You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Improve stats API by adding host metadata. {pull}27963[27963]
19
19
- Libbeat: logp package forces ECS compliant logs. Logs are JSON formatted. Options to enable ECS/JSON have been removed. {issue}15544[15544] {pull}28573[28573]
20
20
- Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671]
21
21
- add_process_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
22
22
- add_docker_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
23
23
- Use data streams instead of indices for storing events from Beats. {pull}28450[28450]
24
24
- Remove option `setup.template.type` and always load composable template with data streams. {pull}28450[28450]
25
-
- Remove several ILM options (`rollover_alias` and `pattern`) as data streams does not require index aliases. {pull}28450[28450]
26
-
- Index template's default_fields setting is only populated with ECS fields. {pull}28596[28596] {issue}28215[28215]
27
-
- Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671]
25
+
- Remove several ILM options (`rollover_alias` and `pattern`) as data streams do not require index aliases. {pull}28450[28450]
26
+
- Populate index template's `default_fields` setting with ECS fields only. {pull}28596[28596] {issue}28215[28215]
28
27
- Remove deprecated `--template` and `--ilm-policy` flags. Use `--index-management` instead. {pull}28870[28870]
29
-
- Remove options `logging.files.suffix` and default to datetime endings in log file names. The format of the new name is `{beatname}-{date}(-n)?.ndjson`. Exmaple log files names from oldest to newest: `filebeat-20200101.ndjson`, `filebeat-20200101-1.ndjson`, `filebeat-20200101-2.ndjson`. {pull}28927[28927]
- The extension of the log files of Beats and Elastic Agent is changed to `.ndjson`. If you are collecting the logs, you must change the path configuration to `/path/to/logs/{beatname}*.ndjson` to avoid any issues. {pull}28927[28927]
28
+
- Remove `logging.files.suffix` option, and default to datetime endings in log file names. The format of the new name is `{beatname}-{date}(-n)?.ndjson`. Example log file names from oldest to newest: `filebeat-20200101.ndjson`, `filebeat-20200101-1.ndjson`, `filebeat-20200101-2.ndjson`. {pull}28927[28927]
- Change log file extension for Beats and Elastic Agent to `.ndjson`. If you are collecting the logs, you must change the path configuration to `/path/to/logs/{beatname}*.ndjson` to avoid any issues. {pull}28927[28927]
32
31
- Remove legacy support for SSLv3. {pull}30071[30071]
33
32
34
33
*Filebeat*
35
34
36
35
- Add `while_pattern` type to multiline reader. {pull}19662[19662]
37
-
- auditd dataset: Use process.args to store program arguments instead of auditd.log.aNNN fields. {pull}29601[29601]
38
-
- Remove deprecated old awscloudwatch input name. {pull}29844[29844]
36
+
- auditd dataset: Use `process.args` to store program arguments instead of `auditd.log.aNNN` fields. {pull}29601[29601]
37
+
- Remove deprecated old `awscloudwatch` input name. {pull}29844[29844]
39
38
40
39
*Metricbeat*
41
40
42
41
- Remove network and diskio metrics from ec2 metricset. {pull}28316[28316]
43
-
- Rename read/write_io.ops_per_sec to read/write.iops in rds metricset. {pull}28350[28350]
42
+
- Rename `read/write_io.ops_per_sec` to `read/write.iops` in rds metricset. {pull}28350[28350]
44
43
- system/process metricset: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
45
44
46
45
*Packetbeat*
47
46
48
47
- `event.category` no longer contains the value `network_traffic` because this is not a valid ECS event category value. {pull}20556[20556]
49
-
- Remove deprecated TLS fields in favor of tls.server.x509 and tls.client.x509 ECS fields. {pull}28487[28487]
48
+
- Remove deprecated TLS fields in favor of `tls.server.x509` and `tls.client.x509` ECS fields. {pull}28487[28487]
50
49
- HTTP: The field `http.request.method` will maintain its original case. {pull}28620[28620]
51
50
52
51
*Winlogbeat*
53
52
54
-
- Remove top level `hash` property from sysmon events {pull}20653[20653]
55
-
- Move module processing from local Javascript processor to ingest node {issue}29184[29184] {pull}29435[29435]
53
+
- Remove top level `hash` property from sysmon events. {pull}20653[20653]
54
+
- Move module processing from local Javascript processor to ingest node. {issue}29184[29184] {pull}29435[29435]
0 commit comments