We see that "Filebeat - OSS-only distribution only includes features licensed under the Apache 2.0 license" but it includes elastic-agent-client which comes under elastic license

Elastic Stack Beats
1

We see that "Filebeat - OSS-only distribution only includes features licensed under the Apache 2.0 license" but it includes elastic-agent-client which comes under elastic license.

Blackduck scanning tools detect elastic-agent-client is came as part of filebeat-oss installation and blocking us to use because of elastic-agent-client is not OSS license.

Can you help confirm actual license of filebeat-oss

2

Generally, all the dependencies are listed in Elastic Stack Third-party dependencies. But I can’t see a list for beats-oss specifically. Let me ask the folks managing this :slight_smile:

1 Like
3

Thanks Much Xeraa for you response, it will be helpful if you can confirm this earliest .

1 Like
4

This finding is accurate, the elastic-agent-client dependency has snuck into the OSS Beat dependency tree which are intended to be OSS licensed. This is a bug.

There are some architecture changes happening that will allow us to remove this dependency from Beats completely (see Pivoting Elastic's Data Ingestion to OpenTelemetry — Elastic Observability Labs ) but it will probably be a few months before we can completely remove it.

We will take a look and see if there’s a quicker way to cut it out but it will be removed it’s just a matter of exactly when.

1 Like
5

This should be fixed by Break dependency on ElasticV2 licensed code from OSS Beats by cmacknz · Pull Request #48353 · elastic/beats · GitHub and backported to all active minors (9.2, 9.1, 8.19 at the time of writing).