Index

9.0.2 [beats-9.0.2-release-notes]

Features and enhancements [beats-9.0.2-features-enhancements]

Affecting all Beats

• Update Go version to v1.24.3. 44270

Filebeat

• Add support for collecting device entities in the Active Directory entity analytics provider. 44309
• The add_cloudfoundry_metadata processor now uses xxhash instead of SHA1 for sanitizing persistent cache filenames. Existing users will experience a one-time cache invalidation as the cache store will be recreated with the new filename format. 43964

Metricbeat

• Add checks for the Resty response object in all Meraki module API calls to ensure proper handling of nil responses. 44193
• Add a latency configuration option to the Azure Monitor module. 44366

Osquerybeat

• Update osquery version to v5.15.0. 43426

Fixes [beats-9.0.2-fixes]

Affecting all Beats

• Fix the 'add_cloud_metadata' processor to better support custom certificate bundles by improving how the AWS provider HTTP client is overridden. 44189

Auditbeat

• Fix a potential error in the system/package component that could occur during internal package database schema migration. 44294 44296

Filebeat

• Fix endpoint path typo in the Okta entity analytics provider. 44147
• Fix a WebSocket panic scenario that occured after exhausting the maximum number of retries. 44342

Metricbeat

• Add AWS OwningAccount support for cross-account monitoring. 40570 40691
• Use namespace for GetListMetrics calls in AWS when available. 41022
• Limit index stats collection to cluster-level summaries. 36019 42901
• Omit tier_preference, creation_date and version fields in output documents when not pulled from source indices. 43637
• Add support for _nodes/stats URIs compatible with legacy Elasticsearch versions. 44307