docs: Prepare Changelog for 8.19.4 (#46594)

* docs: Close changelog for 8.19.4

* Update CHANGELOG.asciidoc

---------

Co-authored-by: elasticmachine <[email protected]>
Co-authored-by: Pierre HILBERT <[email protected]>
Co-authored-by: Eric Beahan <[email protected]>

Author: 4 people

CHANGELOG.asciidoc

@@ -3,6 +3,47 @@
 :issue: https://github.com/elastic/beats/issues/
 :pull: https://github.com/elastic/beats/pull/
 
+[[release-notes-8.19.4]]
+=== Beats version 8.19.4
+https://github.com/elastic/beats/compare/v8.19.3\...v8.19.4[View commits]
+
+==== Bugfixes
+
+*Affecting all Beats*
+
+- Fix a race condition during metrics initialization which could cause a panic. {issue}45822[45822] {pull}46054[46054]
+- Fixed a panic when the beat restarts itself by adding 'eventfd2' to default seccomp policy. {issue}46372[46372]
+- Update Go version to 1.24.7. {pull}46070[46070].
+- Update github.com/go-viper/mapstructure/v2 version to v2.4.0. {pull}46335[46335]
+- Update github.com/docker/docker version to v28.3.3. {pull}46334[46334]
+
+*Filebeat*
+
+- Log bad handshake details when websocket connection fails {pull}41300[41300]
+- Fix aws region in aws-s3 input s3 polling mode.  {pull}41572[41572]
+- Prevent computer details being returned for user queries by Activedirectory Entity Analytics provider. {issue}11818[11818] {pull}42796[42796]
+- The UDP input now fails if it cannot bind to the configured port and its status is set to failed when running under Elastic Agent. {issue}37216[37216] {pull}46302[46302]
+- The Unix input now fails on errors listening to the socket and its status is set to failed when running under Elastic Agent. {pull}46302[46302]
+- Fix race condition that could cause Filebeat to hang during shutdown after failing to startup. {issue}45034[45034] {pull}46331[46331]
+
+*Metricbeat*
+
+- Fix an issue where the conntrack metricset entries field reported a count inflated by a factor of the number of CPU cores. {issue}46138[46138] {pull}46140[46140]
+
+*Winlogbeat*
+
+- Fix forwarded event handling and add channel error resilience. {pull}46190[46190]
+
+==== Added
+
+*Filebeat*
+
+- Improve HTTP JSON health status logic for empty template results. {pull}46332[46332]
+- Improve CEL input documentation of authentication options. {pull}46253[46253]
+- Add status reporting support for Azure Event Hub v2 input. {pull}44846[44846]
+- Add documentation for device collection in Entity Analytics Active Directory Filebeat's input. {pull}46363[46363]
+
+
 [[release-notes-8.19.3]]
 === Beats version 8.19.3
 https://github.com/elastic/beats/compare/v8.19.2\...v8.19.3[View commits]

CHANGELOG.next.asciidoc

@@ -137,51 +137,13 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 - Fix publication of group data from the Okta entity analytics provider. {pull}40681[40681]
 - Ensure netflow custom field configuration is applied. {issue}40735[40735] {pull}40730[40730]
 - Fix a bug in Salesforce input to only handle responses with 200 status code {pull}41015[41015]
-- Log bad handshake details when websocket connection fails {pull}41300[41300]
 - Fix double encoding of client_secret in the Entity Analytics input's Azure Active Directory provider {pull}41393[41393]
-- Fix aws region in aws-s3 input s3 polling mode.  {pull}41572[41572]
 
 - Fix double encoding of client_secret in the Entity Analytics input's Azure Active Directory provider {pull}41393[41393]
 - The azure-eventhub input now correctly reports its status to the Elastic Agent on fatal errors {pull}41469[41469]
 - Further rate limiting fix in the Okta provider of the Entity Analytics input. {issue}40106[40106] {pull}41977[41977]
 - Remove erroneous status reporting to Elastic-Agent from the Filestream input {pull}42435[42435]
-- Fix truncation of bodies in request tracing by limiting bodies to 10% of the maximum file size. {pull}42327[42327]
-- [Journald] Fixes handling of `journalctl` restart. A known symptom was broken multiline messages when there was a restart of journalctl while aggregating the lines. {issue}41331[41331] {pull}42595[42595]
-- Fix entityanalytics activedirectory provider full sync use before initialization bug. {pull}42682[42682]
-- In the `http_endpoint` input, fix the check for a missing HMAC HTTP header. {pull}42756[42756]
-- Prevent computer details being returned for user queries by Activedirectory Entity Analytics provider. {issue}11818[11818] {pull}42796[42796]
-- Handle unexpectedEOF error in aws-s3 input and enforce retrying using download failed error {pull}42420[42756]
-- Prevent azureblobstorage input from logging key details during blob fetch operations. {pull}43169[43169]
-- Handle special values of accountExpires in the Activedirectory Entity Analytics provider. {pull}43364[43364]
-- Log bad handshake details when websocket connection fails {pull}41300[41300]
-- Fix aws region in aws-s3 input s3 polling mode.  {pull}41572[41572]
-- Fixed websocket input panic on sudden network error or server crash. {issue}44063[44063] {pull}44068[44068]
-- [Filestream] Log the "reader closed" message on the debug level to avoid log spam. {pull}44051[44051]
-- Fix links to CEL mito extension functions in input documentation. {pull}44098[44098]
-- Fix endpoint path typo in Okta entity analytics provider. {pull}44147[44147]
 - Journald input now works on Docker containers, all image variants except Wolfi. {issue}41278[41278] {issue}44040[44040] {pull}46625[46625]
-- Fixed a websocket panic scenario which would occur after exhausting max retries. {pull}44342[44342]
-- Fix publishing Okta entity analytics enrichments. {pull}44483[44483]
-- Fix status reporting panic in GCP Pub/Sub input. {issue}44624[44624] {pull}44625[44625]
-- Fix a logging regression that ignored to_files and logged to stdout. {pull}44573[44573]
-- If a Filestream input fails to be created, its ID is removed from the list of running input IDs {pull}44697[44697]
-- Fix timeout handling by Crowdstrike streaming input. {pull}44720[44720]
-- Ensure DEPROVISIONED Okta entities are published by Okta entityanalytics provider. {issue}12658[12658] {pull}44719[44719]
-- Fix handling of cursors by the streaming input for Crowdstrike. {issue}44364[44364] {pull}44548[44548]
-- Added missing "text/csv" content-type filter support in azureblobsortorage input. {issue}44596[44596] {pull}44824[44824]
-- Fix unexpected EOF detection and improve memory usage. {pull}44813[44813]
-- Fixed issue for "Root level readerConfig no longer respected" in azureblobstorage input. {issue}44812[44812] {pull}44873[44873]
-- Added missing "text/csv" content-type filter support in GCS input. {issue}44922[44922] {pull}44923[44923]
-- Fix a panic in the winlog input that prevented it from starting. {issue}45693[45693] {pull}45730[45730]
-- Fix wrongly emitted missing input ID warning {issue}42969[42969] {pull}45747[45747]
-- Fix error handling in ABS input when both root level `max_workers` and `batch_size` are empty. {issue}45680[45680] {pull}45743[45743]
-- Fix handling of unnecessary BOM in UTF-8 text received by o365audit input. {issue}44327[44327] {pull}45739[45739]
-- Fix reading journald messages with more than 4kb. {issue}45511[45511] {pull}46017[46017]
-- Restore the Streaming input on Windows. {pull}46031[46031]
-- Fix termination of input on API errors. {pull}45999[45999]
-- The UDP input now fails if it cannot bind to the configured port and its status is set to failed when running under Elastic Agent. {issue}37216[37216] {pull}46302[46302]
-- The Unix input now fails on errors listening to the socket and its status is set to failed when running under Elastic Agent. {pull}46302[46302]
-- Fix race condition that could cause Filebeat to hang during shutdown after failing to startup {issue}45034[45034] {pull}46331[46331]
 - Fix metrics from TCP & UDP inputs when the port number is > 32767 {pull}46486[46486]
 - [Journald input] Fix reading all files in a folder and watching for new ones. {issue}46657[46657] {pull}46682[46682]
 - [azure-eventhub] Fix handling of connection strings with entity path. {issue}43715[43715] {pull}43716[43716]
@@ -213,8 +175,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 - Don't skip first bucket value in GCP metrics metricset for distribution type metrics {pull}41822[41822]
 - [K8s Integration] Enhance HTTP authentication in case of token updates for Apiserver, Controllermanager and Scheduler metricsets  {issue}41910[41910] {pull}42016[42016]
 - Remove `hostname` field from zookeeper's `mntr` data stream. {pull}41887[41887]
-- Fix an issue where the conntrack metricset entries field reported a count inflated by a factor of the number of CPU cores. {issue}46138[46138] {pull}46140[46140]
-- Enhance behavior of sanitizeError: replace sensitive info even if it is escaped and add pattern-based sanitization {pull}45857[45857]
 - Do not log an error if metadata enrichment is disabled for K8's module {pull}46536
 - Fix Azure Monitor wildcard metrics names timegrain issue by using the first, smallest timegrain; fix nil pointer issue {pull}46145[46145]
 
@@ -313,10 +273,6 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 - Added input metrics to Azure Blob Storage input. {issue}36641[36641] {pull}43954[43954]
 - Refactor & cleanup with updates to default values and documentation. {pull}41834[41834]
 - Enhanced HTTPJSON input error logging with structured error metadata conforming to Elastic Common Schema (ECS) conventions. {pull}45653[45653]19
-- Improve HTTP JSON health status logic for empty template results. {pull}46332[46332]
-- Improve CEL input documentation of authentication options. {pull}46253[46253]
-- Add status reporting support for Azure Event Hub v2 input. {pull}44846[44846]
-- Add documentation for device collection in Entity Analytics Active Directory Filebeat's input. {pull}46363[46363]
 
 *Auditbeat*
 
@@ -440,4 +396,4 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 
 *Filebeat*
  - The Filestream input does not enforce the restrictions documented for the `clean_inactive` option, thus allowing configurations that can lead to data re-ingestion issues.
- - When `clean_inactive: 0`, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set `clean_inactive: -1` to disable this behavior.
+ - When `clean_inactive: 0`, Filestream cleans the state of all files on start up, effectively re-ingesting all files on restart. Set `clean_inactive: -1` to disable this behavior.

libbeat/docs/release.asciidoc

@@ -8,6 +8,7 @@ This section summarizes the changes in each release. Also read
 <<breaking-changes>> for more detail about changes that affect
 upgrade.
 
+* <<release-notes-8.19.4>>
 * <<release-notes-8.19.3>>
 * <<release-notes-8.19.2>>
 * <<release-notes-8.19.1>>