to read/write.iops in rds metricset. {pull}28350[28350]
+- Rename `read/write_io.ops_per_sec` to `read/write.iops` in rds metricset. {pull}28350[28350]
 - system/process metricset: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
 
 *Packetbeat*
 
 - `event.category` no longer contains the value `network_traffic` because this is not a valid ECS event category value. {pull}20556[20556]
-- Remove deprecated TLS fields in favor of tls.server.x509 and tls.client.x509 ECS fields. {pull}28487[28487]
+- Remove deprecated TLS fields in favor of `tls.server.x509` and `tls.client.x509` ECS fields. {pull}28487[28487]
 - HTTP: The field `http.request.method` will maintain its original case. {pull}28620[28620]
 
 *Winlogbeat*
 
-- Remove top level `hash` property from sysmon events {pull}20653[20653]
-- Move module processing from local Javascript processor to ingest node {issue}29184[29184] {pull}29435[29435]
+- Remove top level `hash` property from sysmon events. {pull}20653[20653]
+- Move module processing from local Javascript processor to ingest node. {issue}29184[29184] {pull}29435[29435]
 
 ==== Bugfixes
 
@@ -62,15 +61,15 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits]
 
 *Filebeat*
 
-- Fix using log_group_name_prefix in aws-cloudwatch input. {pull}29695[29695]
+- Fix using `log_group_name_prefix` in `aws-cloudwatch` input. {pull}29695[29695]
 
 *Heartbeat*
 
-- Add fonts to support more different types of characters for multiple languages. {pull}29861[29861]
+- Add fonts to support more types of characters for multiple languages. {pull}29861[29861]
 
 *Metricbeat*
 
-- Extract correct index property in kibana.stats metricset {pull}29622[29622]
+- Extract correct index property in `kibana.stats` metricset. {pull}29622[29622]
 - Fixed bug with `elasticsearch/cluster_stats` metricset not recording license expiration date correctly. {pull}29711[29711]
 
 *Packetbeat*
@@ -84,32 +83,32 @@ https://github.com/elastic/beats/compare/v7.17.0...v8.0.0[View commits]
 
 *Affecting all Beats*
 
-- Add config option `rotate_on_startup` to file output {issue}19150[19150] {pull}19347[19347]
+- Add config option `rotate_on_startup` to file output. {issue}19150[19150] {pull}19347[19347]
 - Update to ECS 8.0 fields. {pull}28620[28620]
-- Support custom analyzers in fields.yml. {issue}28540[28540] {pull}28926[28926]
-- Support self signed certificates on outputs {pull}29229[29229]
+- Support custom analyzers in `fields.yml`. {issue}28540[28540] {pull}28926[28926]
+- Support self-signed certificates on outputs. {pull}29229[29229]
 - Add FIPS configuration option for all AWS API calls. {pull}[28899]
 - Warn users when connecting to older versions of Elasticsearch instances. {pull}29723[29723]
-- `add_fields` processor is now able to set metadata in events {pull}30092[30092]
+- `add_fields` processor is now able to set metadata in events. {pull}30092[30092]
 
 *Auditbeat*
 
 - system/process: Prevent hashing files in other mnt namespaces. {issue}25777[25777] {issue}29678[29678] {pull}29786[29786]
 
 *Metricbeat*
 
-- Preliminary AIX support {pull}27954[27954]
-- Add option to skip older k8s events {pull}29396[29396]
+- Add preliminary AIX support. {pull}27954[27954]
+- Add option to skip older k8s events. {pull}29396[29396]
 - Add `elasticsearch.cluster.id` field to Beat and Kibana modules. {pull}29577[29577]
 - Add `elasticsearch.cluster.id` field to Logstash module. {pull}29625[29625]
 
 *Winlogbeat*
 
-- Add support for sysmon event ID 26; FileDeleteDetected. {issue}26280[26280] {pull}29957[29957]
+- Add support for sysmon event ID 26; `FileDeleteDetected`. {issue}26280[26280] {pull}29957[29957]
 
 *Elastic Log Driver*
 
-- Fixed docs for hosts {pull}23644[23644]
+- Fixed docs for hosts. {pull}23644[23644]
 
 [[release-notes-7.17.0]]
 === Beats version 7.17.0