# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] Disable package v2 detection for now
(#173686)](https://github.com/elastic/kibana/pull/173686)
<!--- Backport version: 8.9.8 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Dan
Panzarella","email":"pzl@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-20T14:05:43Z","message":"[Security
Solution] Disable package v2 detection for now
(#173686)","sha":"c3b3194ea06bc5e22b6da798b814cab812cd01e1","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","v8.12.0","v8.13.0"],"number":173686,"url":"https://github.com/elastic/kibana/pull/173686","mergeCommit":{"message":"[Security
Solution] Disable package v2 detection for now
(#173686)","sha":"c3b3194ea06bc5e22b6da798b814cab812cd01e1"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173686","number":173686,"mergeCommit":{"message":"[Security
Solution] Disable package v2 detection for now
(#173686)","sha":"c3b3194ea06bc5e22b6da798b814cab812cd01e1"}}]}]
BACKPORT-->
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] Skip flaky Rule Management tests
(#173730)](https://github.com/elastic/kibana/pull/173730)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Georgii
Gorbachev","email":"georgii.gorbachev@elastic.co"},"sourceCommit":{"committedDate":"2023-12-20T15:18:21Z","message":"[Security
Solution] Skip flaky Rule Management tests (#173730)\n\n**Resolves:
https://github.com/elastic/kibana/issues/173469**\r\n\r\n##
Summary\r\n\r\nThis PR:\r\n\r\n- Skips flaky Rule Management tests that
occurred recently and haven't\r\nbeen already skipped by Kibana
Operations.\r\n- Adds `TODO` comments with links to the corresponding
tickets.\r\n\r\nWe will be working on fixing and unskipping these and a
few other tests\r\nin January as part of
https://github.com/elastic/kibana/issues/173731.","sha":"cdb10478ce1270e8ce0ec37ddff98888e92f0af7","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","release_note:skip","test-failure-flaky","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","v8.12.0","v8.13.0"],"number":173730,"url":"https://github.com/elastic/kibana/pull/173730","mergeCommit":{"message":"[Security
Solution] Skip flaky Rule Management tests (#173730)\n\n**Resolves:
https://github.com/elastic/kibana/issues/173469**\r\n\r\n##
Summary\r\n\r\nThis PR:\r\n\r\n- Skips flaky Rule Management tests that
occurred recently and haven't\r\nbeen already skipped by Kibana
Operations.\r\n- Adds `TODO` comments with links to the corresponding
tickets.\r\n\r\nWe will be working on fixing and unskipping these and a
few other tests\r\nin January as part of
https://github.com/elastic/kibana/issues/173731.","sha":"cdb10478ce1270e8ce0ec37ddff98888e92f0af7"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173730","number":173730,"mergeCommit":{"message":"[Security
Solution] Skip flaky Rule Management tests (#173730)\n\n**Resolves:
https://github.com/elastic/kibana/issues/173469**\r\n\r\n##
Summary\r\n\r\nThis PR:\r\n\r\n- Skips flaky Rule Management tests that
occurred recently and haven't\r\nbeen already skipped by Kibana
Operations.\r\n- Adds `TODO` comments with links to the corresponding
tickets.\r\n\r\nWe will be working on fixing and unskipping these and a
few other tests\r\nin January as part of
https://github.com/elastic/kibana/issues/173731.","sha":"cdb10478ce1270e8ce0ec37ddff98888e92f0af7"}}]}]
BACKPORT-->
Co-authored-by: Georgii Gorbachev <georgii.gorbachev@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] Fix related_integrations Cypress test flake
(#173393)](https://github.com/elastic/kibana/pull/173393)
<!--- Backport version: 8.9.8 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Juan Pablo
Djeredjian","email":"jpdjeredjian@gmail.com"},"sourceCommit":{"committedDate":"2023-12-19T13:00:17Z","message":"[Security
Solution] Fix related_integrations Cypress test flake (#173393)\n\n##
Summary\r\n\r\n- Replaces the installation of all available prebuilt
rule for the rule\r\nthat was just created. This stops flake in which a
race condition would\r\ncase the full Fleet package installation to be
installed, and then us\r\npurposely installing **all** rules.\r\n\r\n##
Flaky test
runner\r\n\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4574\r\n\r\n###
For maintainers\r\n\r\n- [ ] This was checked for breaking API changes
and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"d0e5c290789b7a5bb40a4099ede169dafc6f5ad3","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","v8.12.0","v8.13.0"],"number":173393,"url":"https://github.com/elastic/kibana/pull/173393","mergeCommit":{"message":"[Security
Solution] Fix related_integrations Cypress test flake (#173393)\n\n##
Summary\r\n\r\n- Replaces the installation of all available prebuilt
rule for the rule\r\nthat was just created. This stops flake in which a
race condition would\r\ncase the full Fleet package installation to be
installed, and then us\r\npurposely installing **all** rules.\r\n\r\n##
Flaky test
runner\r\n\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4574\r\n\r\n###
For maintainers\r\n\r\n- [ ] This was checked for breaking API changes
and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"d0e5c290789b7a5bb40a4099ede169dafc6f5ad3"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173393","number":173393,"mergeCommit":{"message":"[Security
Solution] Fix related_integrations Cypress test flake (#173393)\n\n##
Summary\r\n\r\n- Replaces the installation of all available prebuilt
rule for the rule\r\nthat was just created. This stops flake in which a
race condition would\r\ncase the full Fleet package installation to be
installed, and then us\r\npurposely installing **all** rules.\r\n\r\n##
Flaky test
runner\r\n\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4574\r\n\r\n###
For maintainers\r\n\r\n- [ ] This was checked for breaking API changes
and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"d0e5c290789b7a5bb40a4099ede169dafc6f5ad3"}}]}]
BACKPORT-->
Co-authored-by: Juan Pablo Djeredjian <jpdjeredjian@gmail.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Observability][Infra] Add parent link in host detail's breadcrumb
(#170792)](https://github.com/elastic/kibana/pull/170792)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT
[{"author":{"name":"ruhshan","email":"5312918+Ruhshan@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-20T12:38:57Z","message":"[Observability][Infra]
Add parent link in host detail's breadcrumb (#170792)\n\n##
Summary\r\n\r\nFixes #170642\r\n\r\nAdded link to hosts in the
breadcrumb for host details
page.\r\n\r\n\r\n\r\n\r\n\r\n###
For maintainers\r\n\r\n- [ ] This was checked for breaking API changes
and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Cauê Marcondes
<55978943+cauemarcondes@users.noreply.github.com>\r\nCo-authored-by:
jennypavlova <dzheni.pavlova@elastic.co>\r\nCo-authored-by: Kibana
Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"fbd3601ced7ab4411d3a2d71a3f9fbe137696f48","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","💝community","v8.12.0","v8.13.0"],"number":170792,"url":"https://github.com/elastic/kibana/pull/170792","mergeCommit":{"message":"[Observability][Infra]
Add parent link in host detail's breadcrumb (#170792)\n\n##
Summary\r\n\r\nFixes #170642\r\n\r\nAdded link to hosts in the
breadcrumb for host details
page.\r\n\r\n\r\n\r\n\r\n\r\n###
For maintainers\r\n\r\n- [ ] This was checked for breaking API changes
and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Cauê Marcondes
<55978943+cauemarcondes@users.noreply.github.com>\r\nCo-authored-by:
jennypavlova <dzheni.pavlova@elastic.co>\r\nCo-authored-by: Kibana
Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"fbd3601ced7ab4411d3a2d71a3f9fbe137696f48"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/170792","number":170792,"mergeCommit":{"message":"[Observability][Infra]
Add parent link in host detail's breadcrumb (#170792)\n\n##
Summary\r\n\r\nFixes #170642\r\n\r\nAdded link to hosts in the
breadcrumb for host details
page.\r\n\r\n\r\n\r\n\r\n\r\n###
For maintainers\r\n\r\n- [ ] This was checked for breaking API changes
and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Cauê Marcondes
<55978943+cauemarcondes@users.noreply.github.com>\r\nCo-authored-by:
jennypavlova <dzheni.pavlova@elastic.co>\r\nCo-authored-by: Kibana
Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"fbd3601ced7ab4411d3a2d71a3f9fbe137696f48"}}]}]
BACKPORT-->
Co-authored-by: ruhshan <5312918+Ruhshan@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Transform] Fix retention policy field name not setting by default
correctly in Transform creation wizard
(#172609)](https://github.com/elastic/kibana/pull/172609)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Quynh Nguyen
(Quinn)","email":"43350163+qn895@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-19T12:17:38Z","message":"[Transform]
Fix retention policy field name not setting by default correctly in
Transform creation wizard (#172609)\n\n## Summary\r\n\r\nThis PR fixes
https://github.com/elastic/kibana/issues/167207 where\r\ntransform
retention policy not setting the first time field as default,\r\nwhich
causes an error on
creation\r\n\r\nBefore:\r\n\r\n\r\n3db01069-36e2-4d9c-8059-d328e80da901\r\n\r\nIt
also disables the retention policy field if there's no
time/date\r\nfields in the transform's destination index
mappings.\r\n\r\n\r\n\r\n9d68296c-11e3-4685-bb53-6e68200f4225\r\n\r\n**This
PR also fixes the Edit Transform flyout to disable the
policy\r\nretention field when the destination mappings do not contain
any date\r\nfields.**\r\n\r\nFor transforms with no date fields in
destination
index:\r\n\r\n\r\nb4cecd6b-3ba6-4878-ae96-02d2607daebe\r\n\r\nFor
transforms with date fields in destination
index:\r\n\r\n\r\nc1007460-18c4-4016-a321-5bc60102af36\r\n\r\n\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] Any UI touched in this PR is
usable by keyboard only (learn more\r\nabout [keyboard
accessibility](https://webaim.org/techniques/keyboard/))\r\n- [ ] Any UI
touched in this PR does not create any new axe failures\r\n(run axe in
browser:\r\n[FF](https://addons.mozilla.org/en-US/firefox/addon/axe-devtools/),\r\n[Chrome](https://chrome.google.com/webstore/detail/axe-web-accessibility-tes/lhdoppojpmngadmnindnejefpokejbdd?hl=en-US))\r\n-
[ ] If a plugin configuration key changed, check if it needs to
be\r\nallowlisted in the cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This renders correctly on smaller devices using a
responsive\r\nlayout. (You can test this [in
your\r\nbrowser](https://www.browserstack.com/guide/responsive-testing-on-local-server))\r\n-
[ ] This was checked for
[cross-browser\r\ncompatibility](https://www.elastic.co/support/matrix#matrix_browsers)\r\n\r\n\r\n###
Risk Matrix\r\n\r\nDelete this section if it is not applicable to this
PR.\r\n\r\nBefore closing this PR, invite QA, stakeholders, and other
developers to\r\nidentify risks that should be tested prior to the
change/feature\r\nrelease.\r\n\r\nWhen forming the risk matrix, consider
some of the following examples\r\nand how they may potentially impact
the change:\r\n\r\n| Risk | Probability | Severity | Mitigation/Notes
|\r\n\r\n|---------------------------|-------------|----------|-------------------------|\r\n|
Multiple Spaces—unexpected behavior in non-default Kibana
Space.\r\n| Low | High | Integration tests will verify that all features
are still\r\nsupported in non-default Kibana Space and when user
switches between\r\nspaces. |\r\n| Multiple nodes—Elasticsearch
polling might have race conditions\r\nwhen multiple Kibana nodes are
polling for the same tasks. | High | Low\r\n| Tasks are idempotent, so
executing them multiple times will not result\r\nin logical error, but
will degrade performance. To test for this case we\r\nadd plenty of unit
tests around this logic and document manual testing\r\nprocedure. |\r\n|
Code should gracefully handle cases when feature X or plugin Y
are\r\ndisabled. | Medium | High | Unit tests will verify that any
feature flag\r\nor plugin combination still results in our service
operational. |\r\n| [See more potential
risk\r\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
|\r\n\r\n\r\n### For maintainers\r\n\r\n- [ ] This was checked for
breaking API changes and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Dima Arnautov
<dmitrii.arnautov@elastic.co>","sha":"bf8dba2d1610cba05664adc78a8c1f565abda990","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix",":ml","Feature:Transforms","v8.12.0","v8.13.0"],"number":172609,"url":"https://github.com/elastic/kibana/pull/172609","mergeCommit":{"message":"[Transform]
Fix retention policy field name not setting by default correctly in
Transform creation wizard (#172609)\n\n## Summary\r\n\r\nThis PR fixes
https://github.com/elastic/kibana/issues/167207 where\r\ntransform
retention policy not setting the first time field as default,\r\nwhich
causes an error on
creation\r\n\r\nBefore:\r\n\r\n\r\n3db01069-36e2-4d9c-8059-d328e80da901\r\n\r\nIt
also disables the retention policy field if there's no
time/date\r\nfields in the transform's destination index
mappings.\r\n\r\n\r\n\r\n9d68296c-11e3-4685-bb53-6e68200f4225\r\n\r\n**This
PR also fixes the Edit Transform flyout to disable the
policy\r\nretention field when the destination mappings do not contain
any date\r\nfields.**\r\n\r\nFor transforms with no date fields in
destination
index:\r\n\r\n\r\nb4cecd6b-3ba6-4878-ae96-02d2607daebe\r\n\r\nFor
transforms with date fields in destination
index:\r\n\r\n\r\nc1007460-18c4-4016-a321-5bc60102af36\r\n\r\n\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] Any UI touched in this PR is
usable by keyboard only (learn more\r\nabout [keyboard
accessibility](https://webaim.org/techniques/keyboard/))\r\n- [ ] Any UI
touched in this PR does not create any new axe failures\r\n(run axe in
browser:\r\n[FF](https://addons.mozilla.org/en-US/firefox/addon/axe-devtools/),\r\n[Chrome](https://chrome.google.com/webstore/detail/axe-web-accessibility-tes/lhdoppojpmngadmnindnejefpokejbdd?hl=en-US))\r\n-
[ ] If a plugin configuration key changed, check if it needs to
be\r\nallowlisted in the cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This renders correctly on smaller devices using a
responsive\r\nlayout. (You can test this [in
your\r\nbrowser](https://www.browserstack.com/guide/responsive-testing-on-local-server))\r\n-
[ ] This was checked for
[cross-browser\r\ncompatibility](https://www.elastic.co/support/matrix#matrix_browsers)\r\n\r\n\r\n###
Risk Matrix\r\n\r\nDelete this section if it is not applicable to this
PR.\r\n\r\nBefore closing this PR, invite QA, stakeholders, and other
developers to\r\nidentify risks that should be tested prior to the
change/feature\r\nrelease.\r\n\r\nWhen forming the risk matrix, consider
some of the following examples\r\nand how they may potentially impact
the change:\r\n\r\n| Risk | Probability | Severity | Mitigation/Notes
|\r\n\r\n|---------------------------|-------------|----------|-------------------------|\r\n|
Multiple Spaces—unexpected behavior in non-default Kibana
Space.\r\n| Low | High | Integration tests will verify that all features
are still\r\nsupported in non-default Kibana Space and when user
switches between\r\nspaces. |\r\n| Multiple nodes—Elasticsearch
polling might have race conditions\r\nwhen multiple Kibana nodes are
polling for the same tasks. | High | Low\r\n| Tasks are idempotent, so
executing them multiple times will not result\r\nin logical error, but
will degrade performance. To test for this case we\r\nadd plenty of unit
tests around this logic and document manual testing\r\nprocedure. |\r\n|
Code should gracefully handle cases when feature X or plugin Y
are\r\ndisabled. | Medium | High | Unit tests will verify that any
feature flag\r\nor plugin combination still results in our service
operational. |\r\n| [See more potential
risk\r\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
|\r\n\r\n\r\n### For maintainers\r\n\r\n- [ ] This was checked for
breaking API changes and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Dima Arnautov
<dmitrii.arnautov@elastic.co>","sha":"bf8dba2d1610cba05664adc78a8c1f565abda990"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172609","number":172609,"mergeCommit":{"message":"[Transform]
Fix retention policy field name not setting by default correctly in
Transform creation wizard (#172609)\n\n## Summary\r\n\r\nThis PR fixes
https://github.com/elastic/kibana/issues/167207 where\r\ntransform
retention policy not setting the first time field as default,\r\nwhich
causes an error on
creation\r\n\r\nBefore:\r\n\r\n\r\n3db01069-36e2-4d9c-8059-d328e80da901\r\n\r\nIt
also disables the retention policy field if there's no
time/date\r\nfields in the transform's destination index
mappings.\r\n\r\n\r\n\r\n9d68296c-11e3-4685-bb53-6e68200f4225\r\n\r\n**This
PR also fixes the Edit Transform flyout to disable the
policy\r\nretention field when the destination mappings do not contain
any date\r\nfields.**\r\n\r\nFor transforms with no date fields in
destination
index:\r\n\r\n\r\nb4cecd6b-3ba6-4878-ae96-02d2607daebe\r\n\r\nFor
transforms with date fields in destination
index:\r\n\r\n\r\nc1007460-18c4-4016-a321-5bc60102af36\r\n\r\n\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] Any UI touched in this PR is
usable by keyboard only (learn more\r\nabout [keyboard
accessibility](https://webaim.org/techniques/keyboard/))\r\n- [ ] Any UI
touched in this PR does not create any new axe failures\r\n(run axe in
browser:\r\n[FF](https://addons.mozilla.org/en-US/firefox/addon/axe-devtools/),\r\n[Chrome](https://chrome.google.com/webstore/detail/axe-web-accessibility-tes/lhdoppojpmngadmnindnejefpokejbdd?hl=en-US))\r\n-
[ ] If a plugin configuration key changed, check if it needs to
be\r\nallowlisted in the cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This renders correctly on smaller devices using a
responsive\r\nlayout. (You can test this [in
your\r\nbrowser](https://www.browserstack.com/guide/responsive-testing-on-local-server))\r\n-
[ ] This was checked for
[cross-browser\r\ncompatibility](https://www.elastic.co/support/matrix#matrix_browsers)\r\n\r\n\r\n###
Risk Matrix\r\n\r\nDelete this section if it is not applicable to this
PR.\r\n\r\nBefore closing this PR, invite QA, stakeholders, and other
developers to\r\nidentify risks that should be tested prior to the
change/feature\r\nrelease.\r\n\r\nWhen forming the risk matrix, consider
some of the following examples\r\nand how they may potentially impact
the change:\r\n\r\n| Risk | Probability | Severity | Mitigation/Notes
|\r\n\r\n|---------------------------|-------------|----------|-------------------------|\r\n|
Multiple Spaces—unexpected behavior in non-default Kibana
Space.\r\n| Low | High | Integration tests will verify that all features
are still\r\nsupported in non-default Kibana Space and when user
switches between\r\nspaces. |\r\n| Multiple nodes—Elasticsearch
polling might have race conditions\r\nwhen multiple Kibana nodes are
polling for the same tasks. | High | Low\r\n| Tasks are idempotent, so
executing them multiple times will not result\r\nin logical error, but
will degrade performance. To test for this case we\r\nadd plenty of unit
tests around this logic and document manual testing\r\nprocedure. |\r\n|
Code should gracefully handle cases when feature X or plugin Y
are\r\ndisabled. | Medium | High | Unit tests will verify that any
feature flag\r\nor plugin combination still results in our service
operational. |\r\n| [See more potential
risk\r\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
|\r\n\r\n\r\n### For maintainers\r\n\r\n- [ ] This was checked for
breaking API changes and was
[labeled\r\nappropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Dima Arnautov
<dmitrii.arnautov@elastic.co>","sha":"bf8dba2d1610cba05664adc78a8c1f565abda990"}}]}]
BACKPORT-->
Co-authored-by: Quynh Nguyen (Quinn) <43350163+qn895@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Obs AI Assistant] E2E tests for conversation view
(#173485)](https://github.com/elastic/kibana/pull/173485)
<!--- Backport version: 8.9.8 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Dario
Gieselaar","email":"dario.gieselaar@elastic.co"},"sourceCommit":{"committedDate":"2023-12-19T08:49:58Z","message":"[Obs
AI Assistant] E2E tests for conversation view (#173485)\n\nAdds some
basic E2E tests for the conversation
view.\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"f67afe2866014cfbc21755134950d7abaa8cf8c4","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v8.12.0","v8.12.1","v8.13.0"],"number":173485,"url":"https://github.com/elastic/kibana/pull/173485","mergeCommit":{"message":"[Obs
AI Assistant] E2E tests for conversation view (#173485)\n\nAdds some
basic E2E tests for the conversation
view.\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"f67afe2866014cfbc21755134950d7abaa8cf8c4"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173485","number":173485,"mergeCommit":{"message":"[Obs
AI Assistant] E2E tests for conversation view (#173485)\n\nAdds some
basic E2E tests for the conversation
view.\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"f67afe2866014cfbc21755134950d7abaa8cf8c4"}}]}]
BACKPORT-->
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution][Detection Engine] fixes alert suppression define
step preview on rule creation
(#173145)](https://github.com/elastic/kibana/pull/173145)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Vitalii
Dmyterko","email":"92328789+vitaliidm@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-19T10:14:52Z","message":"[Security
Solution][Detection Engine] fixes alert suppression define step preview
on rule creation (#173145)\n\n## Summary\r\n\r\n- fixes alert
suppression fields that appear on define step preview\r\nduring rule
creation\r\nOnly `query` and `threshold` rule type support alert
suppression, but\r\nsuppression fields can appear for other rule types
when switching\r\nbetween them, while suppression was configured\r\n-
fixes Define step for `threshold` rule, when suppression
duration\r\nwasn't showing\r\n\r\n### Steps to reproduce\r\n\r\n1. Go to
create rule form\r\n2. Select query rule type\r\n3. Configure alert
suppression for it\r\n4. Switch to any other rule type\r\n5. Complete
define step\r\n6. Spot, suppression fields on Define step\r\n\r\n####
Leaking suppression fields to other rule
types\r\n\r\na472daf0-bb74-4a6b-841b-3b0097eb4503\r\n\r\n####
Missing duration for
threshold\r\n\r\n\r\n\r\n7df8431d-3ee0-482a-9e06-cb87656f48e0\r\n\r\n\r\n###
Fixed UI\r\n\r\n#### Leaking suppression fields to other rule
types\r\n\r\n03057dc6-c007-4b17-8f8b-30e78923f037\r\n\r\n####
Missing duration for
threshold\r\n\r\n\r\n7f64c79f-7a51-4d43-bd62-b10eefe15c46\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios\r\n\r\n---------\r\n\r\nCo-authored-by: Ryland Herrick
<ryalnd@gmail.com>","sha":"dee5acb17ed643f1cf432b032f4305ba51e5799f","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","backport:prev-minor","Team:Detection
Engine","v8.12.0","v8.13.0"],"number":173145,"url":"https://github.com/elastic/kibana/pull/173145","mergeCommit":{"message":"[Security
Solution][Detection Engine] fixes alert suppression define step preview
on rule creation (#173145)\n\n## Summary\r\n\r\n- fixes alert
suppression fields that appear on define step preview\r\nduring rule
creation\r\nOnly `query` and `threshold` rule type support alert
suppression, but\r\nsuppression fields can appear for other rule types
when switching\r\nbetween them, while suppression was configured\r\n-
fixes Define step for `threshold` rule, when suppression
duration\r\nwasn't showing\r\n\r\n### Steps to reproduce\r\n\r\n1. Go to
create rule form\r\n2. Select query rule type\r\n3. Configure alert
suppression for it\r\n4. Switch to any other rule type\r\n5. Complete
define step\r\n6. Spot, suppression fields on Define step\r\n\r\n####
Leaking suppression fields to other rule
types\r\n\r\na472daf0-bb74-4a6b-841b-3b0097eb4503\r\n\r\n####
Missing duration for
threshold\r\n\r\n\r\n\r\n7df8431d-3ee0-482a-9e06-cb87656f48e0\r\n\r\n\r\n###
Fixed UI\r\n\r\n#### Leaking suppression fields to other rule
types\r\n\r\n03057dc6-c007-4b17-8f8b-30e78923f037\r\n\r\n####
Missing duration for
threshold\r\n\r\n\r\n7f64c79f-7a51-4d43-bd62-b10eefe15c46\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios\r\n\r\n---------\r\n\r\nCo-authored-by: Ryland Herrick
<ryalnd@gmail.com>","sha":"dee5acb17ed643f1cf432b032f4305ba51e5799f"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173145","number":173145,"mergeCommit":{"message":"[Security
Solution][Detection Engine] fixes alert suppression define step preview
on rule creation (#173145)\n\n## Summary\r\n\r\n- fixes alert
suppression fields that appear on define step preview\r\nduring rule
creation\r\nOnly `query` and `threshold` rule type support alert
suppression, but\r\nsuppression fields can appear for other rule types
when switching\r\nbetween them, while suppression was configured\r\n-
fixes Define step for `threshold` rule, when suppression
duration\r\nwasn't showing\r\n\r\n### Steps to reproduce\r\n\r\n1. Go to
create rule form\r\n2. Select query rule type\r\n3. Configure alert
suppression for it\r\n4. Switch to any other rule type\r\n5. Complete
define step\r\n6. Spot, suppression fields on Define step\r\n\r\n####
Leaking suppression fields to other rule
types\r\n\r\na472daf0-bb74-4a6b-841b-3b0097eb4503\r\n\r\n####
Missing duration for
threshold\r\n\r\n\r\n\r\n7df8431d-3ee0-482a-9e06-cb87656f48e0\r\n\r\n\r\n###
Fixed UI\r\n\r\n#### Leaking suppression fields to other rule
types\r\n\r\n03057dc6-c007-4b17-8f8b-30e78923f037\r\n\r\n####
Missing duration for
threshold\r\n\r\n\r\n7f64c79f-7a51-4d43-bd62-b10eefe15c46\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios\r\n\r\n---------\r\n\r\nCo-authored-by: Ryland Herrick
<ryalnd@gmail.com>","sha":"dee5acb17ed643f1cf432b032f4305ba51e5799f"}}]}]
BACKPORT-->
Co-authored-by: Vitalii Dmyterko <92328789+vitaliidm@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[APM] Add filter to `/has_data` api
(#173382)](https://github.com/elastic/kibana/pull/173382)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Søren
Louv-Jansen","email":"soren.louv@elastic.co"},"sourceCommit":{"committedDate":"2023-12-18T18:18:03Z","message":"[APM]
Add filter to `/has_data` api (#173382)\n\nCloses
https://github.com/elastic/kibana/issues/154997\r\n\r\nThis PR adds a
data tier filter to the `/has_data` api, thus limitting\r\nthe number of
shards being hit by the
request.","sha":"e7593c0e46f1ce707c1b951f8d013e722ac79353","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v8.12.0","v8.10.5","Team:obs-ux-infra_services","v8.13.0","v8.11.4"],"number":173382,"url":"https://github.com/elastic/kibana/pull/173382","mergeCommit":{"message":"[APM]
Add filter to `/has_data` api (#173382)\n\nCloses
https://github.com/elastic/kibana/issues/154997\r\n\r\nThis PR adds a
data tier filter to the `/has_data` api, thus limitting\r\nthe number of
shards being hit by the
request.","sha":"e7593c0e46f1ce707c1b951f8d013e722ac79353"}},"sourceBranch":"main","suggestedTargetBranches":["8.12","8.10","8.11"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.10","label":"v8.10.5","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173382","number":173382,"mergeCommit":{"message":"[APM]
Add filter to `/has_data` api (#173382)\n\nCloses
https://github.com/elastic/kibana/issues/154997\r\n\r\nThis PR adds a
data tier filter to the `/has_data` api, thus limitting\r\nthe number of
shards being hit by the
request.","sha":"e7593c0e46f1ce707c1b951f8d013e722ac79353"}},{"branch":"8.11","label":"v8.11.4","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
Co-authored-by: Søren Louv-Jansen <soren.louv@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] Timeline UI refactor revision - Design feedback
(#173015)](https://github.com/elastic/kibana/pull/173015)
<!--- Backport version: 8.9.8 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Jatin
Kathuria","email":"jatin.kathuria@elastic.co"},"sourceCommit":{"committedDate":"2023-12-13T23:17:19Z","message":"[Security
Solution] Timeline UI refactor revision - Design feedback
(#173015)\n\n## Summary\r\n\r\nThis PR implements Design feedback for
the Timeline UI refactoring:\r\n\r\n1. Adds ⨁ back in timeline bottom
bar.\r\n\r\n\r\n2.
Add `Unsaved` badge for better
visibility\r\n\r\n\r\n3.
Adds a new tour step for `Add to Favorites`
Icon.\r\n\r\n\r\n2d4f3e2e-7868-4fbb-8a73-c9b427d86e04\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[x]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [x] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests
changed","sha":"1ba247ee719565ce3dd345ea0138a60bd71a6656","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport
missing","Team:Threat
Hunting:Investigations","ci:cloud-deploy","v8.12.0","ci:project-persist-deployment","v8.13.0"],"number":173015,"url":"https://github.com/elastic/kibana/pull/173015","mergeCommit":{"message":"[Security
Solution] Timeline UI refactor revision - Design feedback
(#173015)\n\n## Summary\r\n\r\nThis PR implements Design feedback for
the Timeline UI refactoring:\r\n\r\n1. Adds ⨁ back in timeline bottom
bar.\r\n\r\n\r\n2.
Add `Unsaved` badge for better
visibility\r\n\r\n\r\n3.
Adds a new tour step for `Add to Favorites`
Icon.\r\n\r\n\r\n2d4f3e2e-7868-4fbb-8a73-c9b427d86e04\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[x]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [x] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests
changed","sha":"1ba247ee719565ce3dd345ea0138a60bd71a6656"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173015","number":173015,"mergeCommit":{"message":"[Security
Solution] Timeline UI refactor revision - Design feedback
(#173015)\n\n## Summary\r\n\r\nThis PR implements Design feedback for
the Timeline UI refactoring:\r\n\r\n1. Adds ⨁ back in timeline bottom
bar.\r\n\r\n\r\n2.
Add `Unsaved` badge for better
visibility\r\n\r\n\r\n3.
Adds a new tour step for `Add to Favorites`
Icon.\r\n\r\n\r\n2d4f3e2e-7868-4fbb-8a73-c9b427d86e04\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[x]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [x] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests
changed","sha":"1ba247ee719565ce3dd345ea0138a60bd71a6656"}}]}]
BACKPORT-->
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] remove alert status UI from alerts details flyout
(#172888)](https://github.com/elastic/kibana/pull/172888)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Philippe
Oberti","email":"philippe.oberti@elastic.co"},"sourceCommit":{"committedDate":"2023-12-14T14:49:41Z","message":"[Security
Solution] remove alert status UI from alerts details flyout
(#172888)","sha":"e88d044c51be40b313c5d65f892b7273771643de","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Threat
Hunting:Investigations","v8.12.0","v8.13.0"],"number":172888,"url":"https://github.com/elastic/kibana/pull/172888","mergeCommit":{"message":"[Security
Solution] remove alert status UI from alerts details flyout
(#172888)","sha":"e88d044c51be40b313c5d65f892b7273771643de"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172888","number":172888,"mergeCommit":{"message":"[Security
Solution] remove alert status UI from alerts details flyout
(#172888)","sha":"e88d044c51be40b313c5d65f892b7273771643de"}}]}]
BACKPORT-->
Co-authored-by: Philippe Oberti <philippe.oberti@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution][Detection Engine] fixes alert suppression for
threshold rule when suppression value is a number
(#173093)](https://github.com/elastic/kibana/pull/173093)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Vitalii
Dmyterko","email":"92328789+vitaliidm@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-14T09:12:19Z","message":"[Security
Solution][Detection Engine] fixes alert suppression for threshold rule
when suppression value is a number (#173093)\n\n## Summary\r\n\r\n-
fixes rule execution failure, when one of the suppression values
is\r\n`number` type\r\n - adds functions test to cover the case
\r\n\r\n\r\n### Checklist\r\n\r\nDelete any items that are not
applicable to this PR.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"424708c9e569a77bbdc862f7bef1b7c92db6ba4a","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","backport:prev-minor","Team:Detection
Engine","v8.12.0","v8.13.0"],"number":173093,"url":"https://github.com/elastic/kibana/pull/173093","mergeCommit":{"message":"[Security
Solution][Detection Engine] fixes alert suppression for threshold rule
when suppression value is a number (#173093)\n\n## Summary\r\n\r\n-
fixes rule execution failure, when one of the suppression values
is\r\n`number` type\r\n - adds functions test to cover the case
\r\n\r\n\r\n### Checklist\r\n\r\nDelete any items that are not
applicable to this PR.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"424708c9e569a77bbdc862f7bef1b7c92db6ba4a"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173093","number":173093,"mergeCommit":{"message":"[Security
Solution][Detection Engine] fixes alert suppression for threshold rule
when suppression value is a number (#173093)\n\n## Summary\r\n\r\n-
fixes rule execution failure, when one of the suppression values
is\r\n`number` type\r\n - adds functions test to cover the case
\r\n\r\n\r\n### Checklist\r\n\r\nDelete any items that are not
applicable to this PR.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"424708c9e569a77bbdc862f7bef1b7c92db6ba4a"}}]}]
BACKPORT-->
Co-authored-by: Vitalii Dmyterko <92328789+vitaliidm@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] Fixes paths on the Cypress quality gates scripts
(#173256)](https://github.com/elastic/kibana/pull/173256)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Gloria
Hornero","email":"gloria.hornero@elastic.co"},"sourceCommit":{"committedDate":"2023-12-13T13:16:43Z","message":"[Security
Solution] Fixes paths on the Cypress quality gates scripts
(#173256)\n\n## Summary\r\n\r\nFixes the paths on the Cypress quality
gates scripts for `detection\r\nengine` since currently it is pointing
to the `rule management`
tests\r\nfolder.","sha":"528acd73148a4b8e5ff1d967139a16c38a89f5b2","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:
SecuritySolution","v8.12.0","v8.13.0"],"number":173256,"url":"https://github.com/elastic/kibana/pull/173256","mergeCommit":{"message":"[Security
Solution] Fixes paths on the Cypress quality gates scripts
(#173256)\n\n## Summary\r\n\r\nFixes the paths on the Cypress quality
gates scripts for `detection\r\nengine` since currently it is pointing
to the `rule management`
tests\r\nfolder.","sha":"528acd73148a4b8e5ff1d967139a16c38a89f5b2"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173256","number":173256,"mergeCommit":{"message":"[Security
Solution] Fixes paths on the Cypress quality gates scripts
(#173256)\n\n## Summary\r\n\r\nFixes the paths on the Cypress quality
gates scripts for `detection\r\nengine` since currently it is pointing
to the `rule management`
tests\r\nfolder.","sha":"528acd73148a4b8e5ff1d967139a16c38a89f5b2"}}]}]
BACKPORT-->
Co-authored-by: Gloria Hornero <gloria.hornero@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Cases] Table Solution Filter Not Rendering Any Checked Option When
All Selected (#172460)](https://github.com/elastic/kibana/pull/172460)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Julian
Gernun","email":"17549662+jcger@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-13T09:30:49Z","message":"[Cases]
Table Solution Filter Not Rendering Any Checked Option When All Selected
(#172460)\n\nCo-authored-by: Christos Nasikas
<christos.nasikas@elastic.co>","sha":"b6d291d1034752515b56439d4b2437f085cd2147","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","Team:ResponseOps","Feature:Cases","v8.12.0","v8.13.0"],"number":172460,"url":"https://github.com/elastic/kibana/pull/172460","mergeCommit":{"message":"[Cases]
Table Solution Filter Not Rendering Any Checked Option When All Selected
(#172460)\n\nCo-authored-by: Christos Nasikas
<christos.nasikas@elastic.co>","sha":"b6d291d1034752515b56439d4b2437f085cd2147"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172460","number":172460,"mergeCommit":{"message":"[Cases]
Table Solution Filter Not Rendering Any Checked Option When All Selected
(#172460)\n\nCo-authored-by: Christos Nasikas
<christos.nasikas@elastic.co>","sha":"b6d291d1034752515b56439d4b2437f085cd2147"}}]}]
BACKPORT-->
Co-authored-by: Julian Gernun <17549662+jcger@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Lens] Various fixes for Heatmap
(#172602)](https://github.com/elastic/kibana/pull/172602)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Marco
Liberati","email":"dej611@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-12T09:23:24Z","message":"[Lens]
Various fixes for Heatmap (#172602)\n\n## Summary\r\n\r\nFixes
#172433\r\nFixes #172574\r\nFixes #170240\r\n\r\nFor #172433 the bands
values are now passing thru the value formatter to\r\nmatch users'
expectations:\r\n\r\n<img width=\"1227\" alt=\"Screenshot 2023-12-05 at
16 52
39\"\r\nsrc=\"42d2c4ba-1b6b-4785-84e7-0ad73670ecdc\">\r\n\r\nWhen
the default formatter is selected something complex happens
there,\r\nwhich might look wrong but it is still respecting Kibana's
advanced\r\nsettings formatter pattern (in this example
`0.[000]`):\r\n\r\n<img width=\"1234\" alt=\"Screenshot 2023-12-05 at 16
52
57\"\r\nsrc=\"7fe7dd1d-eff1-40fa-9e52-8a7ff20d0faf\">\r\n\r\nAs
for #170240 the problem was due to an unnecessary safe guard
which\r\nwas forcing the first bucket to be `1` when it was
open:\r\n\r\n<img width=\"1227\" alt=\"Screenshot 2023-12-05 at 16 52
11\"\r\nsrc=\"a3ac437d-7b04-489d-b0fc-6c2b456971de\">\r\n\r\nAs
for #172574 I just fixed at root level the problem...\r\n\r\n###
Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"9f4c220ad8599f4bd98e78d4e5abc9147cc5920f","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Visualizations","Feature:Lens","backport:prev-minor","v8.13.0"],"number":172602,"url":"https://github.com/elastic/kibana/pull/172602","mergeCommit":{"message":"[Lens]
Various fixes for Heatmap (#172602)\n\n## Summary\r\n\r\nFixes
#172433\r\nFixes #172574\r\nFixes #170240\r\n\r\nFor #172433 the bands
values are now passing thru the value formatter to\r\nmatch users'
expectations:\r\n\r\n<img width=\"1227\" alt=\"Screenshot 2023-12-05 at
16 52
39\"\r\nsrc=\"42d2c4ba-1b6b-4785-84e7-0ad73670ecdc\">\r\n\r\nWhen
the default formatter is selected something complex happens
there,\r\nwhich might look wrong but it is still respecting Kibana's
advanced\r\nsettings formatter pattern (in this example
`0.[000]`):\r\n\r\n<img width=\"1234\" alt=\"Screenshot 2023-12-05 at 16
52
57\"\r\nsrc=\"7fe7dd1d-eff1-40fa-9e52-8a7ff20d0faf\">\r\n\r\nAs
for #170240 the problem was due to an unnecessary safe guard
which\r\nwas forcing the first bucket to be `1` when it was
open:\r\n\r\n<img width=\"1227\" alt=\"Screenshot 2023-12-05 at 16 52
11\"\r\nsrc=\"a3ac437d-7b04-489d-b0fc-6c2b456971de\">\r\n\r\nAs
for #172574 I just fixed at root level the problem...\r\n\r\n###
Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"9f4c220ad8599f4bd98e78d4e5abc9147cc5920f"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172602","number":172602,"mergeCommit":{"message":"[Lens]
Various fixes for Heatmap (#172602)\n\n## Summary\r\n\r\nFixes
#172433\r\nFixes #172574\r\nFixes #170240\r\n\r\nFor #172433 the bands
values are now passing thru the value formatter to\r\nmatch users'
expectations:\r\n\r\n<img width=\"1227\" alt=\"Screenshot 2023-12-05 at
16 52
39\"\r\nsrc=\"42d2c4ba-1b6b-4785-84e7-0ad73670ecdc\">\r\n\r\nWhen
the default formatter is selected something complex happens
there,\r\nwhich might look wrong but it is still respecting Kibana's
advanced\r\nsettings formatter pattern (in this example
`0.[000]`):\r\n\r\n<img width=\"1234\" alt=\"Screenshot 2023-12-05 at 16
52
57\"\r\nsrc=\"7fe7dd1d-eff1-40fa-9e52-8a7ff20d0faf\">\r\n\r\nAs
for #170240 the problem was due to an unnecessary safe guard
which\r\nwas forcing the first bucket to be `1` when it was
open:\r\n\r\n<img width=\"1227\" alt=\"Screenshot 2023-12-05 at 16 52
11\"\r\nsrc=\"a3ac437d-7b04-489d-b0fc-6c2b456971de\">\r\n\r\nAs
for #172574 I just fixed at root level the problem...\r\n\r\n###
Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"9f4c220ad8599f4bd98e78d4e5abc9147cc5920f"}}]}]
BACKPORT-->
Co-authored-by: Marco Liberati <dej611@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Security Solution] fix endpoint list + metadata api FTR tests
(#170489)](https://github.com/elastic/kibana/pull/170489)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Joey F.
Poon","email":"joey.poon@elastic.co"},"sourceCommit":{"committedDate":"2023-12-11T16:59:53Z","message":"[Security
Solution] fix endpoint list + metadata api FTR tests
(#170489)","sha":"a50b97fb2382213c88f65bc7317caa792c3c0750","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Fleet","Team:Defend
Workflows","v8.12.0","v8.13.0"],"number":170489,"url":"https://github.com/elastic/kibana/pull/170489","mergeCommit":{"message":"[Security
Solution] fix endpoint list + metadata api FTR tests
(#170489)","sha":"a50b97fb2382213c88f65bc7317caa792c3c0750"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/170489","number":170489,"mergeCommit":{"message":"[Security
Solution] fix endpoint list + metadata api FTR tests
(#170489)","sha":"a50b97fb2382213c88f65bc7317caa792c3c0750"}}]}]
BACKPORT-->
Co-authored-by: Joey F. Poon <joey.poon@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [Fix saved query response validation
(#172579)](https://github.com/elastic/kibana/pull/172579)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Lukas
Olson","email":"lukas@elastic.co"},"sourceCommit":{"committedDate":"2023-12-11T17:50:07Z","message":"Fix
saved query response validation (#172579)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/167610. Updates the
saved\r\nquery response validation to optionally include the
`namespace`\r\nattribute (which is returned from the saved objects
client for create,\r\nbut not for update).\r\n\r\n### Checklist\r\n\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios\r\n\r\nCo-authored-by: Stratoula Kalafateli
<efstratia.kalafateli@elastic.co>","sha":"594731dc47d82ae99e5dc1e0aeb44eadf2e9681e","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:DataDiscovery","v8.12.0","v8.13.0"],"number":172579,"url":"https://github.com/elastic/kibana/pull/172579","mergeCommit":{"message":"Fix
saved query response validation (#172579)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/167610. Updates the
saved\r\nquery response validation to optionally include the
`namespace`\r\nattribute (which is returned from the saved objects
client for create,\r\nbut not for update).\r\n\r\n### Checklist\r\n\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios\r\n\r\nCo-authored-by: Stratoula Kalafateli
<efstratia.kalafateli@elastic.co>","sha":"594731dc47d82ae99e5dc1e0aeb44eadf2e9681e"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172579","number":172579,"mergeCommit":{"message":"Fix
saved query response validation (#172579)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/167610. Updates the
saved\r\nquery response validation to optionally include the
`namespace`\r\nattribute (which is returned from the saved objects
client for create,\r\nbut not for update).\r\n\r\n### Checklist\r\n\r\n-
[x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios\r\n\r\nCo-authored-by: Stratoula Kalafateli
<efstratia.kalafateli@elastic.co>","sha":"594731dc47d82ae99e5dc1e0aeb44eadf2e9681e"}}]}]
BACKPORT-->
Co-authored-by: Lukas Olson <lukas@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[ResponseOps] Fix Actions authz for SentinelOne to ensure that the
user explicitly has `ALL` privilege
(#172528)](https://github.com/elastic/kibana/pull/172528)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Paul
Tavares","email":"56442535+paul-tavares@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-11T17:31:25Z","message":"[ResponseOps]
Fix Actions authz for SentinelOne to ensure that the user explicitly has
`ALL` privilege (#172528)\n\n## Summary\r\n\r\n- Fixes the Actions
plugin sub-actions execution for SentinelOne\r\nconnector to ensure that
a user must have `ALL` privilege to \"Action
and\r\nConnectors\"","sha":"88ea8498b417d0b0f22364b434d57764ad958030","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","v8.12.0","v8.13.0"],"number":172528,"url":"https://github.com/elastic/kibana/pull/172528","mergeCommit":{"message":"[ResponseOps]
Fix Actions authz for SentinelOne to ensure that the user explicitly has
`ALL` privilege (#172528)\n\n## Summary\r\n\r\n- Fixes the Actions
plugin sub-actions execution for SentinelOne\r\nconnector to ensure that
a user must have `ALL` privilege to \"Action
and\r\nConnectors\"","sha":"88ea8498b417d0b0f22364b434d57764ad958030"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172528","number":172528,"mergeCommit":{"message":"[ResponseOps]
Fix Actions authz for SentinelOne to ensure that the user explicitly has
`ALL` privilege (#172528)\n\n## Summary\r\n\r\n- Fixes the Actions
plugin sub-actions execution for SentinelOne\r\nconnector to ensure that
a user must have `ALL` privilege to \"Action
and\r\nConnectors\"","sha":"88ea8498b417d0b0f22364b434d57764ad958030"}}]}]
BACKPORT-->
Co-authored-by: Paul Tavares <56442535+paul-tavares@users.noreply.github.com>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[ML] Category job results API test
(#172840)](https://github.com/elastic/kibana/pull/172840)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"James
Gowdy","email":"jgowdy@elastic.co"},"sourceCommit":{"committedDate":"2023-12-11T09:04:50Z","message":"[ML]
Category job results API test (#172840)\n\nCreates a categorization job
and tests:\r\nThe response from `/internal/ml/jobs/top_categories`
matches the\r\nexpected top categories.\r\nThe response
from\r\n`/internal/ml/anomaly_detectors/${jobId}/results/categories/${categoryId}`\r\nmatches
the correct selected category.\r\n\r\nPart of
https://github.com/elastic/kibana/issues/168458","sha":"efe8362d23a6f82005195df41c17271c2f48e0db","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["non-issue",":ml","Feature:Anomaly
Detection","release_note:skip","v8.12.0","v8.13.0"],"number":172840,"url":"https://github.com/elastic/kibana/pull/172840","mergeCommit":{"message":"[ML]
Category job results API test (#172840)\n\nCreates a categorization job
and tests:\r\nThe response from `/internal/ml/jobs/top_categories`
matches the\r\nexpected top categories.\r\nThe response
from\r\n`/internal/ml/anomaly_detectors/${jobId}/results/categories/${categoryId}`\r\nmatches
the correct selected category.\r\n\r\nPart of
https://github.com/elastic/kibana/issues/168458","sha":"efe8362d23a6f82005195df41c17271c2f48e0db"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172840","number":172840,"mergeCommit":{"message":"[ML]
Category job results API test (#172840)\n\nCreates a categorization job
and tests:\r\nThe response from `/internal/ml/jobs/top_categories`
matches the\r\nexpected top categories.\r\nThe response
from\r\n`/internal/ml/anomaly_detectors/${jobId}/results/categories/${categoryId}`\r\nmatches
the correct selected category.\r\n\r\nPart of
https://github.com/elastic/kibana/issues/168458","sha":"efe8362d23a6f82005195df41c17271c2f48e0db"}}]}]
BACKPORT-->
Co-authored-by: James Gowdy <jgowdy@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Fleet] Cache call to getBundledPackages
(#172640)](https://github.com/elastic/kibana/pull/172640)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Nicolas
Chaulet","email":"nicolas.chaulet@elastic.co"},"sourceCommit":{"committedDate":"2023-12-08T17:06:06Z","message":"[Fleet]
Cache call to getBundledPackages
(#172640)","sha":"2c0e98818729fe5988e17ba53c5e4752f3364039","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","Team:APM","release_note:skip","Team:Fleet","backport:prev-minor","Team:obs-ux-infra_services","apm:review","v8.13.0"],"number":172640,"url":"https://github.com/elastic/kibana/pull/172640","mergeCommit":{"message":"[Fleet]
Cache call to getBundledPackages
(#172640)","sha":"2c0e98818729fe5988e17ba53c5e4752f3364039"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172640","number":172640,"mergeCommit":{"message":"[Fleet]
Cache call to getBundledPackages
(#172640)","sha":"2c0e98818729fe5988e17ba53c5e4752f3364039"}}]}]
BACKPORT-->
Co-authored-by: Nicolas Chaulet <nicolas.chaulet@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [Fixes Failing test: X-Pack Alerting API Integration
Tests.x-pack/test/alerting_api_integration/security_and_spaces/group2/tests/telemetry/alerting_and_actions_telemetry·ts
- alerting api integration security and spaces enabled - Group 2
Alerting and Actions Telemetry telemetry should retrieve telemetry data
in the expected format
(#172701)](https://github.com/elastic/kibana/pull/172701)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Ying
Mao","email":"ying.mao@elastic.co"},"sourceCommit":{"committedDate":"2023-12-07T21:43:49Z","message":"Fixes
Failing test: X-Pack Alerting API Integration
Tests.x-pack/test/alerting_api_integration/security_and_spaces/group2/tests/telemetry/alerting_and_actions_telemetry·ts
- alerting api integration security and spaces enabled - Group 2
Alerting and Actions Telemetry telemetry should retrieve telemetry data
in the expected format (#172701)\n\n## Summary\r\n\r\nTest was failing
because a `avg_execution_time > 0` check in the\r\ntelemetry was
returning `false` instead of `true`. I added a short delay\r\nto the
connector executor to increase the execution time duration\r\nslightly
to try to avoid this.\r\n\r\nRan 450x in the flaky test
runner:\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4256\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ef87bceeab3b5b8837d14147956b97c6c19c6678","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Alerting","release_note:skip","Team:ResponseOps","v8.12.0","v8.13.0"],"number":172701,"url":"https://github.com/elastic/kibana/pull/172701","mergeCommit":{"message":"Fixes
Failing test: X-Pack Alerting API Integration
Tests.x-pack/test/alerting_api_integration/security_and_spaces/group2/tests/telemetry/alerting_and_actions_telemetry·ts
- alerting api integration security and spaces enabled - Group 2
Alerting and Actions Telemetry telemetry should retrieve telemetry data
in the expected format (#172701)\n\n## Summary\r\n\r\nTest was failing
because a `avg_execution_time > 0` check in the\r\ntelemetry was
returning `false` instead of `true`. I added a short delay\r\nto the
connector executor to increase the execution time duration\r\nslightly
to try to avoid this.\r\n\r\nRan 450x in the flaky test
runner:\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4256\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ef87bceeab3b5b8837d14147956b97c6c19c6678"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172701","number":172701,"mergeCommit":{"message":"Fixes
Failing test: X-Pack Alerting API Integration
Tests.x-pack/test/alerting_api_integration/security_and_spaces/group2/tests/telemetry/alerting_and_actions_telemetry·ts
- alerting api integration security and spaces enabled - Group 2
Alerting and Actions Telemetry telemetry should retrieve telemetry data
in the expected format (#172701)\n\n## Summary\r\n\r\nTest was failing
because a `avg_execution_time > 0` check in the\r\ntelemetry was
returning `false` instead of `true`. I added a short delay\r\nto the
connector executor to increase the execution time duration\r\nslightly
to try to avoid this.\r\n\r\nRan 450x in the flaky test
runner:\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4256\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ef87bceeab3b5b8837d14147956b97c6c19c6678"}}]}]
BACKPORT-->
Co-authored-by: Ying Mao <ying.mao@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Obs AI Assistant] Perform functions etc on the server
(#172590)](https://github.com/elastic/kibana/pull/172590)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Dario
Gieselaar","email":"dario.gieselaar@elastic.co"},"sourceCommit":{"committedDate":"2023-12-07T14:18:41Z","message":"[Obs
AI Assistant] Perform functions etc on the server
(#172590)\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"56b36b9042b42c702a57568f1612af3d433d2df1","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","Team:APM","v8.12.0","apm:review","v8.13.0"],"number":172590,"url":"https://github.com/elastic/kibana/pull/172590","mergeCommit":{"message":"[Obs
AI Assistant] Perform functions etc on the server
(#172590)\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"56b36b9042b42c702a57568f1612af3d433d2df1"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172590","number":172590,"mergeCommit":{"message":"[Obs
AI Assistant] Perform functions etc on the server
(#172590)\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"56b36b9042b42c702a57568f1612af3d433d2df1"}}]}]
BACKPORT-->
Co-authored-by: Dario Gieselaar <dario.gieselaar@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [[Response Ops][Alerting] Adding evaluation threshold to alert payload
for ES query rule
(#171571)](https://github.com/elastic/kibana/pull/171571)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Ying
Mao","email":"ying.mao@elastic.co"},"sourceCommit":{"committedDate":"2023-12-07T13:20:34Z","message":"[Response
Ops][Alerting] Adding evaluation threshold to alert payload for ES query
rule (#171571)\n\nResolves
https://github.com/elastic/kibana/issues/166986\r\n\r\n##
Summary\r\n\r\nAdding `kibana.alert.evalution.threshold` to the alert
payload for the\r\nES query rule. This is the field that's shown in the
alert details view\r\nin Observability. To show this, we add
`ALERT_EVALUATION_CONDITIONS` to\r\nthe stack alerts mapping, using the
same mapping type as the\r\nobservability rule types. This is typed as a
`scaled_float` which is\r\nexpecting a single value, so the threshold is
set in the alert payload\r\nonly when the threshold is a single value. I
will open a followup issue\r\nfor handling multi-valued
thresholds.\r\nhttps://github.com/elastic/kibana/issues/172714\r\n\r\n<img
width=\"1064\" alt=\"Screenshot 2023-11-20 at 1 10
05 PM\"\r\nsrc=\"e265a9e8-4bbf-4d3e-a6bc-e69b774c7574\">\r\n\r\n\r\n##
To Verify\r\n\r\nCreate an ES query rule with a single threshold that
triggers an alert\r\nand give it a Metrics or Logs visibility. Let it
run and then look at\r\nthe alert details for the alert from the
Observability alert table. The\r\n`Expected Value` row should be
populated.","sha":"ec81569930bb91a55fec1ee8925826d804348361","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Feature:Alerting","Team:ResponseOps","v8.12.0","Team:obs-ux-management","v8.13.0"],"number":171571,"url":"https://github.com/elastic/kibana/pull/171571","mergeCommit":{"message":"[Response
Ops][Alerting] Adding evaluation threshold to alert payload for ES query
rule (#171571)\n\nResolves
https://github.com/elastic/kibana/issues/166986\r\n\r\n##
Summary\r\n\r\nAdding `kibana.alert.evalution.threshold` to the alert
payload for the\r\nES query rule. This is the field that's shown in the
alert details view\r\nin Observability. To show this, we add
`ALERT_EVALUATION_CONDITIONS` to\r\nthe stack alerts mapping, using the
same mapping type as the\r\nobservability rule types. This is typed as a
`scaled_float` which is\r\nexpecting a single value, so the threshold is
set in the alert payload\r\nonly when the threshold is a single value. I
will open a followup issue\r\nfor handling multi-valued
thresholds.\r\nhttps://github.com/elastic/kibana/issues/172714\r\n\r\n<img
width=\"1064\" alt=\"Screenshot 2023-11-20 at 1 10
05 PM\"\r\nsrc=\"e265a9e8-4bbf-4d3e-a6bc-e69b774c7574\">\r\n\r\n\r\n##
To Verify\r\n\r\nCreate an ES query rule with a single threshold that
triggers an alert\r\nand give it a Metrics or Logs visibility. Let it
run and then look at\r\nthe alert details for the alert from the
Observability alert table. The\r\n`Expected Value` row should be
populated.","sha":"ec81569930bb91a55fec1ee8925826d804348361"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/171571","number":171571,"mergeCommit":{"message":"[Response
Ops][Alerting] Adding evaluation threshold to alert payload for ES query
rule (#171571)\n\nResolves
https://github.com/elastic/kibana/issues/166986\r\n\r\n##
Summary\r\n\r\nAdding `kibana.alert.evalution.threshold` to the alert
payload for the\r\nES query rule. This is the field that's shown in the
alert details view\r\nin Observability. To show this, we add
`ALERT_EVALUATION_CONDITIONS` to\r\nthe stack alerts mapping, using the
same mapping type as the\r\nobservability rule types. This is typed as a
`scaled_float` which is\r\nexpecting a single value, so the threshold is
set in the alert payload\r\nonly when the threshold is a single value. I
will open a followup issue\r\nfor handling multi-valued
thresholds.\r\nhttps://github.com/elastic/kibana/issues/172714\r\n\r\n<img
width=\"1064\" alt=\"Screenshot 2023-11-20 at 1 10
05 PM\"\r\nsrc=\"e265a9e8-4bbf-4d3e-a6bc-e69b774c7574\">\r\n\r\n\r\n##
To Verify\r\n\r\nCreate an ES query rule with a single threshold that
triggers an alert\r\nand give it a Metrics or Logs visibility. Let it
run and then look at\r\nthe alert details for the alert from the
Observability alert table. The\r\n`Expected Value` row should be
populated.","sha":"ec81569930bb91a55fec1ee8925826d804348361"}}]}]
BACKPORT-->
Co-authored-by: Ying Mao <ying.mao@elastic.co>
# Backport
This will backport the following commits from `main` to `8.12`:
- [Deprecate feature flag for Custom threshold rule
(#172584)](https://github.com/elastic/kibana/pull/172584)
<!--- Backport version: 8.9.7 -->
### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)
<!--BACKPORT [{"author":{"name":"Bena
Kansara","email":"69037875+benakansara@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-07T09:34:11Z","message":"Deprecate
feature flag for Custom threshold rule (#172584)\n\nResolves
https://github.com/elastic/kibana/issues/171406\r\n\r\n- Deprecates
following feature flag used for enabling/disabling Custom\r\nthreshold
rule:\r\n```\r\nxpack.observability.unsafe.thresholdRule.enabled\r\n```\r\n-
Removes usage of this flag from code.\r\n- Adding this flag in
`kibana.yml` will generate following warning:\r\n```\r\n[WARN
][config.deprecation] You no longer need to configure
\"xpack.observability.unsafe.thresholdRule.enabled\".\r\n```\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"16f09fdcc45a2df9a3a7868ea9590227627b82ad","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v8.12.0","Team:obs-ux-management","v8.13.0"],"number":172584,"url":"https://github.com/elastic/kibana/pull/172584","mergeCommit":{"message":"Deprecate
feature flag for Custom threshold rule (#172584)\n\nResolves
https://github.com/elastic/kibana/issues/171406\r\n\r\n- Deprecates
following feature flag used for enabling/disabling Custom\r\nthreshold
rule:\r\n```\r\nxpack.observability.unsafe.thresholdRule.enabled\r\n```\r\n-
Removes usage of this flag from code.\r\n- Adding this flag in
`kibana.yml` will generate following warning:\r\n```\r\n[WARN
][config.deprecation] You no longer need to configure
\"xpack.observability.unsafe.thresholdRule.enabled\".\r\n```\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"16f09fdcc45a2df9a3a7868ea9590227627b82ad"}},"sourceBranch":"main","suggestedTargetBranches":["8.12"],"targetPullRequestStates":[{"branch":"8.12","label":"v8.12.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/172584","number":172584,"mergeCommit":{"message":"Deprecate
feature flag for Custom threshold rule (#172584)\n\nResolves
https://github.com/elastic/kibana/issues/171406\r\n\r\n- Deprecates
following feature flag used for enabling/disabling Custom\r\nthreshold
rule:\r\n```\r\nxpack.observability.unsafe.thresholdRule.enabled\r\n```\r\n-
Removes usage of this flag from code.\r\n- Adding this flag in
`kibana.yml` will generate following warning:\r\n```\r\n[WARN
][config.deprecation] You no longer need to configure
\"xpack.observability.unsafe.thresholdRule.enabled\".\r\n```\r\n\r\n---------\r\n\r\nCo-authored-by:
Kibana Machine
<42973632+kibanamachine@users.noreply.github.com>","sha":"16f09fdcc45a2df9a3a7868ea9590227627b82ad"}}]}]
BACKPORT-->
Co-authored-by: Bena Kansara <69037875+benakansara@users.noreply.github.com>
## Summary
This PR improves a potential performance issue for timeline currently.
When users load a security solution page with timeline, the default ESQL
tab query is run in the background as the query is a part of the url
state. While this can be convenient for the speed of retrieval when
opening the ESQL tab, it can lead to some performance issues on initial
load depending on the number of fields/size of the data in the user's
default security indices. To improve the performance of this initial
query, we'll limit the query to only initially retrieve the default
Timeline columns via the ESQL `keep` clause.
`keep @timestamp, message, event.category, event.action, host.names,
source.ip, destination.ip, user.name` will be appended to the end of the
current default query
<img width="1680" alt="image"
src="5fc3ae69-8ae6-4143-8f75-7cf69032e63a">
**Regarding the unskipped test:**
The tests were flaky due to the fact that interacting with the monaco
editor with the cypress `type` commands didn't allow for deleting of the
existing text, but this was able to be remedied by first expanding the
editor which allows the text to be more easily interacted with via the
cypress commands.
[Buildkite (x100) test
run](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/4174#_)
- The one failure is due to a flaky test in an unrelated correlation
tab.
---------
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
