From da744d4ea994052cf6bc782a973e333db62804f4 Mon Sep 17 00:00:00 2001 From: Andres Rodriguez Date: Fri, 4 Dec 2020 15:02:38 +0100 Subject: [PATCH] Fix changelog.next in preparation for 7.10.1 (#22923) (#22927) (cherry picked from commit 79e4e1e1425bcf740db4308da0d2259182422f43) --- CHANGELOG.asciidoc | 3 ++- CHANGELOG.next.asciidoc | 6 +----- 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index a81a66cf7f9..95385e136c0 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -559,6 +559,7 @@ field. You can revert this change by configuring tags for the module and omittin *Packetbeat* +- Add an example to packetbeat.yml of using the `forwarded` tag to disable `host` metadata fields when processing network data from network tap or mirror port. {pull}19209[19209] - Add ECS fields for x509 certs, event categorization, and related IP info. {pull}19167[19167] *Functionbeat* @@ -704,7 +705,7 @@ https://github.com/elastic/beats/compare/v7.7.0...v7.8.0[View commits] - Add support for Google Application Default Credentials to the Google Pub/Sub input and Google Cloud modules. {pull}15668[15668] - Improve ECS categorization field mappings for zeek module. {issue}16029[16029] {pull}17738[17738] - Improve ECS categorization field mappings for netflow module. {issue}16135[16135] {pull}18108[18108] -- Add an input option `publisher_pipeline.disable_host` to disable `host.name`. {pull}18456[18456] +- Add an input option `publisher_pipeline.disable_host` to disable `host.name` from being added to events by default. {pull}18159[18159] - Improve ECS categorization field mappings in system module. {issue}16031[16031] {pull}18065[18065] - Improve ECS categorization field mappings in osquery module. {issue}16176[16176] {pull}17881[17881] - Add support for v10, v11 and v12 logs on Postgres {issue}13810[13810] {pull}17732[17732] diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 61ce175cf94..260f3114637 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -79,6 +79,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - With the default configuration the cloud modules (aws, azure, googlecloud, o365, okta) - With the default configuration the cef and panw modules will no longer send the `host` `forwarded` from the list. {issue}13920[13920] {pull}18223[18223] +- Preserve case of http.request.method. ECS prior to 1.6 specified normalizing to lowercase, which lost information. Affects filesets: apache/access, elasticsearch/audit, iis/access, iis/error, nginx/access, nginx/ingress_controller, aws/elb, suricata/eve, zeek/http. {issue}18154[18154] {pull}18359[18359] - Adds oauth support for httpjson input. {issue}18415[18415] {pull}18892[18892] - Adds `split_events_by` option to httpjson input. {pull}19246[19246] - Adds `date_cursor` option to httpjson input. {pull}19483[19483] @@ -650,8 +651,6 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Added new Checkpoint Syslog filebeat module. {pull}17682[17682] - Added Unix stream socket support as an input source and a syslog input source. {pull}17492[17492] - Added new Fortigate Syslog filebeat module. {pull}17890[17890] -- Added an input option `publisher_pipeline.disable_host` to disable `host.name` -from being added to events by default. {pull}18159[18159] - Change the `json.*` input settings implementation to merge parsed json objects with existing objects in the event instead of fully replacing them. {pull}17958[17958] - Improve ECS categorization field mappings in osquery module. {issue}16176[16176] {pull}17881[17881] - Add http_endpoint input. {pull}18298[18298] @@ -749,9 +748,6 @@ from being added to events by default. {pull}18159[18159] *Journalbeat* -- Added an `id` config option to inputs to allow running multiple inputs on the -same journal. {pull}18467[18467] - *Metricbeat* - Move the windows pdh implementation from perfmon to a shared location in order for future modules/metricsets to make use of. {pull}15503[15503]