# We see that "Filebeat - OSS-only distribution only includes features licensed under the Apache 2.0 license" but it includes elastic-agent-client which comes under elastic license

**URL:** <https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 12, 2025, 1:37am UTC](https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607 "2025-10-12T01:37:19Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jeya\_Pradeen1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeya_pradeen1/32/141894_2.png) [@Jeya\_Pradeen1](https://discuss.elastic.co/u/Jeya_Pradeen1)\
**Post date:** [October 12, 2025, 1:37am UTC](https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607/1 "2025-10-12T01:37:19Z")

</div>

We see that "Filebeat - OSS-only distribution only includes features licensed under the Apache 2.0 license" but it includes elastic-agent-client which comes under elastic license.

Blackduck scanning tools detect elastic-agent-client is came as part of filebeat-oss installation and blocking us to use because of elastic-agent-client is not OSS license.

Can you help confirm actual license of filebeat-oss

---

<div class="post-metadata">

**Author:** ![xeraa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xeraa/32/48181_2.png) [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Post date:** [October 13, 2025, 3:04am UTC](https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607/2 "2025-10-13T03:04:54Z")

</div>

Generally, all the dependencies are listed in [Elastic Stack Third-party dependencies](https://artifacts.elastic.co/reports/dependencies/dependencies-current.html#beats-9.1.5). But I can’t see a list for beats-oss specifically. Let me ask the folks managing this 🙂

---

<div class="post-metadata">

**Author:** ![Jeya\_Pradeen1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeya_pradeen1/32/141894_2.png) [@Jeya\_Pradeen1](https://discuss.elastic.co/u/Jeya_Pradeen1)\
**Post date:** [October 13, 2025, 8:02am UTC](https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607/3 "2025-10-13T08:02:13Z")

</div>

Thanks Much Xeraa for you response, it will be helpful if you can confirm this earliest .

---

<div class="post-metadata">

**Author:** ![cmacknz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cmacknz/32/103773_2.png) [@cmacknz](https://discuss.elastic.co/u/cmacknz)\
**Post date:** [January 8, 2026, 2:26pm UTC](https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607/4 "2026-01-08T14:26:31Z")

</div>

This finding is accurate, the elastic-agent-client dependency has snuck into the OSS Beat dependency tree which are intended to be OSS licensed. This is a bug.

There are some architecture changes happening that will allow us to remove this dependency from Beats completely (see [Pivoting Elastic's Data Ingestion to OpenTelemetry — Elastic Observability Labs](https://www.elastic.co/observability-labs/blog/elastic-agent-pivot-opentelemetry) ) but it will probably be a few months before we can completely remove it.

We will take a look and see if there’s a quicker way to cut it out but it will be removed it’s just a matter of exactly when.

---

<div class="post-metadata">

**Author:** ![cmacknz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cmacknz/32/103773_2.png) [@cmacknz](https://discuss.elastic.co/u/cmacknz)\
**Post date:** [January 8, 2026, 9:08pm UTC](https://discuss.elastic.co/t/we-see-that-filebeat-oss-only-distribution-only-includes-features-licensed-under-the-apache-2-0-license-but-it-includes-elastic-agent-client-which-comes-under-elastic-license/382607/5 "2026-01-08T21:08:20Z")

</div>

This should be fixed by [Break dependency on ElasticV2 licensed code from OSS Beats by cmacknz · Pull Request #48353 · elastic/beats · GitHub](https://github.com/elastic/beats/pull/48353) and backported to all active minors (9.2, 9.1, 8.19 at the time of writing).
