Update of Elastic Stack to Version 9.5.6
Elastic Stack 9.5.6 is a maintenance release that brings a large set of stability, correctness and hardening fixes across Elasticsearch, Kibana, Fleet Server, Logstash, Elastic Agent, Beats, Elastic Observability, and Elastic Security. Elasticsearch improves ES|QL correctness, circuit breaker accounting, and kNN filtering, and applies field-level security to constant_keyword fields. It also fixes continuous transforms that stopped deleting old checkpoints, which let the .transform-internal-* indices grow without bound. Both Elasticsearch and Logstash now bundle a JDK that no longer trusts the compromised eMudhra (emSign) root certificates. Kibana fixes rules that created duplicate alerts or silently stopped running, and resolves Fleet issues such as integration policy edits not reaching agents and slow agent policy pages. Fleet Server avoids out-of-memory kills when many agents check in right after it starts, and no longer leaves agents stuck in the Updating state.
Logstash 9.5.6 also updates Jackson and Guava, and fixes a performance regression in the CSV filter. Elastic Agent improves the stability of its OpenTelemetry runtime and now applies TLS and CA changes to its Fleet connection. Beats fixes a Filebeat log input that kept spinning at 100% CPU, and Auditbeat file integrity monitoring now works on Linux kernels 6.15 and later. Elastic Observability fixes APM and Synthetics private location issues. In Elastic Security, Osquery now enforces privileges on packs and saved queries, detection rule imports are faster, and Elastic Defend receives several reliability fixes.
Overall, 9.5.6 focuses on making everyday operations more dependable across the stack. For the complete list of changes, see the official Elastic 9.5.6 release notes.
List of updated packages
The following packages have been updated:
elastic-agent,elastic-agent-autosetup,elastic-agent-neteye-config,elastic-stack-configurator,elasticsearch,elasticsearch-autosetup,elasticsearch-neteye-config,elasticsearch-xpack-license,filebeat,filebeat-autosetup,filebeat-neteye-config,kibana,kibana-autosetup,kibana-neteye-config,logstash,logstash-autosetup,logstash-neteye-config,logstash-neteye-config-autosetup, all to version9.5.6_neteye3.105.5-1
Patrick Harasser
Author
