This is a cache of https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.17.4.html. It is a snapshot of the page at 2025-09-25T04:10:42.141+0000.

Beats version 8.17.4 | Beats Platform Reference [8.19] | Elastic

« Beats version 8.17.5 Beats version 8.17.3 »

› ›

Beats version 8.17.4

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Beats version 8.17.4

Known Issues

Filebeat

The Filestream input does not enforce the restrictions documented for the clean_inactive option, thus allowing configurations that can lead to data re-ingestion issues.
When clean_inactive: 0, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set clean_inactive: -1 to disable this behavior.

Breaking changes

Affecting all Beats

The Beats logger and file output rotate files when necessary. The beat now forces a file rotation when unexpectedly writing to a file through a symbolic link.
Allow faccessat(2) in seccomp. 43322

Bugfixes

Filebeat

Prevent computer details being returned for user queries by Active Directory Entity Analytics provider. 11818 42796
Handle unexpectedEOF error in aws-s3 input and enforce retrying using download failed error. 42420
Prevent azureblobstorage input from logging key details during blob fetch operations. 43169
Fixed race conditions in the global ratelimit processor that could drop events or apply rate limiting incorrectly.

Metricbeat

Fix bug where metricbeat unintentionally triggers Windows ASR. 42177
Remove hostname field from Zookeeper’s mntr data stream. 41887
Fix logging argument number mismatch in Metricbeat(Redis). 43072

Winlogbeat

Fix boolean key in security pipelines and sync pipelines with integration. 43027

Added

Affecting all Beats

Update Go version to 1.23.6. 42705

Filebeat

Add configuration option to limit HTTP Endpoint body size. 43171

Osquerybeat

Increase maximum query timeout to 24 hours. 42356

« Beats version 8.17.5 Beats version 8.17.3 »