← Package directory
Available on winget

Install Beats metricbeat

Fetches sets of metrics from the operating system and services

Install with winget
winget install --id Elastic.Metricbeat
Upgrade
winget upgrade --id Elastic.Metricbeat
Uninstall
winget uninstall --id Elastic.Metricbeat

About Beats metricbeat

Metricbeat fetches a set of metrics on a predefined interval from the operating system and services such as Apache web server, Redis, and more and ships them to Elasticsearch or Logstash.

What's new in 9.4.3

This release also includes: Deprecations. Features and enhancements All - Migrate from the deprecated github.com/docker/docker module to the github.com/moby/moby split modules. #50300 Beats - Allow TLS certificate and CA hot-reload without restarting. #50444 Metricbeat - Add data_stream field alongside aliases in cat_shards for the Metricbeat autoops_es module. Fixes All - Upgrade Go to v1.26.4. Beats - Disable TLS certificate hot-reload by default on patch branches. #51104 - Fix panic in the Elastic Agent V2 manager when reloading with no output unit. Elastic agent - Fix Beat receivers adding .0 to whole floating point numbers when encoding to JSON. #14610 Filebeat - Fix request tracer path validation for the cel, httpjson, http_endpoint, and entityanalytics inputs when Filebeat runs as an OTel receiver. #50581 - Fix goroutine leak in filestream task group. #50839 #50824 - Fix Okta entity analytics OAuth2 jwk_json token refresh failure. #50949 - Cache Okta OAuth2 token in cel and httpjson to avoid unnecessary JWT regeneration. - Fix WebSocket reconnect loop ignoring context cancellation with infinite retries. - Fix filestream registry leak on file renames. - Fix WebSocket input hanging on shutdown when server stalls and keep_alive is disabled. - Fix handling of User-Agent header when using OAuth 2.0 authentication. - Guard event.original rename in Azure module ingest pipelines to prevent a "field already exists" error when the field is pre-populated. #51271 Libbeat - Fix bulk indexing failures that could occur when using the Elasticsearch output with some non-Elastic backe...

Read release notes

Version history

Version Updated Notes
9.4.3 Unknown This release also includes: Deprecations. Features and enhancements All - Migrate from the deprecated github.com/docker/docker module to the github.com/moby/moby split modules. #50300 Beats - Allow TLS certificate and CA...
9.4.2 Unknown Features and enhancements Filebeat - Match http.ServeMux redirect status code for path cleaning in http_endpoint mux. #50686 Libbeat - Update ebpfevents to v0.9.0. #50609 Metricbeat - Add failure_store metric to the stat...
9.4.1 Unknown Features and enhancements Libbeat - Cache add_locale processor and refresh only when zone or offset changes. #50343 #50322 Fixes All - Update go-ntlmssp to v0.1.1. #50497 - Fix a deadlock between shutdown and metrics col...
9.4.0 Unknown Features and enhancements All - Export all Beat receiver metrics to OTel telemetry. #49300 - Add add_agent_metadata processor to inject agent metadata efficiently. #49667 - Update OTel Collector components to v0.149.0/v1...
9.3.4 Unknown Features and enhancements All - Update OTel Collector components to v0.149.0/v1.55.0. #50057 Metricbeat - Bump azure-sdk-for-go armmonitor from v0.8.0 to v0.11.0. #49866 Fixes Agentbeat - Update transient dependency gith...
9.3.3 Unknown Features and enhancements All - Update OTel Collector components to v0.148.0. #49578 Filebeat - Add retry back-off logic to streaming input CrowdStrike follower. #48542 #46072 - Add secret_state config to CEL input for e...
9.3.2 Unknown Features and enhancements Elastic Agent - Fix a bug that could report stopped inputs as still running. #49285 #47769 Filebeat - Add optional token_url support for JWT Bearer Flow in Salesforce input. #43933 #43963 The Sa...
9.3.1 Unknown Features and enhancements Filebeat - Add support for managed identity authentication to the azure-eventhub input. #48655 #48680 - Improve log path sanitization for request trace logging. #48719 - Add descriptions and uni...
9.3.0 Unknown This release also includes: Deprecations. Features and enhancements All - Introduce cloud connectors flow. #47587 - Make beats receivers emit status for their subcomponents. #48015 - Add GUID translation, base DN inferen...
9.2.4 Unknown Features and enhancements Filebeat - Add client secret authentication method for Azure Event Hub and storage in Filebeat. #47256 - Add support for AMQP-over-WebSocket transport in the processor v2. #47956 #47823 Metricbe...
9.2.3 Unknown Features and enhancements All - Make beats receivers emit status for their subcomponents. #48015 - Add GUID translation, base DN inference, and SSPI authentication to LDAP processor. #47827 Filebeat - Log unpublished eve...
9.2.2 Unknown This release also includes: Breaking changes. Features and enhancements All - Include whether Beat is running from a FIPS distribution in User Agent. #47409 Filebeat - Add support for DPoP authentication for the CEL and...
9.2.1 Unknown Features and enhancements Filebeat - Add data stream identification to Fleet health status updates. #47229 Metricbeat - Enhance GCP Billing metricset with additional fields. #47059 Fixes All - Add close to conditional pr...
9.2.0 Unknown Release notes
9.1.5 Unknown Release notes
9.1.4 Unknown Release notes
9.1.3 Unknown Release notes
9.1.1 Unknown Release notes
9.1.0 Unknown Release notes
9.0.4 Unknown Release notes