Logstash 7.15.1 Release Notes

Bootstrap air-gapped environment for GeoIP database service #13104. For an air-gapped environment, users can run the elasticsearch-geoip script to bootstrap a mock server to interact with Logstash. Set xpack.geoip.download.endpoint to use the mock server. For more info, see Manage your own databases in the Geoip filter plugin docs.
Fixed a shutdown error that could occur when using an external GeoIP DB #13224
Fixed GeoIP database service SSL verification error #13273
- Work-around for the recent expiration of the "DST Root CA X3" certificate
Added missing configs that support customization using environment variables in Docker #13200
Our ECS efforts introduced a problem that can occur when updating some plugins that are dependent on our ecs_compatibility_support helper. This issue is resolved in #13268.

Updates to dependencies

Fluent Codec - 3.4.1

Multiline Codec - 3.1.1

Fix: avoid reusing per-identity codec instances for differing identities. Removes a very minor optimization so that stateful codecs like CSV can work reliably #70

Dissect Filter - 1.2.1

Elasticsearch Filter - 3.9.5

Geoip Filter - 7.2.3

[DOC] Add documentation for bootstrapping air-gapped environment for database auto-update #189

Mutate Filter - 3.5.4

Elasticsearch Input - 4.9.3

Http Input - 3.4.2

Snmp Input - 1.2.8

Fixed interval handling to only sleep off the remainder of the interval (if any), and to log a helpful warning when crawling the hosts takes longer than the configured interval #61

Tcp Input - 6.2.1

Elasticsearch Output - 11.0.5

Fixed running post-register action when Elasticsearch status change from unhealthy to healthy #1035
[DOC] Clarify that http_compression applies to requests, and remove noise about response decompression #1000
Fixed SSL handshake hang indefinitely with proxy setup #1032

Lumberjack Output - 3.1.9

S3 Output - 4.3.5