You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Fix go routine leak in docker module. {pull}3492[3492]
46
46
47
47
*Packetbeat*
48
48
49
-
- Fix issue where some Cassandra visualizations were showing data from all protocols. {issue}3314[3314]
50
-
51
-
*Topbeat*
52
-
53
-
*Filebeat*
54
-
- Fix registry cleanup issue when files falling under ignore_older after restart. {issue}2818[2818]
55
-
- Fix registry migration issue from old states were files were only harvested after second restart. {pull}3322[3322]
56
-
- Fix alignment issue were Filebeat compiled with Go 1.7.4 was crashing on 32 bits system. {issue}3273[3273]
57
49
58
50
*Winlogbeat*
59
-
- Fix for "The array bounds are invalid" error when reading large events. {issue}3076[3076]
51
+
60
52
61
53
==== Added
62
54
63
55
*Affecting all Beats*
64
-
- Add support for passing list and dictionary settings via -E flag.
65
-
- Support for parsing list and dictionary setting from environment variables.
66
-
- Added new flags to import_dashboards (-cacert, -cert, -key, -insecure). {pull}3139[3139] {pull}3163[3163]
67
-
- The limit for the number of fields is increased via the mapping template. {pull}3275[3275]
68
-
- Updated to Go 1.7.4. {pull}3277[3277]
69
-
- Added a NOTICE file containing the notices and licenses of the dependencies. {pull}3334[3334].
56
+
70
57
- Files created by Beats (logs, registry, file output) will have 0600 permissions. {pull}3387[3387].
71
58
- RPM/deb packages will now install the config file with 0600 permissions. {pull}3382[3382]
72
59
- Add the option to pass custom HTTP headers to the Elasticsearch output. {pull}3400[3400]
73
60
- Unify `regexp` and `contains` conditionals, for both to support array of strings and convert numbers to strings if required. {pull}3469[3469]
74
61
- Add the option to load the sample dashboards during the Beat startup phase. {pull}3506[3506]
75
62
- Disabled date detection in Elasticsearch index templates. Date fields must be explicitly defined in index templates. {pull}3528[3528]
63
+
- Using environment variables in the configuration file is now GA, instead of experimental. {pull}3525[3525]
64
+
65
+
*Filebeat*
66
+
67
+
- Add the `pipeline` config option at the prospector level, for configuring the Ingest Node pipeline ID. {pull}3433[3433]
68
+
- Update regular expressions used for matching file names or lines (multiline, include/exclude functionality) to new matchers improving performance of simple string matches. {pull}3469[3469]
69
+
- The `symlinks` and `harverster_limit` settings are now GA, instead of experimental. {pull}3525[3525]
70
+
71
+
*Heartbeat*
76
72
77
73
*Metricbeat*
78
74
79
-
- Add experimental filebeat metricset in the beats module. {pull}2297[2297]
80
-
- Add experimental libbeat metricset in the beats module. {pull}2339[2339]
81
-
- Add experimental docker module. Provided by Ingensi and @douaejeouit based on dockbeat.
82
-
- Add username and password config options to the MongoDB module. {pull}2889[2889]
83
-
- Add username and password config options to the PostgreSQL module. {pull}2889[2890]
84
-
- Add system core metricset for Windows. {pull}2883[2883]
85
-
- Add a sample Redis Kibana dashboard. {pull}2916[2916]
86
-
- Add support for MongoDB 3.4 and WiredTiger metrics. {pull}2999[2999]
87
-
- Add experimental kafka module with partition metricset. {pull}2969[2969]
88
-
- Add raw config option for mysql/status metricset. {pull}3001[3001]
89
75
- Add experimental dbstats metricset to MongoDB module. {pull}3228[3228]
90
76
- Use persistent, direct connections to the configured nodes for MongoDB module. {pull}3228[3228]
- Add system socket module that reports all TCP sockets. {pull}3246[3246]
96
-
- Kafka consumer groups metricset. {pull}3240[3240]
97
77
- Add dynamic configuration reloading for modules. {pull}3281[3281]
98
78
- Add docker health metricset {pull}3357[3357]
99
79
- Add docker image metricset {pull}3467[3467]
100
80
- System module uses new matchers for white-listing processes. {pull}3469[3469]
101
-
- Add CEPH module with health metricset. {pull}3311[3311]
102
-
- Add php_fpm module with pool metricset. {pull}3415[3415]
103
-
- Add cluster_disk and pool_disk metricsets to CEPH module. {pull}3499[3499]
81
+
- Add Beta CEPH module with health metricset. {pull}3311[3311]
82
+
- Add Beta php_fpm module with pool metricset. {pull}3415[3415]
83
+
- The Docker, Kafka, and Prometheus modules are now Beta, instead of experimental. {pull}3525[3525]
84
+
- The HAProxy module is now GA, instead of experimental. {pull}3525[3525]
104
85
105
86
*Packetbeat*
106
87
107
-
*Topbeat*
88
+
*Winlogbeat*
89
+
90
+
==== Deprecated
91
+
92
+
*Affecting all Beats*
93
+
94
+
- Usage of field _type is deprecated. It should not be used in queries or dashboards. {pull}3409[3409]
108
95
109
96
*Filebeat*
110
-
- Add enabled config option to prospectors. {pull}3157[3157]
111
-
- Add target option for decoded_json_field. {pull}3169[3169]
112
-
- Add the `pipeline` config option at the prospector level, for configuring the Ingest Node pipeline ID. {pull}3433[3433]
113
-
- Update regular expressions used for matching file names or lines (multiline, include/exclude functionality) to new matchers improving performance of simple string matches. {pull}3469[3469]
97
+
98
+
- The experimental `publish_async` option is now deprecated and is planned to be removed in 6.0. {pull}3525[3525]
99
+
100
+
*Heartbeat*
101
+
102
+
*Metricbeat*
103
+
104
+
*Packetbeat*
114
105
115
106
*Winlogbeat*
116
107
117
-
- Reduced amount of memory allocated while reading event log records. {pull}3113[3113] {pull}3118[3113]
Copy file name to clipboardExpand all lines: filebeat/docs/reference/configuration/filebeat-options.asciidoc
+1-4
Original file line number
Diff line number
Diff line change
@@ -415,8 +415,6 @@ NOTE: The pipeline ID can also be configured in the Elasticsearch output, but th
415
415
416
416
===== symlinks
417
417
418
-
experimental[]
419
-
420
418
The `symlinks` option allows Filebeat to harvest symlinks in addition to regular files. When harvesting symlinks, Filebeat opens and reads the original file even though it reports the path of the symlink.
421
419
422
420
When you configure a symlink for harvesting, make sure the original path is excluded. If a single prospector is configured to harvest both the symlink and the original file, the prospector will detect the problem and only process the first file it finds. However, if two different prospectors are configured (one to read the symlink and the other the original path), both paths will be harvested, causing Filebeat to send duplicate data and the prospectors to overwrite each other's state.
@@ -457,8 +455,6 @@ lines. The `backoff` value will be multiplied each time with the `backoff_factor
457
455
[[harvester-limit]]
458
456
===== harvester_limit
459
457
460
-
experimental[]
461
-
462
458
The `harvester_limit` option limits the number of harvesters that are started in parallel for one prospector. This directly relates
463
459
to the maximum number of file handlers that are opened. The default for `harvester_limit` is 0, which means there is no limit. This
464
460
configuration is useful if the number of files to be harvested exceeds the open file handler limit of the operating system.
@@ -498,6 +494,7 @@ See <<load-balancing>> for more information about how this setting affects load
498
494
===== publish_async
499
495
500
496
experimental[]
497
+
deprecated[5.3.0]
501
498
502
499
If enabled, the publisher pipeline in Filebeat operates in async mode preparing
503
500
a new batch of lines while waiting for ACK. This option can improve load-balancing
0 commit comments