Thank you @cmacknz for your response. I can confirm that either Filebeat 7.17.2 or updating syscall to allow rseq works fine.
To update Filebeat to allow rseq, this is the configs I added to filebeat.yml;
seccomp:
default_action: allow
syscalls:
- action: allow
names:
- rseq