Company
Date Published
Author
Monica Sarbu
Word count
663
Language
English
Hacker News points
None

Summary

In the "Brewing in Beats" blog post by Monica Sarbu, the latest updates in the Beats project, a part of the Elastic Stack, are highlighted. The post discusses the new capabilities of Auditbeat to run alongside the auditd daemon on Linux kernels 3.16 and above, thanks to support for multicast in go-libaudit and Auditbeat. The default configurations for the number of shards have been optimized, reducing the number of shards for typical installations, and changes have been made to ensure pod annotations in Docker and Kubernetes are retained longer for log reading purposes. The update also covers various fixes and enhancements across different Beats components, including Metricbeat, Packetbeat, Filebeat, and documentation improvements, all aimed at enhancing performance, usability, and configuration flexibility in the upcoming 6.0.0-rc1 release.