Close changelog for 7.8.1 (elastic#19669)

* Close changelog for 7.8.1

* Update libbeat/docs/release.asciidoc

* Update libbeat/docs/release.asciidoc

CHANGELOG-developer.asciidoc

@@ -12,6 +12,9 @@ other Beats should be migrated.
 
 Note: This changelog was only started after the 6.3 release.
 
+=== Beats version 7.8.1
+https://github.com/elastic/beats/compare/v7.8.0..v7.8.1[Check the HEAD diff]
+
 === Beats version 7.8.0
 https://github.com/elastic/beats/compare/v7.7.0..v7.8.0[Check the HEAD diff]
 

CHANGELOG.asciidoc

@@ -3,6 +3,51 @@
 :issue: https://github.com/elastic/beats/issues/
 :pull: https://github.com/elastic/beats/pull/
 
+[[release-notes-7.8.1]]
+=== Beats version 7.8.1
+https://github.com/elastic/beats/compare/v7.8.0...v7.8.1[View commits]
+
+==== Breaking changes
+
+*Filebeat*
+
+- Adds check on `<no value>` config option value for the azure input `resource_manager_endpoint`. {pull}18890[18890]
+
+==== Bugfixes
+
+*Affecting all Beats*
+
+- The `monitoring.elasticsearch.api_key` value is correctly base64-encoded before being sent to the monitoring Elasticsearch cluster. {issue}18939[18939] {pull}18945[18945]
+- Fix kafka topic setting not allowing upper case characters. {pull}18854[18854] {issue}18640[18640]
+- Fix redis key setting not allowing upper case characters. {pull}18854[18854] {issue}18640[18640]
+
+*Auditbeat*
+
+- system/package: Fix librpm loading on Fedora 31/32. {pull}NNNN[NNNN]
+
+*Filebeat*
+
+- Fix date and timestamp formats for fortigate module {pull}19316[19316]
+- Fix `googlecloud.audit` pipeline to only take in fields that are explicitly defined by the dataset. {issue}18465[18465] {pull}18472[18472]
+- Fix a rate limit related issue in httpjson input for Okta module. {issue}18530[18530] {pull}18534[18534]
+- Fix tls mapping in suricata module {issue}19492[19492] {pull}19494[19494]
+
+*Metricbeat*
+
+- Set tags correctly if the dimension value is ARN {issue}19111[19111] {pull}19433[19433]
+- Fix bug incorrect parsing of float numbers as integers in Couchbase module {issue}18949[18949] {pull}19055[19055]
+- Add missing info about the rest of the azure metricsets in the documentation. {pull}19601[19601]
+
+==== Added
+
+*Filebeat*
+
+- Add support for timezone offsets and `Z` to decode_cef timestamp parser. {pull}19346[19346]
+
+*Metricbeat*
+
+- Update Couchbase to version 6.5 {issue}18595[18595] {pull}19055[19055]
+
 [[release-notes-7.8.0]]
 === Beats version 7.8.0
 https://github.com/elastic/beats/compare/v7.7.0...v7.8.0[View commits]

CHANGELOG.next.asciidoc

@@ -27,12 +27,10 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 *Filebeat*
 
 - Fix parsing of Elasticsearch node name by `elasticsearch/slowlog` fileset. {pull}14547[14547]
-- CEF extensions are now mapped to the data types defined in the CEF guide. {pull}14342[14342]
 - Improve ECS field mappings in panw module.  event.outcome now only contains success/failure per ECS specification. {issue}16025[16025] {pull}17910[17910]
 - Improve ECS categorization field mappings for nginx module. http.request.referrer only populated when nginx sets a value {issue}16174[16174] {pull}17844[17844]
 - Improve ECS field mappings in santa module. move hash.sha256 to process.hash.sha256 & move certificate fields to santa.certificate . {issue}16180[16180] {pull}17982[17982]
 - Preserve case of http.request.method.  ECS prior to 1.6 specified normalizing to lowercase, which lost information. Affects filesets: apache/access, elasticsearch/audit, iis/access, iis/error, nginx/access, nginx/ingress_controller, aws/elb, suricata/eve, zeek/http. {issue}18154[18154] {pull}18359[18359]
-- Adds check on `<no value>` config option value for the azure input `resource_manager_endpoint`. {pull}18890[18890]
 
 *Heartbeat*
 
@@ -100,7 +98,6 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - system/package: Fix an error that can occur while trying to persist package metadata. {issue}18536[18536] {pull}18887[18887]
 - system/socket: Fix dataset using 100% CPU and becoming unresponsive in some scenarios. {pull}19033[19033] {pull}19764[19764]
 - system/socket: Fixed tracking of long-running connections. {pull}19033[19033]
-- system/package: Fix librpm loading on Fedora 31/32. {pull}NNNN[NNNN]
 
 *Filebeat*
 
@@ -147,19 +144,13 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Fix detection and logging of some error cases with light modules. {pull}14706[14706]
 - Dynamically choose a method for the system/service metricset to support older linux distros. {pull}16902[16902]
 - Reduce memory usage in `elasticsearch/index` metricset. {issue}16503[16503] {pull}16538[16538]
-- Check if CCR feature is available on Elasticsearch cluster before attempting to call CCR APIs from `elasticsearch/ccr` metricset. {issue}16511[16511] {pull}17073[17073]
-- Use max in k8s overview dashboard aggregations. {pull}17015[17015]
-- Fix Disk Used and Disk Usage visualizations in the Metricbeat System dashboards. {issue}12435[12435] {pull}17272[17272]
-- Fix missing Accept header for Prometheus and OpenMetrics module. {issue}16870[16870] {pull}17291[17291]
 - Fix issue in Jolokia module when mbean contains multiple quoted properties. {issue}17375[17375] {pull}17374[17374]
 - Further revise check for bad data in docker/memory. {pull}17400[17400]
-- Combine cloudwatch aggregated metrics into single event. {pull}17345[17345]
 - Fix how we filter services by name in system/service {pull}17400[17400]
 - Fix cloudwatch metricset missing tags collection. {issue}17419[17419] {pull}17424[17424]
 - check if cpuOptions field is nil in DescribeInstances output in ec2 metricset. {pull}17418[17418]
 - Fix aws.s3.bucket.name terms_field in s3 overview dashboard. {pull}17542[17542]
 - Fix Unix socket path in memcached. {pull}17512[17512]
-- Fix vsphere VM dashboard host aggregation visualizations. {pull}17555[17555]
 - Fix azure storage dashboards. {pull}17590[17590]
 - Metricbeat no longer needs to be started strictly after Logstash for `logstash-xpack` module to report correct data. {issue}17261[17261] {pull}17497[17497]
 - Fix pubsub metricset to collect all GA stage metrics from gcp stackdriver. {issue}17154[17154] {pull}17600[17600]
@@ -211,24 +202,11 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Remove experimental flag from `setup.template.append_fields` {pull}16576[16576]
 - Add support for kubernetes provider to recognize namespace level defaults {pull}16321[16321]
 - Add capability of enrich `container.id` with process id in `add_process_metadata` processor {pull}15947[15947]
-- Update RPM packages contained in Beat Docker images. {issue}17035[17035]
-- Add Kerberos support to Kafka input and output. {pull}16781[16781]
-- Update supported versions of `redis` output. {pull}17198[17198]
 - Update documentation for system.process.memory fields to include clarification on Windows os's. {pull}17268[17268]
-- Add `replace` processor for replacing string values of fields. {pull}17342[17342]
 - Add `urldecode` processor to for decoding URL-encoded fields. {pull}17505[17505]
-- Add support for AWS IAM `role_arn` in credentials config. {pull}17658[17658] {issue}12464[12464]
-- Add Kerberos support to Elasticsearch output. {pull}17927[17927]
-- Set `agent.name` to the hostname by default. {issue}16377[16377] {pull}18000[18000]
 - Add keystore support for autodiscover static configurations. {pull]16306[16306]
-- Add support for basic ECS logging. {pull}17974[17974]
-- Add config example of how to skip the `add_host_metadata` processor when forwarding logs. {issue}13920[13920] {pull}18153[18153]
 - When using the `decode_json_fields` processor, decoded fields are now deep-merged into existing event. {pull}17958[17958]
-- Add backoff configuration options for the Kafka output. {issue}16777[16777] {pull}17808[17808]
 - Add keystore support for autodiscover static configurations. {pull]16306[16306]
-- Add Kerberos support to Elasticsearch output. {pull}17927[17927]
-- Add support for fixed length extraction in `dissect` processor. {pull}17191[17191]
-- Update RPM packages contained in Beat Docker images. {issue}17035[17035]
 - Add TLS support to Kerberos authentication in Elasticsearch. {pull}18607[18607]
 
 *Auditbeat*
@@ -257,39 +235,19 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Improve AWS cloudtrail field mappings {issue}16086[16086] {issue}16110[16110] {pull}17155[17155]
 - Added new module `crowdstrike` for ingesting Crowdstrike Falcon streaming API endpoint event data. {pull}16988[16988]
 - Move azure-eventhub input to GA. {issue}15671[15671] {pull}17313[17313]
-- Improve ECS categorization field mappings in mongodb module. {issue}16170[16170] {pull}17371[17371]
-- Improve ECS categorization field mappings for mssql module. {issue}16171[16171] {pull}17376[17376]
 - Added documentation for running Filebeat in Cloud Foundry. {pull}17275[17275]
 - Added access_key_id, secret_access_key and session_token into aws module config. {pull}17456[17456]
-- Improve ECS categorization field mappings for mysql module. {issue}16172[16172] {pull}17491[17491]
 - Release Google Cloud module as GA. {pull}17511[17511]
 - Update filebeat httpjson input to support pagination via Header and Okta module. {pull}16354[16354]
 - Added new Checkpoint Syslog filebeat module. {pull}17682[17682]
-- Add config option to select a different azure cloud env in the azure-eventhub input and azure module. {issue}17649[17649] {pull}17659[17659]
-- Enhance `elasticsearch/server` fileset to handle ECS-compatible logs emitted by Elasticsearch. {issue}17715[17715] {pull}17714[17714]
 - Added Unix stream socket support as an input source and a syslog input source. {pull}17492[17492]
-- Improve ECS categorization field mappings in misp module. {issue}16026[16026] {pull}17344[17344]
-- Enhance `elasticsearch/deprecation` fileset to handle ECS-compatible logs emitted by Elasticsearch. {issue}17715[17715] {pull}17728[17728]
-- Make `decode_cef` processor GA. {pull}17944[17944]
 - Added new Fortigate Syslog filebeat module. {pull}17890[17890]
-- Improve ECS categorization field mappings in redis module. {issue}16179[16179] {pull}17918[17918]
-- Improve ECS categorization field mappings in rabbitmq module. {issue}16178[16178] {pull}17916[17916]
-- Improve ECS categorization field mappings in postgresql module. {issue}16177[16177] {pull}17914[17914]
-- Improve ECS categorization field mappings for nginx module. {issue}16174[16174] {pull}17844[17844]
-- Add support for Google Application Default Credentials to the Google Pub/Sub input and Google Cloud modules. {pull}15668[15668]
-- Improve ECS categorization field mappings for zeek module. {issue}16029[16029] {pull}17738[17738]
-- Improve ECS categorization field mappings for netflow module. {issue}16135[16135] {pull}18108[18108]
 - Added an input option `publisher_pipeline.disable_host` to disable `host.name`
-  from being added to events by default. {pull}18159[18159]
-- Improve ECS categorization field mappings in system module. {issue}16031[16031] {pull}18065[18065]
+from being added to events by default. {pull}18159[18159]
 - Change the `json.*` input settings implementation to merge parsed json objects with existing objects in the event instead of fully replacing them. {pull}17958[17958]
-- Improve ECS categorization field mappings in osquery module. {issue}16176[16176] {pull}17881[17881]
-- Add support for v10, v11 and v12 logs on Postgres {issue}13810[13810] {pull}17732[17732]
-- Add dashboard for Google Cloud Audit and AWS CloudTrail. {pull}17379[17379]
 - Add support for array parsing in azure-eventhub input. {pull}18585[18585]
 from being added to events by default. {pull}18159[18159]
 - Improved performance of PANW sample dashboards. {issue}19031[19031] {pull}19032[19032]
-- Add support for timezone offsets and `Z` to decode_cef timestamp parser. {pull}19346[19346]
 
 *Heartbeat*
 
@@ -328,7 +286,6 @@ from being added to events by default. {pull}18159[18159]
 - Release vsphere module as GA. {issue}15798[15798] {pull}17119[17119]
 - Remove required for region/zone and make stackdriver a metricset in googlecloud. {issue}16785[16785] {pull}18398[18398]
 - Add memory metrics into compute googlecloud. {pull}18802[18802]
-- Update Couchbase to version 6.5 {issue}18595[18595] {pull}19055[19055]
 
 *Packetbeat*
 

libbeat/docs/release.asciidoc

@@ -8,6 +8,7 @@ This section summarizes the changes in each release. Also read
 <<breaking-changes>> for more detail about changes that affect
 upgrade.
 
+* <<release-notes-7.8.1>>
 * <<release-notes-7.8.0>>
 * <<release-notes-7.7.0>>
 * <<release-notes-7.6.2>>