Tiago Queiroz

[Filebeat] Duplicated data when using filestream input

8

When there is more than one filestream input with the same ID (or without an ID) data duplication will happen when Filebeat is restarted or a new input with duplicated...

Disk queue re-sends last segment file when there is more than on segment on disk

4

When using the disk queue, when Filebeat is restarted and a new event is sent, the disk queue creates a second segment file, if both are present, whenever Filebeat is...

Fix docker provider add_fields processors

5

This is a backport PR for: https://github.com/elastic/elastic-agent/pull/1420 ## What does this PR do? The Docker provider was using a wrong key when defining the `add_fields` processor, this causes Filebeat not...

[Kafka output] Add config validation for topic and topics fields

10

## Proposed commit message This commit adds configuration validation for `topic` and `topics` fields from the Kafka output. Validation is performed for both cases: standalone Beat and running under Elastic-Agent....

Log raw events and errors containing events to a separate file

31

## Proposed commit message This commit introduces a new logger that can be configured through `logging.sensitive` that can be used to log any message that contains the whole event or...

Beats panic if there are more than 32767 pipeline clients

5

This has been tested with Filebeat but the bug is on libbeat, so it's likely affecting all beats. The OS tested was Linux but the issue is not dependant on...

Filestream sometimes does not update registry offset when file is truncated

3

# Description In some situations when a file is truncated Filebeat will detect the truncation, close the reader but it will not update the registry. This happens in two situations:...

Log raw events to a separate log file

18

## Notes for Reviewers 1. The upgrade of `elastic-agent-libs` to the latest version brought along some breaking changes in `transport.Dialer`, so this PR also updates all types implementing this interface...

Document havester_limit for Filestream input and fix typo

3

## Proposed commit message This commit documents `harvester_limit` for the filestream input and replaces `close_*` by the correct key `close.on_state_change.*`. ## Checklist - ~~[ ] My code follows the style...

Escape ${foo} on strings when configuration is received from Elastic-Agent

2

When the Elastic-Agent computes Unit Configs and send them to Beats, there might be some values in the format `${var}` in the config, [Beats tries to process them as environment...