Beats packetbeat

Elastic · Elastic.Packetbeat

Monitors the network and applications by sniffing packets

Packetbeat is an open source network packet analyzer that ships the data to Elasticsearch. Think of it like a distributed real-time Wireshark with a lot more analytics features. The Packetbeat shippers sniff the traffic between your application processes, parse on the fly protocols like HTTP, MySQL, PostgreSQL, Redis or Thrift and correlate the messages into transactions. For each transaction, the shipper inserts a JSON document into Elasticsearch, where it is stored and indexed. You can then use Kibana to view key metrics and do ad-hoc queries against the data.

winget install --id Elastic.Packetbeat --exact --source winget

Latest 9.4.2

Release Notes

Features and enhancements Filebeat

  • Match http.ServeMux redirect status code for path cleaning in http_endpoint mux. #50686 Libbeat
  • Update ebpfevents to v0.9.0. #50609 Metricbeat
  • Add failure_store metric to the stats metricset in the Beat module. #49452
  • Add elasticsearch/security_stats metricset to the Elasticsearch module. #50674
  • Migrate azure/app_insights metricset off the deprecated track-1 Azure SDK and go-autorest, and use azcore directly. #50392 Fixes All
  • Initialize disk queue frame IDs from persisted state. #50534
  • Fix race in pipeline client between Publish and Close that could skip waiting for events to be acknowledged. #50625 #49390 Auditbeat
  • Release the bolt file lock when the last datastore bucket is closed. #50386 #50381 Filebeat
  • Fix token refresh for jwk_pem/jwk_file in the cel, httpjson, and okta inputs. #50433 #50426
  • Accept string values for secret_state to support Fleet secret resolution. #50508
  • Respect max_bytes/message_max_bytes when reading the first chunk of CRI partial lines. #50552
  • When Filestream is migrating the registry key from inputs that did not have an ID, match files by path and file identity instead of only path. #50599
  • Fixes UDP input crashes on Windows when oversized datagrams are received. #50770 #50718
  • Make CrowdStrike streaming input cancel refresh goroutines on session reconnect. #50803 Heartbeat
  • Upgrade npm to v11 in non-wolfi Heartbeat Docker images. #50598 Metricbeat
  • Fix panic in Azure module when all configured resources match no Azure resources. #50498
  • Elasticsearch module cluster state requests no longer append local=true. #50723 #50722

Installer type: wix

Architecture Scope Download SHA256
x64 Download ACE94E56B2C14E5D748CEB428C2A48C01CFB24B85150779F422C1793605A60B5

Details

Homepage
https://www.elastic.co/downloads/beats/packetbeat
License
Elastic-2.0
Publisher
Elastic
Support
https://github.com/elastic/beats/issues
Privacy Policy
https://www.elastic.co/legal/privacy-statement
Copyright
© 2026. Elasticsearch B.V. All Rights Reserved

Older versions (22)

9.4.1
Architecture Scope Download SHA256
x64 Download 8483A6EB420CC5C94B4D8E5F49C42B196B4B7DA28E6D1609AC972FABCEE7E862
9.4.0
Architecture Scope Download SHA256
x64 Download 62249B970E002EBC470812333E7AD99DCB688F90D5293A6DBE83352649797738
9.3.4
Architecture Scope Download SHA256
x64 Download 66B2A181734666949794DDB9C113E6FB03411D688ED29BE062F0EF14D6F82A5A
9.3.3
Architecture Scope Download SHA256
x64 Download 41D514F2AB212BCC1324A896BE5D06BFAB315B9B5133C3C66C5058475FD50424
9.3.2
Architecture Scope Download SHA256
x64 Download 350B8C7524950DF64924BC9E0AD64E2C4D0E52F20B2336F02D9632A583C705CC
9.3.1
Architecture Scope Download SHA256
x64 Download FF1FCECAB580FD620771308245472F9E9BCF93E6131962290E41046438015501
9.3.0
Architecture Scope Download SHA256
x64 Download 8CBC80B8EF0B3156EB5118D8BB9CD3BF6B502B91E640FB08E45455B426269282
9.2.4
Architecture Scope Download SHA256
x64 Download 0AACF329014DA9CB3726F490BF88182061C3BA83062870EA7F318584FA9C8D6E
9.2.3
Architecture Scope Download SHA256
x64 Download 3623C8D11445AAB0B9A92AA37BD93FB7DBCE8DF16E3E20F9537896E4374AC3B3
9.2.2
Architecture Scope Download SHA256
x64 Download 10961E77E5F24A6CB5C02779068BDA6846D2EA74665AD219764BB54A037694A7
9.2.1
Architecture Scope Download SHA256
x64 Download 2777395076141D6A30119C9124C25082CAB2D0231BCA7F3ABABCA20B943925C8
9.2.0
Architecture Scope Download SHA256
x64 Download 4DE2544E09FBA860845A5031609B8D4F6225E5E06E75537AF6CAB6EADB78439D
9.1.5
Architecture Scope Download SHA256
x64 Download 1BC375D8DA599460933F4761AB5257A5B4BEB055EA8DC994589309E5F0434C09
9.1.4
Architecture Scope Download SHA256
x64 Download AF193D5B20A9D4211E11BE0E128102707164E549904C677D4E8FD41FD1E011FB
9.1.3
Architecture Scope Download SHA256
x64 Download DC45B759D2D7A9976B11CDDCB95F110027AA9F0A4C6318767ADB64450A0457CB
9.1.1
Architecture Scope Download SHA256
x64 Download 4CF897E38B746DD62944C3C2036568793C2FE976F581B47568D858086FCF0078
9.1.0
Architecture Scope Download SHA256
x64 Download EB4E34D8B641AEAA5907C088963D9776C2955F16AB4AC20D9457D633A102CFE5
9.0.4
Architecture Scope Download SHA256
x64 Download 56D09AF0BF9493F1C110B949EAF7AFBEA11938BEB843412451647E40C6D1868D
9.0.3
Architecture Scope Download SHA256
x64 Download 93654981918DA8F23E306A616826F035684819BEEF8C6D92E606FFBDE2BE76BF
9.0.2
Architecture Scope Download SHA256
x64 Download 5FA83EDA4A0DFF2C196775AEB9748B4E7C842B2CFC0CF2844771CBA26D3A9FAE
9.0.1
Architecture Scope Download SHA256
x64 Download 8EA4EE63FBA2CAF20B036810BAB581875365EA770E358CDE584DCC38D01A80C8
9.0.0
Architecture Scope Download SHA256
x64 Download 6466119DF060A0E05EF299E7E8FBA2BD46B192D150C97293A29AE6B43BEA78BB