Beats auditbeat

Elastic · Elastic.Auditbeat

Collect your Linux audit framework data and monitor the integrity of your files.

winget install --id Elastic.Auditbeat --exact --source winget

Latest 9.4.2

Release Notes

Features and enhancements Filebeat

  • Match http.ServeMux redirect status code for path cleaning in http_endpoint mux. #50686 Libbeat
  • Update ebpfevents to v0.9.0. #50609 Metricbeat
  • Add failure_store metric to the stats metricset in the Beat module. #49452
  • Add elasticsearch/security_stats metricset to the Elasticsearch module. #50674
  • Migrate azure/app_insights metricset off the deprecated track-1 Azure SDK and go-autorest, and use azcore directly. #50392 Fixes All
  • Initialize disk queue frame IDs from persisted state. #50534
  • Fix race in pipeline client between Publish and Close that could skip waiting for events to be acknowledged. #50625 #49390 Auditbeat
  • Release the bolt file lock when the last datastore bucket is closed. #50386 #50381 Filebeat
  • Fix token refresh for jwk_pem/jwk_file in the cel, httpjson, and okta inputs. #50433 #50426
  • Accept string values for secret_state to support Fleet secret resolution. #50508
  • Respect max_bytes/message_max_bytes when reading the first chunk of CRI partial lines. #50552
  • When Filestream is migrating the registry key from inputs that did not have an ID, match files by path and file identity instead of only path. #50599
  • Fixes UDP input crashes on Windows when oversized datagrams are received. #50770 #50718
  • Make CrowdStrike streaming input cancel refresh goroutines on session reconnect. #50803 Heartbeat
  • Upgrade npm to v11 in non-wolfi Heartbeat Docker images. #50598 Metricbeat
  • Fix panic in Azure module when all configured resources match no Azure resources. #50498
  • Elasticsearch module cluster state requests no longer append local=true. #50723 #50722

Installer type: wix

Architecture Scope Download SHA256
x64 Download 89480FA5D23836073FB14E302F880807E02B1B3EF073128B3AF2B1AF22D17FD1

Details

Homepage
https://www.elastic.co/downloads/beats/auditbeat
License
Elastic-2.0
Publisher
Elastic
Support
https://github.com/elastic/beats/issues
Privacy Policy
https://www.elastic.co/legal/privacy-statement
Copyright
© 2026. Elasticsearch B.V. All Rights Reserved

Older versions (22)

9.4.1
Architecture Scope Download SHA256
x64 Download 32BD0755D17FADBE55B441E33A3D33ED1BDA1EB4992E8BFCF7941C5300B1A1D1
9.4.0
Architecture Scope Download SHA256
x64 Download E55ACFB6C1C0CF902103298B8F8F5A0FC16E020244E08A19CEE4295F4A2E207B
9.3.4
Architecture Scope Download SHA256
x64 Download C923A558882DB8C5DF336624780837CA43453A8FBAFA3C6B3A562598A074AD4F
9.3.3
Architecture Scope Download SHA256
x64 Download D8E44D51286BEB636F45C60D680F7E9E834C9764E61891DAE4D783C36C965819
9.3.2
Architecture Scope Download SHA256
x64 Download BC74889F662610549C790429CAD22E81636ADF6BE1F2DCF1F9D4707FC0409FCC
9.3.1
Architecture Scope Download SHA256
x64 Download 77DC76BE56FC2847EADCCF4026CF14028D270AF3BC431E0F46102F957A029C74
9.3.0
Architecture Scope Download SHA256
x64 Download 1967D2B66D24B31B85638061D29E9ED82ADFBAA2BED6B3CFF0EC8F99BC0AA036
9.2.4
Architecture Scope Download SHA256
x64 Download 0E972B036F460EB093A4F95E46C267174F5BB99E05F75A3802DFB59B43E7383E
9.2.3
Architecture Scope Download SHA256
x64 Download 430B95CEB31702C0842BCE7D0210C913EB8986F43BE3A6674CC29DC601318E63
9.2.2
Architecture Scope Download SHA256
x64 Download 57B4B08EB97065EC581CB086BF455544B2D4DFE939748B22F74828A12646C363
9.2.1
Architecture Scope Download SHA256
x64 Download DB2D8ED95A9860F366F4F49B6117664E510250DBB9C3EDA1F271B06D10946337
9.2.0
Architecture Scope Download SHA256
x64 Download E7A0D0B2E445EB5185F64559E1298F0B3CF28E4EB912E6BEB1C28812F01AA59D
9.1.5
Architecture Scope Download SHA256
x64 Download 29865383906E1B3AB40F311A9658A94DD2BA9B14F649BEDA4534D3BC073EB9F8
9.1.4
Architecture Scope Download SHA256
x64 Download 7EEDE3A206733144918623043392E5DE581ED1BD1906FC19ACA0CFD038DC5DF9
9.1.3
Architecture Scope Download SHA256
x64 Download AEE1A6721B8CE82BE3D32815759013B58784EDFE9A59263207DDCD9DFD4EC047
9.1.1
Architecture Scope Download SHA256
x64 Download 9DE31BD644C8728FEE6B02B246EAB163410BD2EF248CBFD1240F0DE9E9F214AA
9.1.0
Architecture Scope Download SHA256
x64 Download 684268C831BF12CD923B40B78D37AE7BDDF1C431AC7838E1A86B9BA54553EE7C
9.0.4
Architecture Scope Download SHA256
x64 Download 123CFB612B4F18EA309AC850CBA8A1C1363181AA4EE982A1D3DD2E7281A54894
9.0.3
Architecture Scope Download SHA256
x64 Download DF7C141E326136FBD07F1F6530BB63A179130EA0903D4B067E9C2263D7F9CCC2
9.0.2
Architecture Scope Download SHA256
x64 Download 98D2B99C21ACB39B8BEFE0827FDD584653DAE8598B641605875FE82AE1319986
9.0.1
Architecture Scope Download SHA256
x64 Download 9508B562483EBE3DA2687590C878E1AC067937EFF51C920E7C3698C79681BA55
9.0.0
Architecture Scope Download SHA256
x64 Download 0D9BD3913537011DA37EDF45C7AEB5F3B191F1FF871C85CDE2C8B4F93F2E4859