Commit graph

34554 commits

Author SHA1 Message Date
Kibana Machine
165abc4d3d
[8.16] [ResponseOps][Rules] Add loading state to rule params data views selector (#203654) (#204422)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ResponseOps][Rules] Add loading state to rule params data views
selector (#203654)](https://github.com/elastic/kibana/pull/203654)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Umberto
Pepato","email":"umbopepato@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-16T15:43:13Z","message":"[ResponseOps][Rules]
Add loading state to rule params data views selector (#203654)\n\n##
Summary\r\n\r\nIntroduces a loading state in the data views select
popover and renders\r\na loading indicator when DVs are not available
yet. This makes sure that\r\neven if the `savedObjectsClient.find` call
of the data views service\r\ntakes a long time, we don't show an empty
popover in the
meantime.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5bbe0c68-3ceb-4d7f-91fd-357db4caa5c1\r\n\r\n##
References\r\n\r\nFixes #198502 \r\n\r\n## Release note\r\n\r\nFix race
condition in alerting rules data view
selector","sha":"713d4bbcb2d9f5e707d06c1d298287edd3e694d0","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","Team:ResponseOps","v9.0.0","backport:all-open"],"title":"[ResponseOps][Rules]
Add loading state to rule params data views
selector","number":203654,"url":"https://github.com/elastic/kibana/pull/203654","mergeCommit":{"message":"[ResponseOps][Rules]
Add loading state to rule params data views selector (#203654)\n\n##
Summary\r\n\r\nIntroduces a loading state in the data views select
popover and renders\r\na loading indicator when DVs are not available
yet. This makes sure that\r\neven if the `savedObjectsClient.find` call
of the data views service\r\ntakes a long time, we don't show an empty
popover in the
meantime.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5bbe0c68-3ceb-4d7f-91fd-357db4caa5c1\r\n\r\n##
References\r\n\r\nFixes #198502 \r\n\r\n## Release note\r\n\r\nFix race
condition in alerting rules data view
selector","sha":"713d4bbcb2d9f5e707d06c1d298287edd3e694d0"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203654","number":203654,"mergeCommit":{"message":"[ResponseOps][Rules]
Add loading state to rule params data views selector (#203654)\n\n##
Summary\r\n\r\nIntroduces a loading state in the data views select
popover and renders\r\na loading indicator when DVs are not available
yet. This makes sure that\r\neven if the `savedObjectsClient.find` call
of the data views service\r\ntakes a long time, we don't show an empty
popover in the
meantime.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/5bbe0c68-3ceb-4d7f-91fd-357db4caa5c1\r\n\r\n##
References\r\n\r\nFixes #198502 \r\n\r\n## Release note\r\n\r\nFix race
condition in alerting rules data view
selector","sha":"713d4bbcb2d9f5e707d06c1d298287edd3e694d0"}}]}]
BACKPORT-->

Co-authored-by: Umberto Pepato <umbopepato@users.noreply.github.com>
2024-12-16 11:34:30 -06:00
José Luis González
24a47e8a2b
[8.16] [Search] Web crawler name consistency (#202738) Manual backport (#204202)
Manual Backport
This will backport the following commits from main to 8.16:

Automatic backport were failing and using the CLI backport tool was
addind many other unnecesary files. So then doing it manually.

https://github.com/elastic/kibana/pull/202738

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2024-12-16 16:00:54 +01:00
Kibana Machine
c6ebceb178
[8.16] [Security Solution] AI Assistant: LLM Connector model chooser bug. New chat does not use connector&#x27;s model (#199303) (#204014) (#204306)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] AI Assistant: LLM Connector model chooser bug.
New chat does not use connector&#x27;s model (#199303)
(#204014)](https://github.com/elastic/kibana/pull/204014)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Ievgen
Sorokopud","email":"ievgen.sorokopud@elastic.co"},"sourceCommit":{"committedDate":"2024-12-14T08:54:54Z","message":"[Security
Solution] AI Assistant: LLM Connector model chooser bug. New chat does
not use connector's model (#199303) (#204014)\n\n## Summary\r\n\r\nThe
PR fixes [this
bug](https://github.com/elastic/kibana/issues/199303)\r\n\r\nThe issue
happens with some of the locally setup LLMs
(like\r\n[Ollama](https://github.com/ollama/ollama)) which requires the
correct\r\n`model` to be passed as part of the [chat
completions\r\nAPI](https://github.com/ollama/ollama/blob/main/docs/api.md#generate-a-chat-completion).\r\n\r\nWe
had a bug in our code when on new conversation creation we would
not\r\npass all the connectors configuration and only `connectorId`
and\r\n`actionTypeId` would be passed. Here is the old code
implementation:\r\n\r\n```\r\nconst newConversation = await
createConversation({\r\n title: NEW_CHAT,\r\n
...(currentConversation?.apiConfig != null &&\r\n
currentConversation?.apiConfig?.actionTypeId != null\r\n ? {\r\n
apiConfig: {\r\n connectorId:
currentConversation.apiConfig.connectorId,\r\n actionTypeId:
currentConversation.apiConfig.actionTypeId,\r\n ...(newSystemPrompt?.id
!= null ? { defaultSystemPromptId: newSystemPrompt.id } : {}),\r\n
},\r\n }\r\n : {}),\r\n});\r\n```\r\n\r\nand thus the new conversation
would not have the complete connector\r\nconfiguration which would cause
to use default model (`gpt-4o`) as a\r\nmodel we pass to the
LLM.\r\n\r\nAlso, I updated the default body that we use on the Test
connector page,\r\nto make sure that we send a model parameter to the
LLM in case of `Open\r\nAI > Other (OpenAI Compatible Service)` kind of
connectors.\r\n\r\n### Testing notes\r\n\r\nSteps to reproduce:\r\n1.
Install\r\n[Ollama](https://github.com/ollama/ollama?tab=readme-ov-file#ollama)\r\nlocally\r\n2.
Setup an OpenAI connector using Other (OpenAI Compatible
Service)\r\nprovider\r\n3. Open AI Assistant and select created Ollama
connector to chat\r\n4. Create a \"New Chat\"\r\n5. The Ollama connector
should be selected\r\n6. Send a message to LLM (for example \"hello
world\")\r\n\r\nExpected: there should be no errors saying
`ActionsClientChatOpenAI: an\r\nerror occurred while running the action
- Unexpected API Error: - 404\r\nmodel \"gpt-4o\" not found, try pulling
it
first`","sha":"7e4e8592f45ceca822c4f34d18e9f047cfe3cde0","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:
SecuritySolution","Team:Security Generative
AI","backport:version","v8.18.0","v8.16.3","v8.17.1"],"title":"[Security
Solution] AI Assistant: LLM Connector model chooser bug. New chat does
not use connector's model
(#199303)","number":204014,"url":"https://github.com/elastic/kibana/pull/204014","mergeCommit":{"message":"[Security
Solution] AI Assistant: LLM Connector model chooser bug. New chat does
not use connector's model (#199303) (#204014)\n\n## Summary\r\n\r\nThe
PR fixes [this
bug](https://github.com/elastic/kibana/issues/199303)\r\n\r\nThe issue
happens with some of the locally setup LLMs
(like\r\n[Ollama](https://github.com/ollama/ollama)) which requires the
correct\r\n`model` to be passed as part of the [chat
completions\r\nAPI](https://github.com/ollama/ollama/blob/main/docs/api.md#generate-a-chat-completion).\r\n\r\nWe
had a bug in our code when on new conversation creation we would
not\r\npass all the connectors configuration and only `connectorId`
and\r\n`actionTypeId` would be passed. Here is the old code
implementation:\r\n\r\n```\r\nconst newConversation = await
createConversation({\r\n title: NEW_CHAT,\r\n
...(currentConversation?.apiConfig != null &&\r\n
currentConversation?.apiConfig?.actionTypeId != null\r\n ? {\r\n
apiConfig: {\r\n connectorId:
currentConversation.apiConfig.connectorId,\r\n actionTypeId:
currentConversation.apiConfig.actionTypeId,\r\n ...(newSystemPrompt?.id
!= null ? { defaultSystemPromptId: newSystemPrompt.id } : {}),\r\n
},\r\n }\r\n : {}),\r\n});\r\n```\r\n\r\nand thus the new conversation
would not have the complete connector\r\nconfiguration which would cause
to use default model (`gpt-4o`) as a\r\nmodel we pass to the
LLM.\r\n\r\nAlso, I updated the default body that we use on the Test
connector page,\r\nto make sure that we send a model parameter to the
LLM in case of `Open\r\nAI > Other (OpenAI Compatible Service)` kind of
connectors.\r\n\r\n### Testing notes\r\n\r\nSteps to reproduce:\r\n1.
Install\r\n[Ollama](https://github.com/ollama/ollama?tab=readme-ov-file#ollama)\r\nlocally\r\n2.
Setup an OpenAI connector using Other (OpenAI Compatible
Service)\r\nprovider\r\n3. Open AI Assistant and select created Ollama
connector to chat\r\n4. Create a \"New Chat\"\r\n5. The Ollama connector
should be selected\r\n6. Send a message to LLM (for example \"hello
world\")\r\n\r\nExpected: there should be no errors saying
`ActionsClientChatOpenAI: an\r\nerror occurred while running the action
- Unexpected API Error: - 404\r\nmodel \"gpt-4o\" not found, try pulling
it
first`","sha":"7e4e8592f45ceca822c4f34d18e9f047cfe3cde0"}},"sourceBranch":"main","suggestedTargetBranches":["8.x","8.16","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/204014","number":204014,"mergeCommit":{"message":"[Security
Solution] AI Assistant: LLM Connector model chooser bug. New chat does
not use connector's model (#199303) (#204014)\n\n## Summary\r\n\r\nThe
PR fixes [this
bug](https://github.com/elastic/kibana/issues/199303)\r\n\r\nThe issue
happens with some of the locally setup LLMs
(like\r\n[Ollama](https://github.com/ollama/ollama)) which requires the
correct\r\n`model` to be passed as part of the [chat
completions\r\nAPI](https://github.com/ollama/ollama/blob/main/docs/api.md#generate-a-chat-completion).\r\n\r\nWe
had a bug in our code when on new conversation creation we would
not\r\npass all the connectors configuration and only `connectorId`
and\r\n`actionTypeId` would be passed. Here is the old code
implementation:\r\n\r\n```\r\nconst newConversation = await
createConversation({\r\n title: NEW_CHAT,\r\n
...(currentConversation?.apiConfig != null &&\r\n
currentConversation?.apiConfig?.actionTypeId != null\r\n ? {\r\n
apiConfig: {\r\n connectorId:
currentConversation.apiConfig.connectorId,\r\n actionTypeId:
currentConversation.apiConfig.actionTypeId,\r\n ...(newSystemPrompt?.id
!= null ? { defaultSystemPromptId: newSystemPrompt.id } : {}),\r\n
},\r\n }\r\n : {}),\r\n});\r\n```\r\n\r\nand thus the new conversation
would not have the complete connector\r\nconfiguration which would cause
to use default model (`gpt-4o`) as a\r\nmodel we pass to the
LLM.\r\n\r\nAlso, I updated the default body that we use on the Test
connector page,\r\nto make sure that we send a model parameter to the
LLM in case of `Open\r\nAI > Other (OpenAI Compatible Service)` kind of
connectors.\r\n\r\n### Testing notes\r\n\r\nSteps to reproduce:\r\n1.
Install\r\n[Ollama](https://github.com/ollama/ollama?tab=readme-ov-file#ollama)\r\nlocally\r\n2.
Setup an OpenAI connector using Other (OpenAI Compatible
Service)\r\nprovider\r\n3. Open AI Assistant and select created Ollama
connector to chat\r\n4. Create a \"New Chat\"\r\n5. The Ollama connector
should be selected\r\n6. Send a message to LLM (for example \"hello
world\")\r\n\r\nExpected: there should be no errors saying
`ActionsClientChatOpenAI: an\r\nerror occurred while running the action
- Unexpected API Error: - 404\r\nmodel \"gpt-4o\" not found, try pulling
it
first`","sha":"7e4e8592f45ceca822c4f34d18e9f047cfe3cde0"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Ievgen Sorokopud <ievgen.sorokopud@elastic.co>
2024-12-14 04:39:46 -06:00
natasha-moore-elastic
cbcb1cb562
[8.16] [DOCS] Adds conceptual content to API docs (#202305) (#204108)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[DOCS] Adds conceptual content to API docs
(#202305)](https://github.com/elastic/kibana/pull/202305)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"natasha-moore-elastic","email":"137783811+natasha-moore-elastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-12T16:53:29Z","message":"[DOCS]
Adds conceptual content to API docs (#202305)\n\n##
Summary\r\n\r\nResolves
https://github.com/elastic/security-docs-internal/issues/49.\r\n\r\nIn
order to retire asciidoc API docs, we first need to move over
any\r\nrelevant content from those docs to the API reference site. This
PR adds\r\nthe relevant conceptual information
from:\r\n\r\n-\r\nhttps://www.elastic.co/guide/en/security/master/exceptions-api-overview.html\r\n-\r\nhttps://www.elastic.co/guide/en/security/master/lists-api-overview.html\r\n-
https://www.elastic.co/guide/en/security/master/rule-api-overview.html\r\n\r\n###
Previews:\r\nBump previews expire after 30min, so I'm providing
screenshots below:\r\n\r\nDetections
preview:\r\n\r\n![detections_preview](https://github.com/user-attachments/assets/c47b9d85-b5d0-4a32-8668-dc1ae2215681)\r\n\r\nExceptions
preview:\r\n\r\n![exceptions_preview](https://github.com/user-attachments/assets/b3fe9139-2162-4c56-bba9-751dffa11cb4)\r\n\r\nLists
preview:\r\n\r\n![lists_preview](https://github.com/user-attachments/assets/1c714f17-825d-45c7-8112-cc3d25c51047)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"cebcf01d35b84308e1ca9eabed694864a9e39ed9","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Docs","release_note:skip","v9.0.0","Feature:Detection
Rules","docs","Team:Detections and Resp","Feature:Rule
Exceptions","APIDocs","Team:Detection Rule Management","Team:Detection
Engine","backport:version","v8.17.0","v8.16.2"],"number":202305,"url":"https://github.com/elastic/kibana/pull/202305","mergeCommit":{"message":"[DOCS]
Adds conceptual content to API docs (#202305)\n\n##
Summary\r\n\r\nResolves
https://github.com/elastic/security-docs-internal/issues/49.\r\n\r\nIn
order to retire asciidoc API docs, we first need to move over
any\r\nrelevant content from those docs to the API reference site. This
PR adds\r\nthe relevant conceptual information
from:\r\n\r\n-\r\nhttps://www.elastic.co/guide/en/security/master/exceptions-api-overview.html\r\n-\r\nhttps://www.elastic.co/guide/en/security/master/lists-api-overview.html\r\n-
https://www.elastic.co/guide/en/security/master/rule-api-overview.html\r\n\r\n###
Previews:\r\nBump previews expire after 30min, so I'm providing
screenshots below:\r\n\r\nDetections
preview:\r\n\r\n![detections_preview](https://github.com/user-attachments/assets/c47b9d85-b5d0-4a32-8668-dc1ae2215681)\r\n\r\nExceptions
preview:\r\n\r\n![exceptions_preview](https://github.com/user-attachments/assets/b3fe9139-2162-4c56-bba9-751dffa11cb4)\r\n\r\nLists
preview:\r\n\r\n![lists_preview](https://github.com/user-attachments/assets/1c714f17-825d-45c7-8112-cc3d25c51047)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"cebcf01d35b84308e1ca9eabed694864a9e39ed9"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202305","number":202305,"mergeCommit":{"message":"[DOCS]
Adds conceptual content to API docs (#202305)\n\n##
Summary\r\n\r\nResolves
https://github.com/elastic/security-docs-internal/issues/49.\r\n\r\nIn
order to retire asciidoc API docs, we first need to move over
any\r\nrelevant content from those docs to the API reference site. This
PR adds\r\nthe relevant conceptual information
from:\r\n\r\n-\r\nhttps://www.elastic.co/guide/en/security/master/exceptions-api-overview.html\r\n-\r\nhttps://www.elastic.co/guide/en/security/master/lists-api-overview.html\r\n-
https://www.elastic.co/guide/en/security/master/rule-api-overview.html\r\n\r\n###
Previews:\r\nBump previews expire after 30min, so I'm providing
screenshots below:\r\n\r\nDetections
preview:\r\n\r\n![detections_preview](https://github.com/user-attachments/assets/c47b9d85-b5d0-4a32-8668-dc1ae2215681)\r\n\r\nExceptions
preview:\r\n\r\n![exceptions_preview](https://github.com/user-attachments/assets/b3fe9139-2162-4c56-bba9-751dffa11cb4)\r\n\r\nLists
preview:\r\n\r\n![lists_preview](https://github.com/user-attachments/assets/1c714f17-825d-45c7-8112-cc3d25c51047)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"cebcf01d35b84308e1ca9eabed694864a9e39ed9"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-13 10:54:42 +01:00
Kibana Machine
2e175b9d3f
[8.16] [Search] Add ML as required plugin to Search Assistant (#204009) (#204035)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Search] Add ML as required plugin to Search Assistant
(#204009)](https://github.com/elastic/kibana/pull/204009)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Sander
Philipse","email":"94373878+sphilipse@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-12T14:20:09Z","message":"[Search]
Add ML as required plugin to Search Assistant (#204009)\n\n##
Summary\r\n\r\nThis adds the `ml` plugin as required to the Search
Assistant so that we\r\ndon't need users to navigate to an ml-based
plugin to initiate the\r\nknowledge
base.","sha":"16d45f503a886b13b9fbc04a8cd20bb7e0f14ece","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:Search","backport:prev-major"],"title":"[Search]
Add ML as required plugin to Search
Assistant","number":204009,"url":"https://github.com/elastic/kibana/pull/204009","mergeCommit":{"message":"[Search]
Add ML as required plugin to Search Assistant (#204009)\n\n##
Summary\r\n\r\nThis adds the `ml` plugin as required to the Search
Assistant so that we\r\ndon't need users to navigate to an ml-based
plugin to initiate the\r\nknowledge
base.","sha":"16d45f503a886b13b9fbc04a8cd20bb7e0f14ece"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/204009","number":204009,"mergeCommit":{"message":"[Search]
Add ML as required plugin to Search Assistant (#204009)\n\n##
Summary\r\n\r\nThis adds the `ml` plugin as required to the Search
Assistant so that we\r\ndon't need users to navigate to an ml-based
plugin to initiate the\r\nknowledge
base.","sha":"16d45f503a886b13b9fbc04a8cd20bb7e0f14ece"}}]}] BACKPORT-->

Co-authored-by: Sander Philipse <94373878+sphilipse@users.noreply.github.com>
2024-12-12 10:23:57 -06:00
Kibana Machine
53495ac1c2
[8.16] [Profiling] Preserve &#x60;kuery&#x60; filters when switching between Universal Profiling pages in new solution navigation (#203545) (#203985)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Profiling] Preserve &#x60;kuery&#x60; filters when switching between
Universal Profiling pages in new solution navigation
(#203545)](https://github.com/elastic/kibana/pull/203545)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Milosz
Marcinkowski","email":"38698566+miloszmarcinkowski@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-12T10:23:24Z","message":"[Profiling]
Preserve `kuery` filters when switching between Universal Profiling
pages in new solution navigation (#203545)\n\nCloses #197401\r\n\r\n###
Summary\r\n\r\nThis PR adds ability to preserve `kuery` filters when
switching between\r\npages in Universal Profiling using `solution
navigation`. The missing\r\nfilters were considered regression in
comparison to `classic\r\nnavigation`.\r\n\r\n###
Testing\r\n\r\nExpected behavior with **classic navigation** for
comparison:\r\n![Screen Recording 2024-12-10 at 14
40\r\n26](https://github.com/user-attachments/assets/db066c2e-3a47-4ac1-9860-f00364716c19)\r\n\r\nBefore
with **solution navigation**:\r\n![Screen Recording 2024-12-10 at 14
50\r\n21](https://github.com/user-attachments/assets/23481d63-37ee-4983-b8ef-5b3e6da2f55d)\r\n\r\nAfter
with **solution navigation**:\r\n![Screen Recording 2024-12-10 at 14
45\r\n30](https://github.com/user-attachments/assets/216b6c8d-bfb4-4f32-b4f8-40cf17f5847d)","sha":"881cdc142b3014f964a7b69fc8b29b85211fcbfa","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:prev-major","ci:project-deploy-observability"],"title":"[Profiling]
Preserve `kuery` filters when switching between Universal Profiling
pages in new solution
navigation","number":203545,"url":"https://github.com/elastic/kibana/pull/203545","mergeCommit":{"message":"[Profiling]
Preserve `kuery` filters when switching between Universal Profiling
pages in new solution navigation (#203545)\n\nCloses #197401\r\n\r\n###
Summary\r\n\r\nThis PR adds ability to preserve `kuery` filters when
switching between\r\npages in Universal Profiling using `solution
navigation`. The missing\r\nfilters were considered regression in
comparison to `classic\r\nnavigation`.\r\n\r\n###
Testing\r\n\r\nExpected behavior with **classic navigation** for
comparison:\r\n![Screen Recording 2024-12-10 at 14
40\r\n26](https://github.com/user-attachments/assets/db066c2e-3a47-4ac1-9860-f00364716c19)\r\n\r\nBefore
with **solution navigation**:\r\n![Screen Recording 2024-12-10 at 14
50\r\n21](https://github.com/user-attachments/assets/23481d63-37ee-4983-b8ef-5b3e6da2f55d)\r\n\r\nAfter
with **solution navigation**:\r\n![Screen Recording 2024-12-10 at 14
45\r\n30](https://github.com/user-attachments/assets/216b6c8d-bfb4-4f32-b4f8-40cf17f5847d)","sha":"881cdc142b3014f964a7b69fc8b29b85211fcbfa"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203545","number":203545,"mergeCommit":{"message":"[Profiling]
Preserve `kuery` filters when switching between Universal Profiling
pages in new solution navigation (#203545)\n\nCloses #197401\r\n\r\n###
Summary\r\n\r\nThis PR adds ability to preserve `kuery` filters when
switching between\r\npages in Universal Profiling using `solution
navigation`. The missing\r\nfilters were considered regression in
comparison to `classic\r\nnavigation`.\r\n\r\n###
Testing\r\n\r\nExpected behavior with **classic navigation** for
comparison:\r\n![Screen Recording 2024-12-10 at 14
40\r\n26](https://github.com/user-attachments/assets/db066c2e-3a47-4ac1-9860-f00364716c19)\r\n\r\nBefore
with **solution navigation**:\r\n![Screen Recording 2024-12-10 at 14
50\r\n21](https://github.com/user-attachments/assets/23481d63-37ee-4983-b8ef-5b3e6da2f55d)\r\n\r\nAfter
with **solution navigation**:\r\n![Screen Recording 2024-12-10 at 14
45\r\n30](https://github.com/user-attachments/assets/216b6c8d-bfb4-4f32-b4f8-40cf17f5847d)","sha":"881cdc142b3014f964a7b69fc8b29b85211fcbfa"}}]}]
BACKPORT-->

Co-authored-by: Milosz Marcinkowski <38698566+miloszmarcinkowski@users.noreply.github.com>
2024-12-12 06:20:09 -06:00
Devin W. Hurley
d2dd29eb85
[8.16] [Security Solution] Fixes exception item comment validation on newline chars \n (#202063) (#203709)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Fixes exception item comment validation on
newline chars `\n`
(#202063)](https://github.com/elastic/kibana/pull/202063)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Devin W.
Hurley","email":"devin.hurley@elastic.co"},"sourceCommit":{"committedDate":"2024-12-10T22:19:32Z","message":"[Security
Solution] Fixes exception item comment validation on newline chars `\\n`
(#202063)\n\n## Summary\r\n\r\nFixes:
https://github.com/elastic/kibana/issues/201820\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"35aeac104359eae81a233d0b8a9acaa97119d006","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","review","release_note:fix","v9.0.0","Team:Detections
and Resp","Feature:Rule
Exceptions","backport:version","v8.18.0","v8.16.2","v8.17.1"],"number":202063,"url":"https://github.com/elastic/kibana/pull/202063","mergeCommit":{"message":"[Security
Solution] Fixes exception item comment validation on newline chars `\\n`
(#202063)\n\n## Summary\r\n\r\nFixes:
https://github.com/elastic/kibana/issues/201820\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"35aeac104359eae81a233d0b8a9acaa97119d006"}},"sourceBranch":"main","suggestedTargetBranches":["8.x","8.16","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202063","number":202063,"mergeCommit":{"message":"[Security
Solution] Fixes exception item comment validation on newline chars `\\n`
(#202063)\n\n## Summary\r\n\r\nFixes:
https://github.com/elastic/kibana/issues/201820\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"35aeac104359eae81a233d0b8a9acaa97119d006"}},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.1","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-10 23:33:06 -05:00
Kibana Machine
6fa6e0ae7c
[8.16] [Synthetics] Monitors sync request, retry on huge payload !! (#202467) (#203666)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Synthetics] Monitors sync request, retry on huge payload !!
(#202467)](https://github.com/elastic/kibana/pull/202467)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"Shahzad","email":"shahzad31comp@gmail.com"},"sourceCommit":{"committedDate":"2024-12-03T12:04:42Z","message":"[Synthetics]
Monitors sync request, retry on huge payload !! (#202467)\n\n##
Summary\r\n\r\nMonitors sync request, retry on huge payload by splitting
the payload !!\r\n\r\nRequests will be tried recursively by splitting
payload in half
!!","sha":"839a927a94be5614f743c67c8384e2832c684de6","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-major","ci:project-deploy-observability","Team:obs-ux-management","v8.18.0","v8.16.3","v8.17.1"],"title":"[Synthetics]
Monitors sync request, retry on huge payload
!!","number":202467,"url":"https://github.com/elastic/kibana/pull/202467","mergeCommit":{"message":"[Synthetics]
Monitors sync request, retry on huge payload !! (#202467)\n\n##
Summary\r\n\r\nMonitors sync request, retry on huge payload by splitting
the payload !!\r\n\r\nRequests will be tried recursively by splitting
payload in half
!!","sha":"839a927a94be5614f743c67c8384e2832c684de6"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202467","number":202467,"mergeCommit":{"message":"[Synthetics]
Monitors sync request, retry on huge payload !! (#202467)\n\n##
Summary\r\n\r\nMonitors sync request, retry on huge payload by splitting
the payload !!\r\n\r\nRequests will be tried recursively by splitting
payload in half
!!","sha":"839a927a94be5614f743c67c8384e2832c684de6"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/202694","number":202694,"state":"MERGED","mergeCommit":{"sha":"39bfdec15636f5aa76687911e79e57bba323174b","message":"[8.x]
[Synthetics] Monitors sync request, retry on huge payload !! (#202467)
(#202694)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.x`:\n- [[Synthetics] Monitors sync request, retry on huge
payload
!!\n(#202467)](https://github.com/elastic/kibana/pull/202467)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT\n[{\"author\":{\"name\":\"Shahzad\",\"email\":\"shahzad31comp@gmail.com\"},\"sourceCommit\":{\"committedDate\":\"2024-12-03T12:04:42Z\",\"message\":\"[Synthetics]\nMonitors
sync request, retry on huge payload !!
(#202467)\\n\\n##\nSummary\\r\\n\\r\\nMonitors sync request, retry on
huge payload by splitting\nthe payload !!\\r\\n\\r\\nRequests will be
tried recursively by splitting\npayload in
half\n!!\",\"sha\":\"839a927a94be5614f743c67c8384e2832c684de6\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"v9.0.0\",\"ci:project-deploy-observability\",\"Team:obs-ux-management\",\"backport:version\",\"v8.18.0\"],\"title\":\"[Synthetics]\nMonitors
sync request, retry on huge
payload\n!!\",\"number\":202467,\"url\":\"https://github.com/elastic/kibana/pull/202467\",\"mergeCommit\":{\"message\":\"[Synthetics]\nMonitors
sync request, retry on huge payload !!
(#202467)\\n\\n##\nSummary\\r\\n\\r\\nMonitors sync request, retry on
huge payload by splitting\nthe payload !!\\r\\n\\r\\nRequests will be
tried recursively by splitting\npayload in
half\n!!\",\"sha\":\"839a927a94be5614f743c67c8384e2832c684de6\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.x\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/202467\",\"number\":202467,\"mergeCommit\":{\"message\":\"[Synthetics]\nMonitors
sync request, retry on huge payload !!
(#202467)\\n\\n##\nSummary\\r\\n\\r\\nMonitors sync request, retry on
huge payload by splitting\nthe payload !!\\r\\n\\r\\nRequests will be
tried recursively by splitting\npayload in
half\n!!\",\"sha\":\"839a927a94be5614f743c67c8384e2832c684de6\"}},{\"branch\":\"8.x\",\"label\":\"v8.18.0\",\"branchLabelMappingKey\":\"^v8.18.0$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\n---------\n\nCo-authored-by:
Shahzad
<shahzad31comp@gmail.com>"}},{"branch":"8.16","label":"v8.16.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

---------

Co-authored-by: Shahzad <shahzad31comp@gmail.com>
2024-12-10 14:40:20 -06:00
Kibana Machine
466cdf5347
[8.16] [APM][Profiling] Add x-elastic-internal-origin: Kibana header to agentless axios (#203590) (#203646)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM][Profiling] Add x-elastic-internal-origin: Kibana header to
agentless axios
(#203590)](https://github.com/elastic/kibana/pull/203590)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Carlos
Crespo","email":"crespocarlos@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-10T16:52:33Z","message":"[APM][Profiling]
Add x-elastic-internal-origin: Kibana header to agentless axios
(#203590)\n\ncloses
[203571](https://github.com/elastic/kibana/issues/203571)\r\n\r\n##
Summary\r\n\r\nKibana 9.0 requires all request made with `axios` have
the request\r\nheader `x-elastic-internal-origin` set to `Kibana` to
avoid appearing as\r\nan “external” integration. Any [requests without
it will be blocked
in\r\nKibana\r\n9.0](https://docs.google.com/document/d/1W7csjn6QYjrBjmbXMzSz_JUD4KcmWz8jTTtAWFwgUJM/edit?tab=t.0#heading=h.brxkig5phxcz)","sha":"cc6dc2ac2be199aea47477d17648a7336c33ff7d","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","v8.9.0","ci:project-deploy-observability","Team:obs-ux-infra_services"],"title":"[APM][Profiling]
Add x-elastic-internal-origin: Kibana header to agentless
axios","number":203590,"url":"https://github.com/elastic/kibana/pull/203590","mergeCommit":{"message":"[APM][Profiling]
Add x-elastic-internal-origin: Kibana header to agentless axios
(#203590)\n\ncloses
[203571](https://github.com/elastic/kibana/issues/203571)\r\n\r\n##
Summary\r\n\r\nKibana 9.0 requires all request made with `axios` have
the request\r\nheader `x-elastic-internal-origin` set to `Kibana` to
avoid appearing as\r\nan “external” integration. Any [requests without
it will be blocked
in\r\nKibana\r\n9.0](https://docs.google.com/document/d/1W7csjn6QYjrBjmbXMzSz_JUD4KcmWz8jTTtAWFwgUJM/edit?tab=t.0#heading=h.brxkig5phxcz)","sha":"cc6dc2ac2be199aea47477d17648a7336c33ff7d"}},"sourceBranch":"main","suggestedTargetBranches":["8.9"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203590","number":203590,"mergeCommit":{"message":"[APM][Profiling]
Add x-elastic-internal-origin: Kibana header to agentless axios
(#203590)\n\ncloses
[203571](https://github.com/elastic/kibana/issues/203571)\r\n\r\n##
Summary\r\n\r\nKibana 9.0 requires all request made with `axios` have
the request\r\nheader `x-elastic-internal-origin` set to `Kibana` to
avoid appearing as\r\nan “external” integration. Any [requests without
it will be blocked
in\r\nKibana\r\n9.0](https://docs.google.com/document/d/1W7csjn6QYjrBjmbXMzSz_JUD4KcmWz8jTTtAWFwgUJM/edit?tab=t.0#heading=h.brxkig5phxcz)","sha":"cc6dc2ac2be199aea47477d17648a7336c33ff7d"}},{"branch":"8.9","label":"v8.9.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Carlos Crespo <crespocarlos@users.noreply.github.com>
2024-12-10 12:44:07 -06:00
Kibana Machine
7bcb2627ea
[8.16] [Index management] Fix a11y focus order in index mappings page (#203361) (#203626)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Index management] Fix a11y focus order in index mappings page
(#203361)](https://github.com/elastic/kibana/pull/203361)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Saarika
Bhasi","email":"55930906+saarikabhasi@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-10T15:46:20Z","message":"[Index
management] Fix a11y focus order in index mappings page (#203361)\n\n##
Summary\r\n\r\nFix a11y focus order in index mappings page. When new
field is in\r\npending state and after closing edit pending field
Flyout.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/dbdf59e5-0ebd-47e0-9b5e-19ab1556e771\r\n\r\n###
Test instructions \r\n#### Adding a field\r\n1. Add new field in index
mappings page by navigating via tab \r\n2. Notice that type fields combo
box is focused\r\n3. Add field and click to Add field button again with
in pending fields\r\nform\r\n4. Notice focus is on new create field
form\r\n\r\n#### Edit field in pending state\r\n1. Add new fields via
tab key\r\n2. click on edit field \r\n3. Try closing, updating and
cancelling in the edit field flyout form\r\n4. Notice after edit field
flyout is closed, focus is on the pending\r\nfields
form","sha":"4b0c0e92693ad759e3ce45b4b259c9908ddd0d51","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Search","backport:prev-major","v8.16.0","v8.17.0"],"title":"[Index
management] Fix a11y focus order in index mappings page
","number":203361,"url":"https://github.com/elastic/kibana/pull/203361","mergeCommit":{"message":"[Index
management] Fix a11y focus order in index mappings page (#203361)\n\n##
Summary\r\n\r\nFix a11y focus order in index mappings page. When new
field is in\r\npending state and after closing edit pending field
Flyout.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/dbdf59e5-0ebd-47e0-9b5e-19ab1556e771\r\n\r\n###
Test instructions \r\n#### Adding a field\r\n1. Add new field in index
mappings page by navigating via tab \r\n2. Notice that type fields combo
box is focused\r\n3. Add field and click to Add field button again with
in pending fields\r\nform\r\n4. Notice focus is on new create field
form\r\n\r\n#### Edit field in pending state\r\n1. Add new fields via
tab key\r\n2. click on edit field \r\n3. Try closing, updating and
cancelling in the edit field flyout form\r\n4. Notice after edit field
flyout is closed, focus is on the pending\r\nfields
form","sha":"4b0c0e92693ad759e3ce45b4b259c9908ddd0d51"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203361","number":203361,"mergeCommit":{"message":"[Index
management] Fix a11y focus order in index mappings page (#203361)\n\n##
Summary\r\n\r\nFix a11y focus order in index mappings page. When new
field is in\r\npending state and after closing edit pending field
Flyout.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/dbdf59e5-0ebd-47e0-9b5e-19ab1556e771\r\n\r\n###
Test instructions \r\n#### Adding a field\r\n1. Add new field in index
mappings page by navigating via tab \r\n2. Notice that type fields combo
box is focused\r\n3. Add field and click to Add field button again with
in pending fields\r\nform\r\n4. Notice focus is on new create field
form\r\n\r\n#### Edit field in pending state\r\n1. Add new fields via
tab key\r\n2. click on edit field \r\n3. Try closing, updating and
cancelling in the edit field flyout form\r\n4. Notice after edit field
flyout is closed, focus is on the pending\r\nfields
form","sha":"4b0c0e92693ad759e3ce45b4b259c9908ddd0d51"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Saarika Bhasi <55930906+saarikabhasi@users.noreply.github.com>
2024-12-10 11:45:35 -06:00
Kibana Machine
371ae4de45
[8.16] [Observability Onboarding] Show existing data callout in Firehose flow (#203072) (#203565)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Observability Onboarding] Show existing data callout in Firehose
flow (#203072)](https://github.com/elastic/kibana/pull/203072)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Mykola
Harmash","email":"mykola.harmash@gmail.com"},"sourceCommit":{"committedDate":"2024-12-10T13:07:11Z","message":"[Observability
Onboarding] Show existing data callout in Firehose flow
(#203072)\n\nCloses
https://github.com/elastic/kibana/issues/190795\r\n\r\nAdds the logic to
display a message to the user in case there is already\r\nan existing
Firehose data in their cluster and to show the identified\r\nAWS
services in the \"Visualize Data\" step right away without waiting
for\r\nthe window to loose focus first.\r\n\r\n![CleanShot 2024-12-05 at
11
50\r\n59@2x](https://github.com/user-attachments/assets/00653bf0-f711-4029-9011-a34a160b4b9b)\r\n\r\n\r\n##
How to test\r\n\r\n1. Open the Firehose flow\r\n2. Make sure there is no
callout and the third step is not active\r\n3. Go to Kibana dev console
and ingest some dummy data (see examples\r\nbellow)\r\n4. Refresh the
page with the Firehose flow\r\n5. make sure there is a callout and the
third steps shows the identified\r\nAWS service\r\n\r\n```\r\nPOST
logs-aws.apigateway_logs-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:32:01.000Z\",\r\n \"some\": 111,\r\n
\"aws.kinesis.name\": \"Elastic-CloudwatchLogs\"\r\n}\r\n\r\nPOST
metrics-aws.apigateway_metrics-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:31:01.000Z\",\r\n \"agent\": {\r\n \"type\":
\"firehose\"\r\n },\r\n \"aws\": {\r\n \"cloudwatch\": {\r\n
\"namespace\": \"AWS/ApiGateway\"\r\n },\r\n \"exporter\": {\r\n
\"arn\":
\"arn:aws:cloudwatch:us-west-2:975050175126:metric-stream/Elastic-CloudwatchLogsAndMetricsToFirehose-CloudWatchMetricStream-Nhb4NhzPdL4J\"\r\n
}\r\n },\r\n \"cloud\": {\r\n \"account\": {\r\n \"id\":
\"975050175126\"\r\n },\r\n \"provider\": \"aws\",\r\n \"region\":
\"us-west-2\"\r\n
}\r\n}\r\n```","sha":"6cb14302a1a3fd157d1e1947493a0d0d5f4980f6","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","backport:prev-major","ci:project-deploy-observability","Team:obs-ux-logs","Feature:
Observability Onboarding"],"title":"[Observability Onboarding] Show
existing data callout in Firehose
flow","number":203072,"url":"https://github.com/elastic/kibana/pull/203072","mergeCommit":{"message":"[Observability
Onboarding] Show existing data callout in Firehose flow
(#203072)\n\nCloses
https://github.com/elastic/kibana/issues/190795\r\n\r\nAdds the logic to
display a message to the user in case there is already\r\nan existing
Firehose data in their cluster and to show the identified\r\nAWS
services in the \"Visualize Data\" step right away without waiting
for\r\nthe window to loose focus first.\r\n\r\n![CleanShot 2024-12-05 at
11
50\r\n59@2x](https://github.com/user-attachments/assets/00653bf0-f711-4029-9011-a34a160b4b9b)\r\n\r\n\r\n##
How to test\r\n\r\n1. Open the Firehose flow\r\n2. Make sure there is no
callout and the third step is not active\r\n3. Go to Kibana dev console
and ingest some dummy data (see examples\r\nbellow)\r\n4. Refresh the
page with the Firehose flow\r\n5. make sure there is a callout and the
third steps shows the identified\r\nAWS service\r\n\r\n```\r\nPOST
logs-aws.apigateway_logs-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:32:01.000Z\",\r\n \"some\": 111,\r\n
\"aws.kinesis.name\": \"Elastic-CloudwatchLogs\"\r\n}\r\n\r\nPOST
metrics-aws.apigateway_metrics-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:31:01.000Z\",\r\n \"agent\": {\r\n \"type\":
\"firehose\"\r\n },\r\n \"aws\": {\r\n \"cloudwatch\": {\r\n
\"namespace\": \"AWS/ApiGateway\"\r\n },\r\n \"exporter\": {\r\n
\"arn\":
\"arn:aws:cloudwatch:us-west-2:975050175126:metric-stream/Elastic-CloudwatchLogsAndMetricsToFirehose-CloudWatchMetricStream-Nhb4NhzPdL4J\"\r\n
}\r\n },\r\n \"cloud\": {\r\n \"account\": {\r\n \"id\":
\"975050175126\"\r\n },\r\n \"provider\": \"aws\",\r\n \"region\":
\"us-west-2\"\r\n
}\r\n}\r\n```","sha":"6cb14302a1a3fd157d1e1947493a0d0d5f4980f6"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203072","number":203072,"mergeCommit":{"message":"[Observability
Onboarding] Show existing data callout in Firehose flow
(#203072)\n\nCloses
https://github.com/elastic/kibana/issues/190795\r\n\r\nAdds the logic to
display a message to the user in case there is already\r\nan existing
Firehose data in their cluster and to show the identified\r\nAWS
services in the \"Visualize Data\" step right away without waiting
for\r\nthe window to loose focus first.\r\n\r\n![CleanShot 2024-12-05 at
11
50\r\n59@2x](https://github.com/user-attachments/assets/00653bf0-f711-4029-9011-a34a160b4b9b)\r\n\r\n\r\n##
How to test\r\n\r\n1. Open the Firehose flow\r\n2. Make sure there is no
callout and the third step is not active\r\n3. Go to Kibana dev console
and ingest some dummy data (see examples\r\nbellow)\r\n4. Refresh the
page with the Firehose flow\r\n5. make sure there is a callout and the
third steps shows the identified\r\nAWS service\r\n\r\n```\r\nPOST
logs-aws.apigateway_logs-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:32:01.000Z\",\r\n \"some\": 111,\r\n
\"aws.kinesis.name\": \"Elastic-CloudwatchLogs\"\r\n}\r\n\r\nPOST
metrics-aws.apigateway_metrics-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:31:01.000Z\",\r\n \"agent\": {\r\n \"type\":
\"firehose\"\r\n },\r\n \"aws\": {\r\n \"cloudwatch\": {\r\n
\"namespace\": \"AWS/ApiGateway\"\r\n },\r\n \"exporter\": {\r\n
\"arn\":
\"arn:aws:cloudwatch:us-west-2:975050175126:metric-stream/Elastic-CloudwatchLogsAndMetricsToFirehose-CloudWatchMetricStream-Nhb4NhzPdL4J\"\r\n
}\r\n },\r\n \"cloud\": {\r\n \"account\": {\r\n \"id\":
\"975050175126\"\r\n },\r\n \"provider\": \"aws\",\r\n \"region\":
\"us-west-2\"\r\n
}\r\n}\r\n```","sha":"6cb14302a1a3fd157d1e1947493a0d0d5f4980f6"}}]}]
BACKPORT-->

Co-authored-by: Mykola Harmash <mykola.harmash@gmail.com>
2024-12-10 09:02:16 -06:00
Jill Guyonnet
ebe4505b7a
[8.16] [Fleet] Fix disabling logic for "View Agents" button in agent activity (#202968) (#203386)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Fleet] Fix disabling logic for "View Agents" button in agent
activity (#202968)](https://github.com/elastic/kibana/pull/202968)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jill
Guyonnet","email":"jill.guyonnet@elastic.co"},"sourceCommit":{"committedDate":"2024-12-05T15:43:40Z","message":"[Fleet]
Fix disabling logic for \"View Agents\" button in agent activity
(#202968)\n\n## Summary\r\n\r\nI came across a small bug while testing
Fleet agents activity: the \"View\r\nAgents\" button is currently always
disabled for agent policy changes.\r\nThis is because agent policy data
has been modified to be fetched with\r\n`noAgentCount: true` by
default.\r\n\r\nAs getting the agent count involves a performance
concern, this PR fixes\r\nthe logic that disables the \"View Agents\"
button for policy change\r\nactions instead. The behaviour is not as
follows:\r\n* For tag updates actions: button not showed (no
change)\r\n* For policy change actions\r\n* If
`action.nbAgentsActionCreated > 10000`: disable button and
show\r\ntooltip explaining why it's disabled\r\n* Otherwise: enable
button and show tooltip saying that these are the\r\nagents _currently_
assigned to the policy (existing behaviour, known\r\nlimitation)\r\n*
For other types of actions (no change)\r\n* If
`action.nbAgentsActionCreated > 10000`: disable button and
show\r\ntooltip explaining why it's disabled\r\n * Otherwise: enable
button, no tooltip\r\n\r\n### Screenshots\r\n\r\n![Screenshot 2024-12-05
at 10
56\r\n40](https://github.com/user-attachments/assets/c5f4f868-cdac-4de7-a96d-f11afd803d87)\r\n\r\n![Screenshot
2024-12-05 at 10
57\r\n13](https://github.com/user-attachments/assets/91195e3a-4f5c-4a91-b9ff-ffb62818647f)\r\n\r\n![Screenshot
2024-12-05 at 10
57\r\n20](https://github.com/user-attachments/assets/9029b1b5-6983-4509-9b62-15e073546d42)","sha":"7caa33993a1a167ab30d72bfa0f1bec81a021376","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Fleet","v9.0.0","backport:prev-minor"],"number":202968,"url":"https://github.com/elastic/kibana/pull/202968","mergeCommit":{"message":"[Fleet]
Fix disabling logic for \"View Agents\" button in agent activity
(#202968)\n\n## Summary\r\n\r\nI came across a small bug while testing
Fleet agents activity: the \"View\r\nAgents\" button is currently always
disabled for agent policy changes.\r\nThis is because agent policy data
has been modified to be fetched with\r\n`noAgentCount: true` by
default.\r\n\r\nAs getting the agent count involves a performance
concern, this PR fixes\r\nthe logic that disables the \"View Agents\"
button for policy change\r\nactions instead. The behaviour is not as
follows:\r\n* For tag updates actions: button not showed (no
change)\r\n* For policy change actions\r\n* If
`action.nbAgentsActionCreated > 10000`: disable button and
show\r\ntooltip explaining why it's disabled\r\n* Otherwise: enable
button and show tooltip saying that these are the\r\nagents _currently_
assigned to the policy (existing behaviour, known\r\nlimitation)\r\n*
For other types of actions (no change)\r\n* If
`action.nbAgentsActionCreated > 10000`: disable button and
show\r\ntooltip explaining why it's disabled\r\n * Otherwise: enable
button, no tooltip\r\n\r\n### Screenshots\r\n\r\n![Screenshot 2024-12-05
at 10
56\r\n40](https://github.com/user-attachments/assets/c5f4f868-cdac-4de7-a96d-f11afd803d87)\r\n\r\n![Screenshot
2024-12-05 at 10
57\r\n13](https://github.com/user-attachments/assets/91195e3a-4f5c-4a91-b9ff-ffb62818647f)\r\n\r\n![Screenshot
2024-12-05 at 10
57\r\n20](https://github.com/user-attachments/assets/9029b1b5-6983-4509-9b62-15e073546d42)","sha":"7caa33993a1a167ab30d72bfa0f1bec81a021376"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202968","number":202968,"mergeCommit":{"message":"[Fleet]
Fix disabling logic for \"View Agents\" button in agent activity
(#202968)\n\n## Summary\r\n\r\nI came across a small bug while testing
Fleet agents activity: the \"View\r\nAgents\" button is currently always
disabled for agent policy changes.\r\nThis is because agent policy data
has been modified to be fetched with\r\n`noAgentCount: true` by
default.\r\n\r\nAs getting the agent count involves a performance
concern, this PR fixes\r\nthe logic that disables the \"View Agents\"
button for policy change\r\nactions instead. The behaviour is not as
follows:\r\n* For tag updates actions: button not showed (no
change)\r\n* For policy change actions\r\n* If
`action.nbAgentsActionCreated > 10000`: disable button and
show\r\ntooltip explaining why it's disabled\r\n* Otherwise: enable
button and show tooltip saying that these are the\r\nagents _currently_
assigned to the policy (existing behaviour, known\r\nlimitation)\r\n*
For other types of actions (no change)\r\n* If
`action.nbAgentsActionCreated > 10000`: disable button and
show\r\ntooltip explaining why it's disabled\r\n * Otherwise: enable
button, no tooltip\r\n\r\n### Screenshots\r\n\r\n![Screenshot 2024-12-05
at 10
56\r\n40](https://github.com/user-attachments/assets/c5f4f868-cdac-4de7-a96d-f11afd803d87)\r\n\r\n![Screenshot
2024-12-05 at 10
57\r\n13](https://github.com/user-attachments/assets/91195e3a-4f5c-4a91-b9ff-ffb62818647f)\r\n\r\n![Screenshot
2024-12-05 at 10
57\r\n20](https://github.com/user-attachments/assets/9029b1b5-6983-4509-9b62-15e073546d42)","sha":"7caa33993a1a167ab30d72bfa0f1bec81a021376"}}]}]
BACKPORT-->
2024-12-10 09:11:06 -05:00
Kibana Machine
4fa7135580
[8.16] [Session management] update cleanup query to allow partial search results for PIT query (#203413) (#203538)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Session management] update cleanup query to allow partial search
results for PIT query
(#203413)](https://github.com/elastic/kibana/pull/203413)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"Sid","email":"siddharthmantri1@gmail.com"},"sourceCommit":{"committedDate":"2024-12-10T11:01:57Z","message":"[Session
management] update cleanup query to allow partial search results for PIT
query (#203413)\n\nCloses
https://github.com/elastic/kibana/issues/203440\r\n\r\n###
Summary\r\nUpdate session cleanup task by adding the partial search
results flag to\r\nthe PIT query as well and not just the search
query.\r\n\r\n#### Notes \r\nIn the previous “fix”, the partial search
results flag was incorrectly\r\nadded to the search query that depended
on the PIT query. However, the\r\ncorrect way is to set the flag when we
openPointInTimeQuery which is\r\nthen used in the subsequent search
query\r\n\r\n### Release notes\r\nFixes error with opening point in time
query for session deletion by now\r\naccounting for partial
results.\r\n\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_node:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"91fec7a69b4db5c1d5835add148b86c3732b02a7","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Security","v9.0.0","Feature:Security/Session
Management","backport:prev-major"],"title":"[Session management] update
cleanup query to allow partial search results for PIT
query","number":203413,"url":"https://github.com/elastic/kibana/pull/203413","mergeCommit":{"message":"[Session
management] update cleanup query to allow partial search results for PIT
query (#203413)\n\nCloses
https://github.com/elastic/kibana/issues/203440\r\n\r\n###
Summary\r\nUpdate session cleanup task by adding the partial search
results flag to\r\nthe PIT query as well and not just the search
query.\r\n\r\n#### Notes \r\nIn the previous “fix”, the partial search
results flag was incorrectly\r\nadded to the search query that depended
on the PIT query. However, the\r\ncorrect way is to set the flag when we
openPointInTimeQuery which is\r\nthen used in the subsequent search
query\r\n\r\n### Release notes\r\nFixes error with opening point in time
query for session deletion by now\r\naccounting for partial
results.\r\n\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_node:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"91fec7a69b4db5c1d5835add148b86c3732b02a7"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203413","number":203413,"mergeCommit":{"message":"[Session
management] update cleanup query to allow partial search results for PIT
query (#203413)\n\nCloses
https://github.com/elastic/kibana/issues/203440\r\n\r\n###
Summary\r\nUpdate session cleanup task by adding the partial search
results flag to\r\nthe PIT query as well and not just the search
query.\r\n\r\n#### Notes \r\nIn the previous “fix”, the partial search
results flag was incorrectly\r\nadded to the search query that depended
on the PIT query. However, the\r\ncorrect way is to set the flag when we
openPointInTimeQuery which is\r\nthen used in the subsequent search
query\r\n\r\n### Release notes\r\nFixes error with opening point in time
query for session deletion by now\r\naccounting for partial
results.\r\n\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_node:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"91fec7a69b4db5c1d5835add148b86c3732b02a7"}}]}]
BACKPORT-->

Co-authored-by: Sid <siddharthmantri1@gmail.com>
2024-12-10 06:53:59 -06:00
Kibana Machine
bbd8c83cea
[8.16] [OBX-UX-MGMT][ALERTING] Fix APM rule error msg when KQL filter is invalid (#203096) (#203467)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[OBX-UX-MGMT][ALERTING] Fix APM rule error msg when KQL filter is
invalid (#203096)](https://github.com/elastic/kibana/pull/203096)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Faisal
Kanout","email":"faisal.kanout@elastic.co"},"sourceCommit":{"committedDate":"2024-12-05T16:07:58Z","message":"[OBX-UX-MGMT][ALERTING]
Fix APM rule error msg when KQL filter is invalid (#203096)\n\n##
Summary\r\n\r\nIt fixes https://github.com/elastic/kibana/issues/199273
by validating\r\nthe query before passing it to the preview
chart","sha":"f1109cfccedfd386263a00207df81c766cfaf6e4","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","v9.0.0","backport:prev-minor","backport:prev-major","ci:project-deploy-observability","Team:obs-ux-infra_services","Team:obs-ux-management","v8.18.0"],"title":"[OBX-UX-MGMT][ALERTING]
Fix APM rule error msg when KQL filter is
invalid","number":203096,"url":"https://github.com/elastic/kibana/pull/203096","mergeCommit":{"message":"[OBX-UX-MGMT][ALERTING]
Fix APM rule error msg when KQL filter is invalid (#203096)\n\n##
Summary\r\n\r\nIt fixes https://github.com/elastic/kibana/issues/199273
by validating\r\nthe query before passing it to the preview
chart","sha":"f1109cfccedfd386263a00207df81c766cfaf6e4"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203096","number":203096,"mergeCommit":{"message":"[OBX-UX-MGMT][ALERTING]
Fix APM rule error msg when KQL filter is invalid (#203096)\n\n##
Summary\r\n\r\nIt fixes https://github.com/elastic/kibana/issues/199273
by validating\r\nthe query before passing it to the preview
chart","sha":"f1109cfccedfd386263a00207df81c766cfaf6e4"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/203134","number":203134,"state":"MERGED","mergeCommit":{"sha":"a70bdf01cd8208c0f2358a98f5fcc5d10ac0a7d6","message":"[8.x]
[OBX-UX-MGMT][ALERTING] Fix APM rule error msg when KQL filter is
invalid (#203096) (#203134)\n\n# Backport\n\nThis will backport the
following commits from `main` to `8.x`:\n- [[OBX-UX-MGMT][ALERTING] Fix
APM rule error msg when KQL filter is\ninvalid
(#203096)](https://github.com/elastic/kibana/pull/203096)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Faisal\nKanout\",\"email\":\"faisal.kanout@elastic.co\"},\"sourceCommit\":{\"committedDate\":\"2024-12-05T16:07:58Z\",\"message\":\"[OBX-UX-MGMT][ALERTING]\nFix
APM rule error msg when KQL filter is invalid
(#203096)\\n\\n##\nSummary\\r\\n\\r\\nIt fixes
https://github.com/elastic/kibana/issues/199273\nby validating\\r\\nthe
query before passing it to the
preview\nchart\",\"sha\":\"f1109cfccedfd386263a00207df81c766cfaf6e4\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"bug\",\"release_note:fix\",\"v9.0.0\",\"backport:prev-minor\",\"ci:project-deploy-observability\",\"Team:obs-ux-infra_services\",\"Team:obs-ux-management\"],\"title\":\"[OBX-UX-MGMT][ALERTING]\nFix
APM rule error msg when KQL filter
is\ninvalid\",\"number\":203096,\"url\":\"https://github.com/elastic/kibana/pull/203096\",\"mergeCommit\":{\"message\":\"[OBX-UX-MGMT][ALERTING]\nFix
APM rule error msg when KQL filter is invalid
(#203096)\\n\\n##\nSummary\\r\\n\\r\\nIt fixes
https://github.com/elastic/kibana/issues/199273\nby validating\\r\\nthe
query before passing it to the
preview\nchart\",\"sha\":\"f1109cfccedfd386263a00207df81c766cfaf6e4\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/203096\",\"number\":203096,\"mergeCommit\":{\"message\":\"[OBX-UX-MGMT][ALERTING]\nFix
APM rule error msg when KQL filter is invalid
(#203096)\\n\\n##\nSummary\\r\\n\\r\\nIt fixes
https://github.com/elastic/kibana/issues/199273\nby validating\\r\\nthe
query before passing it to the
preview\nchart\",\"sha\":\"f1109cfccedfd386263a00207df81c766cfaf6e4\"}}]}]
BACKPORT-->\n\nCo-authored-by: Faisal Kanout
<faisal.kanout@elastic.co>"}}]}] BACKPORT-->

Co-authored-by: Faisal Kanout <faisal.kanout@elastic.co>
2024-12-09 11:59:20 -06:00
Kibana Machine
011e63083b
[8.16] [Search][Connectors] Disable setup options after creating configuration (#203374) (#203393)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Search][Connectors] Disable setup options after creating
configuration (#203374)](https://github.com/elastic/kibana/pull/203374)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"José Luis
González","email":"joseluisgj@gmail.com"},"sourceCommit":{"committedDate":"2024-12-09T11:15:54Z","message":"[Search][Connectors]
Disable setup options after creating configuration (#203374)\n\n##
Summary\r\n\r\nThis PR disables the _Elastic managed_ and _Self-managed_
setup options\r\nafter clicking the _Generate configuration_ button in
order to avoid the\r\nerror described in this
ticket\r\nhttps://github.com/elastic/search-team/issues/8665 when
changing\r\ndeployment method after generating the
config.\r\n\r\n![CleanShot 2024-12-09 at 10
32\r\n08@2x](https://github.com/user-attachments/assets/dafea7ac-5d50-44a0-a59d-03ee29043dec)","sha":"9b6af1c1887f83d821d6fc639715ad4be593fea7","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Search","backport:version","v8.17.0","v8.18.0","v8.16.2","v8.16.3"],"title":"[Search][Connectors]
Disable setup options after creating
configuration","number":203374,"url":"https://github.com/elastic/kibana/pull/203374","mergeCommit":{"message":"[Search][Connectors]
Disable setup options after creating configuration (#203374)\n\n##
Summary\r\n\r\nThis PR disables the _Elastic managed_ and _Self-managed_
setup options\r\nafter clicking the _Generate configuration_ button in
order to avoid the\r\nerror described in this
ticket\r\nhttps://github.com/elastic/search-team/issues/8665 when
changing\r\ndeployment method after generating the
config.\r\n\r\n![CleanShot 2024-12-09 at 10
32\r\n08@2x](https://github.com/user-attachments/assets/dafea7ac-5d50-44a0-a59d-03ee29043dec)","sha":"9b6af1c1887f83d821d6fc639715ad4be593fea7"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203374","number":203374,"mergeCommit":{"message":"[Search][Connectors]
Disable setup options after creating configuration (#203374)\n\n##
Summary\r\n\r\nThis PR disables the _Elastic managed_ and _Self-managed_
setup options\r\nafter clicking the _Generate configuration_ button in
order to avoid the\r\nerror described in this
ticket\r\nhttps://github.com/elastic/search-team/issues/8665 when
changing\r\ndeployment method after generating the
config.\r\n\r\n![CleanShot 2024-12-09 at 10
32\r\n08@2x](https://github.com/user-attachments/assets/dafea7ac-5d50-44a0-a59d-03ee29043dec)","sha":"9b6af1c1887f83d821d6fc639715ad4be593fea7"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: José Luis González <joseluisgj@gmail.com>
2024-12-09 07:18:16 -06:00
Julia Bardi
f3f31f43f9
[8.16][Fleet] fix schema validation to allow undefined/null (#202732) (#202879)
Backport https://github.com/elastic/kibana/pull/202732 to 8.16

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2024-12-09 10:48:32 +01:00
Kibana Machine
7ff64237f1
[8.16] [Observability Onboarding] Prevent showing duplcated AWS services in Firehose flow (#201613) (#202892)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Observability Onboarding] Prevent showing duplcated AWS services in
Firehose flow (#201613)](https://github.com/elastic/kibana/pull/201613)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Mykola
Harmash","email":"mykola.harmash@gmail.com"},"sourceCommit":{"committedDate":"2024-12-04T10:49:47Z","message":"[Observability
Onboarding] Prevent showing duplcated AWS services in Firehose flow
(#201613)\n\nCloses #200931 \r\n\r\nSwitched to using AWS service list
as a base to showing the detected\r\nservices in the UI instead of the
list of populated indices as multiple\r\nindices can be related to a
single service.\r\n\r\n### How to test\r\n\r\n1. Go to Firehose flow
`/observabilityOnboarding/firehose`\r\n2. Open Kibana dev tools in
another tab\r\n3. Ingest documents related into multiple data streams
which related to\r\na single AWS service:\r\n```\r\nPOST
logs-aws.apigateway_logs-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:32:01.000Z\",\r\n \"some\": 111,\r\n
\"aws.kinesis.name\": \"Elastic-CloudwatchLogs\"\r\n}\r\n\r\nPOST
metrics-aws.apigateway_metrics-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:31:01.000Z\",\r\n \"agent\": {\r\n \"type\":
\"firehose\"\r\n },\r\n \"aws\": {\r\n \"cloudwatch\": {\r\n
\"namespace\": \"AWS/ApiGateway\"\r\n },\r\n \"exporter\": {\r\n
\"arn\":
\"arn:aws:cloudwatch:us-west-2:975050175126:metric-stream/Elastic-CloudwatchLogsAndMetricsToFirehose-CloudWatchMetricStream-Nhb4NhzPdL4J\"\r\n
}\r\n },\r\n \"cloud\": {\r\n \"account\": {\r\n \"id\":
\"975050175126\"\r\n },\r\n \"provider\": \"aws\",\r\n \"region\":
\"us-west-2\"\r\n }\r\n}\r\n```\r\n4. Make sure you see only one entry
for the service appear in the\r\nFirehose
flow","sha":"a2fb9b736cd8007a0ba04b9b1051d7988c690b5b","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","backport:prev-major","ci:project-deploy-observability"],"title":"[Observability
Onboarding] Prevent showing duplcated AWS services in Firehose
flow","number":201613,"url":"https://github.com/elastic/kibana/pull/201613","mergeCommit":{"message":"[Observability
Onboarding] Prevent showing duplcated AWS services in Firehose flow
(#201613)\n\nCloses #200931 \r\n\r\nSwitched to using AWS service list
as a base to showing the detected\r\nservices in the UI instead of the
list of populated indices as multiple\r\nindices can be related to a
single service.\r\n\r\n### How to test\r\n\r\n1. Go to Firehose flow
`/observabilityOnboarding/firehose`\r\n2. Open Kibana dev tools in
another tab\r\n3. Ingest documents related into multiple data streams
which related to\r\na single AWS service:\r\n```\r\nPOST
logs-aws.apigateway_logs-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:32:01.000Z\",\r\n \"some\": 111,\r\n
\"aws.kinesis.name\": \"Elastic-CloudwatchLogs\"\r\n}\r\n\r\nPOST
metrics-aws.apigateway_metrics-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:31:01.000Z\",\r\n \"agent\": {\r\n \"type\":
\"firehose\"\r\n },\r\n \"aws\": {\r\n \"cloudwatch\": {\r\n
\"namespace\": \"AWS/ApiGateway\"\r\n },\r\n \"exporter\": {\r\n
\"arn\":
\"arn:aws:cloudwatch:us-west-2:975050175126:metric-stream/Elastic-CloudwatchLogsAndMetricsToFirehose-CloudWatchMetricStream-Nhb4NhzPdL4J\"\r\n
}\r\n },\r\n \"cloud\": {\r\n \"account\": {\r\n \"id\":
\"975050175126\"\r\n },\r\n \"provider\": \"aws\",\r\n \"region\":
\"us-west-2\"\r\n }\r\n}\r\n```\r\n4. Make sure you see only one entry
for the service appear in the\r\nFirehose
flow","sha":"a2fb9b736cd8007a0ba04b9b1051d7988c690b5b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201613","number":201613,"mergeCommit":{"message":"[Observability
Onboarding] Prevent showing duplcated AWS services in Firehose flow
(#201613)\n\nCloses #200931 \r\n\r\nSwitched to using AWS service list
as a base to showing the detected\r\nservices in the UI instead of the
list of populated indices as multiple\r\nindices can be related to a
single service.\r\n\r\n### How to test\r\n\r\n1. Go to Firehose flow
`/observabilityOnboarding/firehose`\r\n2. Open Kibana dev tools in
another tab\r\n3. Ingest documents related into multiple data streams
which related to\r\na single AWS service:\r\n```\r\nPOST
logs-aws.apigateway_logs-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:32:01.000Z\",\r\n \"some\": 111,\r\n
\"aws.kinesis.name\": \"Elastic-CloudwatchLogs\"\r\n}\r\n\r\nPOST
metrics-aws.apigateway_metrics-default/_doc\r\n{\r\n \"@timestamp\":
\"2024-11-25T13:31:01.000Z\",\r\n \"agent\": {\r\n \"type\":
\"firehose\"\r\n },\r\n \"aws\": {\r\n \"cloudwatch\": {\r\n
\"namespace\": \"AWS/ApiGateway\"\r\n },\r\n \"exporter\": {\r\n
\"arn\":
\"arn:aws:cloudwatch:us-west-2:975050175126:metric-stream/Elastic-CloudwatchLogsAndMetricsToFirehose-CloudWatchMetricStream-Nhb4NhzPdL4J\"\r\n
}\r\n },\r\n \"cloud\": {\r\n \"account\": {\r\n \"id\":
\"975050175126\"\r\n },\r\n \"provider\": \"aws\",\r\n \"region\":
\"us-west-2\"\r\n }\r\n}\r\n```\r\n4. Make sure you see only one entry
for the service appear in the\r\nFirehose
flow","sha":"a2fb9b736cd8007a0ba04b9b1051d7988c690b5b"}}]}] BACKPORT-->

Co-authored-by: Mykola Harmash <mykola.harmash@gmail.com>
2024-12-06 08:14:28 -06:00
Kibana Machine
62674ce4e7
[8.16] [Search][a11y] Fix table row screen reader error (#203136) (#203217)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Search][a11y] Fix table row screen reader error
(#203136)](https://github.com/elastic/kibana/pull/203136)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Navarone
Feekery","email":"13634519+navarone-feekery@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-06T09:10:26Z","message":"[Search][a11y]
Fix table row screen reader error (#203136)\n\n## Closes
https://github.com/elastic/kibana/issues/199113\r\n\r\nAllows errors in
the table row to be read by screen
readers.","sha":"1a9893bd6f7fd3fb94b08459e05921a00d86b8c5","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Search","backport:prev-major"],"title":"[Search][a11y]
Fix table row screen reader
error","number":203136,"url":"https://github.com/elastic/kibana/pull/203136","mergeCommit":{"message":"[Search][a11y]
Fix table row screen reader error (#203136)\n\n## Closes
https://github.com/elastic/kibana/issues/199113\r\n\r\nAllows errors in
the table row to be read by screen
readers.","sha":"1a9893bd6f7fd3fb94b08459e05921a00d86b8c5"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/203136","number":203136,"mergeCommit":{"message":"[Search][a11y]
Fix table row screen reader error (#203136)\n\n## Closes
https://github.com/elastic/kibana/issues/199113\r\n\r\nAllows errors in
the table row to be read by screen
readers.","sha":"1a9893bd6f7fd3fb94b08459e05921a00d86b8c5"}}]}]
BACKPORT-->

Co-authored-by: Navarone Feekery <13634519+navarone-feekery@users.noreply.github.com>
2024-12-06 05:09:03 -06:00
Kibana Machine
392068aa9b
[8.16] [Automatic Import] Restrict unsupported log formats (#202994) (#203174)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Automatic Import] Restrict unsupported log formats
(#202994)](https://github.com/elastic/kibana/pull/202994)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Bharat
Pasupula","email":"123897612+bhapas@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-05T19:18:08Z","message":"[Automatic
Import] Restrict unsupported log formats
(#202994)","sha":"178baa8468b3252bbebb6074baf0e59c9916d1a3","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:prev-major","Team:Security-Scalability","Feature:AutomaticImport"],"title":"[Automatic
Import] Restrict unsupported log
formats","number":202994,"url":"https://github.com/elastic/kibana/pull/202994","mergeCommit":{"message":"[Automatic
Import] Restrict unsupported log formats
(#202994)","sha":"178baa8468b3252bbebb6074baf0e59c9916d1a3"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202994","number":202994,"mergeCommit":{"message":"[Automatic
Import] Restrict unsupported log formats
(#202994)","sha":"178baa8468b3252bbebb6074baf0e59c9916d1a3"}}]}]
BACKPORT-->

Co-authored-by: Bharat Pasupula <123897612+bhapas@users.noreply.github.com>
2024-12-05 15:13:01 -06:00
Gonçalo Rica Pais da Silva
2dcd9bc848
[8.16] [Infra] Exclude frozen/cold data tiers from source queries (#201804) (#202924)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Infra] Exclude frozen/cold data tiers from source queries
(#201804)](https://github.com/elastic/kibana/pull/201804)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Gonçalo Rica Pais da
Silva","email":"goncalo.rica@elastic.co"},"sourceCommit":{"committedDate":"2024-12-03T18:23:13Z","message":"[Infra]
Exclude frozen/cold data tiers from source queries (#201804)\n\nCloses
#201568 \r\n\r\n## Summary\r\n\r\nAdds the exclude data tiers settings
to the\r\n`/api/metrics/source/hasData` and
`/api/metrics/source/{sourceId}`\r\nrequests. Also applies it to the
`getIndexStatus` API call.\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ac3b60ee907436aeee35fc59df7c30bcb9d66bc8","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","ci:project-deploy-observability","Team:obs-ux-infra_services","Team:obs-ux-management","v8.16.0"],"number":201804,"url":"https://github.com/elastic/kibana/pull/201804","mergeCommit":{"message":"[Infra]
Exclude frozen/cold data tiers from source queries (#201804)\n\nCloses
#201568 \r\n\r\n## Summary\r\n\r\nAdds the exclude data tiers settings
to the\r\n`/api/metrics/source/hasData` and
`/api/metrics/source/{sourceId}`\r\nrequests. Also applies it to the
`getIndexStatus` API call.\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ac3b60ee907436aeee35fc59df7c30bcb9d66bc8"}},"sourceBranch":"main","suggestedTargetBranches":["8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201804","number":201804,"mergeCommit":{"message":"[Infra]
Exclude frozen/cold data tiers from source queries (#201804)\n\nCloses
#201568 \r\n\r\n## Summary\r\n\r\nAdds the exclude data tiers settings
to the\r\n`/api/metrics/source/hasData` and
`/api/metrics/source/{sourceId}`\r\nrequests. Also applies it to the
`getIndexStatus` API call.\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ac3b60ee907436aeee35fc59df7c30bcb9d66bc8"}},{"branch":"8.16","label":"v8.16.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"url":"https://github.com/elastic/kibana/pull/202788","number":202788,"branch":"8.17","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/202789","number":202789,"branch":"8.x","state":"OPEN"}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: jennypavlova <dzheni.pavlova@elastic.co>
2024-12-05 13:55:51 -06:00
Milosz Marcinkowski
7d08846ecb
[8.16] [APM] Time spent by span type chart rendering problems (#202755) (#203075)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM] `Time spent by span type` chart rendering problems
(#202755)](https://github.com/elastic/kibana/pull/202755)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Milosz
Marcinkowski","email":"38698566+miloszmarcinkowski@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-05T10:08:05Z","message":"[APM]
`Time spent by span type` chart rendering problems (#202755)\n\nCloses
#202343\r\n\r\n## Summary\r\n\r\nThis PR solves the following issues in
`Time spent by span type` chart:\r\n- limits percentages between 0% and
100% (converts negative values to\r\n0%),\r\n\r\nbefore: \r\n<img
width=\"1134\" alt=\"Screenshot 2024-12-04 at 15 28
18\"\r\nsrc=\"https://github.com/user-attachments/assets/73285e87-3aef-4b2d-8e2a-7e3ec87680f3\">\r\nafter:\r\n<img
width=\"1135\" alt=\"Screenshot 2024-12-04 at 15 30
25\"\r\nsrc=\"https://github.com/user-attachments/assets/ae25cb85-d31a-490a-96c7-d4475952c734\">\r\n\r\n---\r\n\r\n-
rounds percentage to 8 decimal points to prevent scientific
notation\r\nin charts (poor readability)\r\n\r\nbefore: \r\n<img
width=\"1132\" alt=\"Screenshot 2024-12-04 at 14 36
54\"\r\nsrc=\"https://github.com/user-attachments/assets/528cda4b-ae84-4dbd-9d3f-88896e63a369\">\r\nafter:\r\n<img
width=\"1132\" alt=\"Screenshot 2024-12-04 at 14 35
39\"\r\nsrc=\"https://github.com/user-attachments/assets/9a0bdce9-6d66-4aaf-a131-18644eab1892\">","sha":"ab9de649fe32b22b4f847d190be73fbf229a1ac8","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","ci:project-deploy-observability","Team:obs-ux-infra_services"],"number":202755,"url":"https://github.com/elastic/kibana/pull/202755","mergeCommit":{"message":"[APM]
`Time spent by span type` chart rendering problems (#202755)\n\nCloses
#202343\r\n\r\n## Summary\r\n\r\nThis PR solves the following issues in
`Time spent by span type` chart:\r\n- limits percentages between 0% and
100% (converts negative values to\r\n0%),\r\n\r\nbefore: \r\n<img
width=\"1134\" alt=\"Screenshot 2024-12-04 at 15 28
18\"\r\nsrc=\"https://github.com/user-attachments/assets/73285e87-3aef-4b2d-8e2a-7e3ec87680f3\">\r\nafter:\r\n<img
width=\"1135\" alt=\"Screenshot 2024-12-04 at 15 30
25\"\r\nsrc=\"https://github.com/user-attachments/assets/ae25cb85-d31a-490a-96c7-d4475952c734\">\r\n\r\n---\r\n\r\n-
rounds percentage to 8 decimal points to prevent scientific
notation\r\nin charts (poor readability)\r\n\r\nbefore: \r\n<img
width=\"1132\" alt=\"Screenshot 2024-12-04 at 14 36
54\"\r\nsrc=\"https://github.com/user-attachments/assets/528cda4b-ae84-4dbd-9d3f-88896e63a369\">\r\nafter:\r\n<img
width=\"1132\" alt=\"Screenshot 2024-12-04 at 14 35
39\"\r\nsrc=\"https://github.com/user-attachments/assets/9a0bdce9-6d66-4aaf-a131-18644eab1892\">","sha":"ab9de649fe32b22b4f847d190be73fbf229a1ac8"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202755","number":202755,"mergeCommit":{"message":"[APM]
`Time spent by span type` chart rendering problems (#202755)\n\nCloses
#202343\r\n\r\n## Summary\r\n\r\nThis PR solves the following issues in
`Time spent by span type` chart:\r\n- limits percentages between 0% and
100% (converts negative values to\r\n0%),\r\n\r\nbefore: \r\n<img
width=\"1134\" alt=\"Screenshot 2024-12-04 at 15 28
18\"\r\nsrc=\"https://github.com/user-attachments/assets/73285e87-3aef-4b2d-8e2a-7e3ec87680f3\">\r\nafter:\r\n<img
width=\"1135\" alt=\"Screenshot 2024-12-04 at 15 30
25\"\r\nsrc=\"https://github.com/user-attachments/assets/ae25cb85-d31a-490a-96c7-d4475952c734\">\r\n\r\n---\r\n\r\n-
rounds percentage to 8 decimal points to prevent scientific
notation\r\nin charts (poor readability)\r\n\r\nbefore: \r\n<img
width=\"1132\" alt=\"Screenshot 2024-12-04 at 14 36
54\"\r\nsrc=\"https://github.com/user-attachments/assets/528cda4b-ae84-4dbd-9d3f-88896e63a369\">\r\nafter:\r\n<img
width=\"1132\" alt=\"Screenshot 2024-12-04 at 14 35
39\"\r\nsrc=\"https://github.com/user-attachments/assets/9a0bdce9-6d66-4aaf-a131-18644eab1892\">","sha":"ab9de649fe32b22b4f847d190be73fbf229a1ac8"}},{"url":"https://github.com/elastic/kibana/pull/203066","number":203066,"branch":"8.x","state":"OPEN"}]}]
BACKPORT-->
2024-12-05 11:22:32 -06:00
Kibana Machine
d3c6743f47
[8.16] Add prompt for connector configuration being in editable mode (#202463) (#203115)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Add prompt for connector configuration being in editable mode
(#202463)](https://github.com/elastic/kibana/pull/202463)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Artem
Shelkovnikov","email":"artem.shelkovnikov@elastic.co"},"sourceCommit":{"committedDate":"2024-12-05T14:44:16Z","message":"Add
prompt for connector configuration being in editable mode
(#202463)\n\n### Closes
https://github.com/elastic/search-team/issues/8547\r\n##
Summary\r\n\r\nUser creates connectors following a set of steps. During
configuration\r\nstep they are able to open configuration form and then
click \"Next\" -\r\nconfiguration will not be saved and user will not be
prompted about it.\r\n\r\nThis change adds a prompt for this step - if
the configuration is in\r\neditable state, the prompt will be shown. It
does not check that the\r\nform was edited, however, and it's on
purpose. I'm open to changing it\r\nto only prompt if any value changed,
but I feel that it's important to\r\nprompt even if no values were
entered, just to confirm with the user\r\nthat they want to move on
without specifying any
values.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/af768d6d-282d-4f67-a1d0-c54bcf1cb2d0\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] If a plugin
configuration key changed, check if it needs to be\r\nallowlisted in the
cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\r\nchanges have been approved by the breaking-change committee.
The\r\n`release_note:breaking` label should be applied in these
situations.\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] The PR description includes
the appropriate Release Notes section,\r\nand the correct
`release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"b8a41013ca6f13bea26dd78eaed990104741dc40","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-major"],"title":"Add
prompt for connector configuration being in editable
mode","number":202463,"url":"https://github.com/elastic/kibana/pull/202463","mergeCommit":{"message":"Add
prompt for connector configuration being in editable mode
(#202463)\n\n### Closes
https://github.com/elastic/search-team/issues/8547\r\n##
Summary\r\n\r\nUser creates connectors following a set of steps. During
configuration\r\nstep they are able to open configuration form and then
click \"Next\" -\r\nconfiguration will not be saved and user will not be
prompted about it.\r\n\r\nThis change adds a prompt for this step - if
the configuration is in\r\neditable state, the prompt will be shown. It
does not check that the\r\nform was edited, however, and it's on
purpose. I'm open to changing it\r\nto only prompt if any value changed,
but I feel that it's important to\r\nprompt even if no values were
entered, just to confirm with the user\r\nthat they want to move on
without specifying any
values.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/af768d6d-282d-4f67-a1d0-c54bcf1cb2d0\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] If a plugin
configuration key changed, check if it needs to be\r\nallowlisted in the
cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\r\nchanges have been approved by the breaking-change committee.
The\r\n`release_note:breaking` label should be applied in these
situations.\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] The PR description includes
the appropriate Release Notes section,\r\nand the correct
`release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"b8a41013ca6f13bea26dd78eaed990104741dc40"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202463","number":202463,"mergeCommit":{"message":"Add
prompt for connector configuration being in editable mode
(#202463)\n\n### Closes
https://github.com/elastic/search-team/issues/8547\r\n##
Summary\r\n\r\nUser creates connectors following a set of steps. During
configuration\r\nstep they are able to open configuration form and then
click \"Next\" -\r\nconfiguration will not be saved and user will not be
prompted about it.\r\n\r\nThis change adds a prompt for this step - if
the configuration is in\r\neditable state, the prompt will be shown. It
does not check that the\r\nform was edited, however, and it's on
purpose. I'm open to changing it\r\nto only prompt if any value changed,
but I feel that it's important to\r\nprompt even if no values were
entered, just to confirm with the user\r\nthat they want to move on
without specifying any
values.\r\n\r\n\r\nhttps://github.com/user-attachments/assets/af768d6d-282d-4f67-a1d0-c54bcf1cb2d0\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] If a plugin
configuration key changed, check if it needs to be\r\nallowlisted in the
cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\r\nchanges have been approved by the breaking-change committee.
The\r\n`release_note:breaking` label should be applied in these
situations.\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] The PR description includes
the appropriate Release Notes section,\r\nand the correct
`release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"b8a41013ca6f13bea26dd78eaed990104741dc40"}}]}]
BACKPORT-->

Co-authored-by: Artem Shelkovnikov <artem.shelkovnikov@elastic.co>
2024-12-05 10:42:21 -06:00
Kibana Machine
a93125e9ed
[8.16] [Synthetics] Fix overview trends for read-only user !! (#202914) (#202988)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Synthetics] Fix overview trends for read-only user !!
(#202914)](https://github.com/elastic/kibana/pull/202914)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"Shahzad","email":"shahzad31comp@gmail.com"},"sourceCommit":{"committedDate":"2024-12-04T17:24:07Z","message":"[Synthetics]
Fix overview trends for read-only user !! (#202914)\n\n##
Summary\r\n\r\nFix overview trends for read-only user , we wrongly
assume that this\r\n`POST` route needs write
permission.","sha":"16817cc44dd02fbb9b7e10e7d03871c299267dfb","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","ci:project-deploy-observability","Team:obs-ux-management","backport:version","v8.17.0","v8.18.0","v8.16.3"],"title":"[Synthetics]
Fix overview trends for read-only user
!!","number":202914,"url":"https://github.com/elastic/kibana/pull/202914","mergeCommit":{"message":"[Synthetics]
Fix overview trends for read-only user !! (#202914)\n\n##
Summary\r\n\r\nFix overview trends for read-only user , we wrongly
assume that this\r\n`POST` route needs write
permission.","sha":"16817cc44dd02fbb9b7e10e7d03871c299267dfb"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202914","number":202914,"mergeCommit":{"message":"[Synthetics]
Fix overview trends for read-only user !! (#202914)\n\n##
Summary\r\n\r\nFix overview trends for read-only user , we wrongly
assume that this\r\n`POST` route needs write
permission.","sha":"16817cc44dd02fbb9b7e10e7d03871c299267dfb"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

---------

Co-authored-by: Shahzad <shahzad31comp@gmail.com>
2024-12-05 08:20:50 -06:00
Kibana Machine
916efdcbdc
[8.16] [Discover] Support &quot;Inspect&quot; in saved search embeddables (#202947) (#203090)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Discover] Support &quot;Inspect&quot; in saved search embeddables
(#202947)](https://github.com/elastic/kibana/pull/202947)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Julia
Rechkunova","email":"julia.rechkunova@elastic.co"},"sourceCommit":{"committedDate":"2024-12-05T12:04:01Z","message":"[Discover]
Support \"Inspect\" in saved search embeddables (#202947)\n\n- Closes
https://github.com/elastic/kibana/issues/202301\r\n\r\n##
Summary\r\n\r\nThis PR enables \"Inspect\" option for saved search
Dashboard panels.\r\n\r\n<img width=\"1619\" alt=\"Screenshot 2024-12-04
at 16 02
33\"\r\nsrc=\"https://github.com/user-attachments/assets/a1eab597-4683-4069-b48f-b33b977db578\">\r\n<img
width=\"1620\" alt=\"Screenshot 2024-12-04 at 16 02
43\"\r\nsrc=\"https://github.com/user-attachments/assets/0dc734c3-f930-4397-9b68-69d959400924\">\r\n<img
width=\"1618\" alt=\"Screenshot 2024-12-04 at 16 03
03\"\r\nsrc=\"https://github.com/user-attachments/assets/460d8432-dc14-480e-b49d-81ab743815d2\">\r\n\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"3f0008ab5d38fd070b121e2e710ec6fff6efcd07","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:DataDiscovery","v8.16.0","backport:version","v8.17.0","v8.18.0"],"title":"[Discover]
Support \"Inspect\" in saved search
embeddables","number":202947,"url":"https://github.com/elastic/kibana/pull/202947","mergeCommit":{"message":"[Discover]
Support \"Inspect\" in saved search embeddables (#202947)\n\n- Closes
https://github.com/elastic/kibana/issues/202301\r\n\r\n##
Summary\r\n\r\nThis PR enables \"Inspect\" option for saved search
Dashboard panels.\r\n\r\n<img width=\"1619\" alt=\"Screenshot 2024-12-04
at 16 02
33\"\r\nsrc=\"https://github.com/user-attachments/assets/a1eab597-4683-4069-b48f-b33b977db578\">\r\n<img
width=\"1620\" alt=\"Screenshot 2024-12-04 at 16 02
43\"\r\nsrc=\"https://github.com/user-attachments/assets/0dc734c3-f930-4397-9b68-69d959400924\">\r\n<img
width=\"1618\" alt=\"Screenshot 2024-12-04 at 16 03
03\"\r\nsrc=\"https://github.com/user-attachments/assets/460d8432-dc14-480e-b49d-81ab743815d2\">\r\n\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"3f0008ab5d38fd070b121e2e710ec6fff6efcd07"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.17","8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202947","number":202947,"mergeCommit":{"message":"[Discover]
Support \"Inspect\" in saved search embeddables (#202947)\n\n- Closes
https://github.com/elastic/kibana/issues/202301\r\n\r\n##
Summary\r\n\r\nThis PR enables \"Inspect\" option for saved search
Dashboard panels.\r\n\r\n<img width=\"1619\" alt=\"Screenshot 2024-12-04
at 16 02
33\"\r\nsrc=\"https://github.com/user-attachments/assets/a1eab597-4683-4069-b48f-b33b977db578\">\r\n<img
width=\"1620\" alt=\"Screenshot 2024-12-04 at 16 02
43\"\r\nsrc=\"https://github.com/user-attachments/assets/0dc734c3-f930-4397-9b68-69d959400924\">\r\n<img
width=\"1618\" alt=\"Screenshot 2024-12-04 at 16 03
03\"\r\nsrc=\"https://github.com/user-attachments/assets/460d8432-dc14-480e-b49d-81ab743815d2\">\r\n\r\n\r\n\r\n###
Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"3f0008ab5d38fd070b121e2e710ec6fff6efcd07"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Julia Rechkunova <julia.rechkunova@elastic.co>
2024-12-05 07:56:51 -06:00
Janki Salvi
886f509607
[8.16] [ResponseOps][Cases] Fix edit cases settings privilege (#202053) (#202987)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ResponseOps][Cases] Fix edit cases settings privilege
(#202053)](https://github.com/elastic/kibana/pull/202053)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Janki
Salvi","email":"117571355+js-jankisalvi@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-04T15:55:08Z","message":"[ResponseOps][Cases]
Fix edit cases settings privilege (#202053)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/197650\r\n\r\nAlso fixes an
issue where user has `cases: all ` and `edit case\r\nsettings: false`,
user was able to edit settings.\r\n\r\nUsed `permissions.settings`
instead of `permissions.update` and\r\n`permissions.create` for custom
fields and templates.\r\n\r\n### How to test\r\n- Verify by creating a
user with different combinations of cases and\r\nedit case settings
privileges\r\n\r\n### Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"8e8ba53116c16cc9b9122de27415cf8519cc1863","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","Team:ResponseOps","v9.0.0","Feature:Cases","backport:prev-minor","v8.17.0","v8.18.0","v8.16.2"],"number":202053,"url":"https://github.com/elastic/kibana/pull/202053","mergeCommit":{"message":"[ResponseOps][Cases]
Fix edit cases settings privilege (#202053)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/197650\r\n\r\nAlso fixes an
issue where user has `cases: all ` and `edit case\r\nsettings: false`,
user was able to edit settings.\r\n\r\nUsed `permissions.settings`
instead of `permissions.update` and\r\n`permissions.create` for custom
fields and templates.\r\n\r\n### How to test\r\n- Verify by creating a
user with different combinations of cases and\r\nedit case settings
privileges\r\n\r\n### Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"8e8ba53116c16cc9b9122de27415cf8519cc1863"}},"sourceBranch":"main","suggestedTargetBranches":["8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202053","number":202053,"mergeCommit":{"message":"[ResponseOps][Cases]
Fix edit cases settings privilege (#202053)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/197650\r\n\r\nAlso fixes an
issue where user has `cases: all ` and `edit case\r\nsettings: false`,
user was able to edit settings.\r\n\r\nUsed `permissions.settings`
instead of `permissions.update` and\r\n`permissions.create` for custom
fields and templates.\r\n\r\n### How to test\r\n- Verify by creating a
user with different combinations of cases and\r\nedit case settings
privileges\r\n\r\n### Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"8e8ba53116c16cc9b9122de27415cf8519cc1863"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/202970","number":202970,"state":"OPEN"},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/202971","number":202971,"state":"OPEN"},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-05 07:07:19 -06:00
Dmitrii Shevchenko
e2eaf0c7d2
[8.16] [Security Solution] Skip isCustomized calculation when the feature flag is off (#201825) (#202751)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Skip isCustomized calculation when the feature
flag is off (#201825)](https://github.com/elastic/kibana/pull/201825)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Dmitrii
Shevchenko","email":"dmitrii.shevchenko@elastic.co"},"sourceCommit":{"committedDate":"2024-12-03T12:11:24Z","message":"[Security
Solution] Skip isCustomized calculation when the feature flag is off
(#201825)\n\n**Resolves:
https://github.com/elastic/kibana/issues/201632**\r\n\r\n## Summary
\r\n\r\nWhen the rule customization feature flag is disabled, we should
always\r\nreturn `isCustomized: false`, regardless of any changes
introduced to a\r\nrule. This ensures that we do not accidentally mark
prebuilt rules as\r\ncustomized in 8.16 with the feature flag off. For
more details, refer to\r\nthe related issue:
https://github.com/elastic/kibana/issues/201632\r\n\r\n### Main Changes
\r\n\r\n- The primary change in this PR is encapsulated in
the\r\n`calculateIsCustomized` function\r\n- Other changes involve
passing the feature flag to this function\r\n- Added integration tests
to cover all API CRUD operations that can be\r\nperformed with
rules","sha":"22911c1828f40160cf3a2935300aec18c11b56e9","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","v9.0.0","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v8.17.0","v8.18.0","v8.16.2"],"number":201825,"url":"https://github.com/elastic/kibana/pull/201825","mergeCommit":{"message":"[Security
Solution] Skip isCustomized calculation when the feature flag is off
(#201825)\n\n**Resolves:
https://github.com/elastic/kibana/issues/201632**\r\n\r\n## Summary
\r\n\r\nWhen the rule customization feature flag is disabled, we should
always\r\nreturn `isCustomized: false`, regardless of any changes
introduced to a\r\nrule. This ensures that we do not accidentally mark
prebuilt rules as\r\ncustomized in 8.16 with the feature flag off. For
more details, refer to\r\nthe related issue:
https://github.com/elastic/kibana/issues/201632\r\n\r\n### Main Changes
\r\n\r\n- The primary change in this PR is encapsulated in
the\r\n`calculateIsCustomized` function\r\n- Other changes involve
passing the feature flag to this function\r\n- Added integration tests
to cover all API CRUD operations that can be\r\nperformed with
rules","sha":"22911c1828f40160cf3a2935300aec18c11b56e9"}},"sourceBranch":"main","suggestedTargetBranches":["8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201825","number":201825,"mergeCommit":{"message":"[Security
Solution] Skip isCustomized calculation when the feature flag is off
(#201825)\n\n**Resolves:
https://github.com/elastic/kibana/issues/201632**\r\n\r\n## Summary
\r\n\r\nWhen the rule customization feature flag is disabled, we should
always\r\nreturn `isCustomized: false`, regardless of any changes
introduced to a\r\nrule. This ensures that we do not accidentally mark
prebuilt rules as\r\ncustomized in 8.16 with the feature flag off. For
more details, refer to\r\nthe related issue:
https://github.com/elastic/kibana/issues/201632\r\n\r\n### Main Changes
\r\n\r\n- The primary change in this PR is encapsulated in
the\r\n`calculateIsCustomized` function\r\n- Other changes involve
passing the feature flag to this function\r\n- Added integration tests
to cover all API CRUD operations that can be\r\nperformed with
rules","sha":"22911c1828f40160cf3a2935300aec18c11b56e9"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/202696","number":202696,"state":"MERGED","mergeCommit":{"sha":"487149e077e61341f81c871b74f36a9e20df67c0","message":"[8.17]
[Security Solution] Skip isCustomized calculation when the feature flag
is off (#201825) (#202696)\n\n# Backport\n\nThis will backport the
following commits from `main` to `8.17`:\n- [[Security Solution] Skip
isCustomized calculation when the feature\nflag is off
(#201825)](https://github.com/elastic/kibana/pull/201825)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Dmitrii\nShevchenko\",\"email\":\"dmitrii.shevchenko@elastic.co\"},\"sourceCommit\":{\"committedDate\":\"2024-12-03T12:11:24Z\",\"message\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag is
off\n(#201825)\\n\\n**Resolves:\nhttps://github.com/elastic/kibana/issues/201632**\\r\\n\\r\\n##
Summary\n\\r\\n\\r\\nWhen the rule customization feature flag is
disabled, we should\nalways\\r\\nreturn `isCustomized: false`,
regardless of any changes\nintroduced to a\\r\\nrule. This ensures that
we do not accidentally mark\nprebuilt rules as\\r\\ncustomized in 8.16
with the feature flag off. For\nmore details, refer to\\r\\nthe related
issue:\nhttps://github.com/elastic/kibana/issues/201632\\r\\n\\r\\n###
Main Changes\n\\r\\n\\r\\n- The primary change in this PR is
encapsulated in\nthe\\r\\n`calculateIsCustomized` function\\r\\n- Other
changes involve\npassing the feature flag to this function\\r\\n- Added
integration tests\nto cover all API CRUD operations that can
be\\r\\nperformed
with\nrules\",\"sha\":\"22911c1828f40160cf3a2935300aec18c11b56e9\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"bug\",\"release_note:skip\",\"v9.0.0\",\"Team:Detections\nand
Resp\",\"Team: SecuritySolution\",\"Team:Detection
Rule\nManagement\",\"Feature:Prebuilt
Detection\nRules\",\"backport:version\",\"v8.17.0\",\"v8.18.0\",\"v8.16.2\"],\"title\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag
is\noff\",\"number\":201825,\"url\":\"https://github.com/elastic/kibana/pull/201825\",\"mergeCommit\":{\"message\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag is
off\n(#201825)\\n\\n**Resolves:\nhttps://github.com/elastic/kibana/issues/201632**\\r\\n\\r\\n##
Summary\n\\r\\n\\r\\nWhen the rule customization feature flag is
disabled, we should\nalways\\r\\nreturn `isCustomized: false`,
regardless of any changes\nintroduced to a\\r\\nrule. This ensures that
we do not accidentally mark\nprebuilt rules as\\r\\ncustomized in 8.16
with the feature flag off. For\nmore details, refer to\\r\\nthe related
issue:\nhttps://github.com/elastic/kibana/issues/201632\\r\\n\\r\\n###
Main Changes\n\\r\\n\\r\\n- The primary change in this PR is
encapsulated in\nthe\\r\\n`calculateIsCustomized` function\\r\\n- Other
changes involve\npassing the feature flag to this function\\r\\n- Added
integration tests\nto cover all API CRUD operations that can
be\\r\\nperformed
with\nrules\",\"sha\":\"22911c1828f40160cf3a2935300aec18c11b56e9\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.17\",\"8.x\",\"8.16\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201825\",\"number\":201825,\"mergeCommit\":{\"message\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag is
off\n(#201825)\\n\\n**Resolves:\nhttps://github.com/elastic/kibana/issues/201632**\\r\\n\\r\\n##
Summary\n\\r\\n\\r\\nWhen the rule customization feature flag is
disabled, we should\nalways\\r\\nreturn `isCustomized: false`,
regardless of any changes\nintroduced to a\\r\\nrule. This ensures that
we do not accidentally mark\nprebuilt rules as\\r\\ncustomized in 8.16
with the feature flag off. For\nmore details, refer to\\r\\nthe related
issue:\nhttps://github.com/elastic/kibana/issues/201632\\r\\n\\r\\n###
Main Changes\n\\r\\n\\r\\n- The primary change in this PR is
encapsulated in\nthe\\r\\n`calculateIsCustomized` function\\r\\n- Other
changes involve\npassing the feature flag to this function\\r\\n- Added
integration tests\nto cover all API CRUD operations that can
be\\r\\nperformed
with\nrules\",\"sha\":\"22911c1828f40160cf3a2935300aec18c11b56e9\"}},{\"branch\":\"8.17\",\"label\":\"v8.17.0\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.x\",\"label\":\"v8.18.0\",\"branchLabelMappingKey\":\"^v8.18.0$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.16\",\"label\":\"v8.16.2\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\nCo-authored-by:
Dmitrii Shevchenko
<dmitrii.shevchenko@elastic.co>"}},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/202697","number":202697,"state":"MERGED","mergeCommit":{"sha":"8c9181aa48796a8467e38ad1431238ebaa78de7e","message":"[8.x]
[Security Solution] Skip isCustomized calculation when the feature flag
is off (#201825) (#202697)\n\n# Backport\n\nThis will backport the
following commits from `main` to `8.x`:\n- [[Security Solution] Skip
isCustomized calculation when the feature\nflag is off
(#201825)](https://github.com/elastic/kibana/pull/201825)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Dmitrii\nShevchenko\",\"email\":\"dmitrii.shevchenko@elastic.co\"},\"sourceCommit\":{\"committedDate\":\"2024-12-03T12:11:24Z\",\"message\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag is
off\n(#201825)\\n\\n**Resolves:\nhttps://github.com/elastic/kibana/issues/201632**\\r\\n\\r\\n##
Summary\n\\r\\n\\r\\nWhen the rule customization feature flag is
disabled, we should\nalways\\r\\nreturn `isCustomized: false`,
regardless of any changes\nintroduced to a\\r\\nrule. This ensures that
we do not accidentally mark\nprebuilt rules as\\r\\ncustomized in 8.16
with the feature flag off. For\nmore details, refer to\\r\\nthe related
issue:\nhttps://github.com/elastic/kibana/issues/201632\\r\\n\\r\\n###
Main Changes\n\\r\\n\\r\\n- The primary change in this PR is
encapsulated in\nthe\\r\\n`calculateIsCustomized` function\\r\\n- Other
changes involve\npassing the feature flag to this function\\r\\n- Added
integration tests\nto cover all API CRUD operations that can
be\\r\\nperformed
with\nrules\",\"sha\":\"22911c1828f40160cf3a2935300aec18c11b56e9\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"bug\",\"release_note:skip\",\"v9.0.0\",\"Team:Detections\nand
Resp\",\"Team: SecuritySolution\",\"Team:Detection
Rule\nManagement\",\"Feature:Prebuilt
Detection\nRules\",\"backport:version\",\"v8.17.0\",\"v8.18.0\",\"v8.16.2\"],\"title\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag
is\noff\",\"number\":201825,\"url\":\"https://github.com/elastic/kibana/pull/201825\",\"mergeCommit\":{\"message\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag is
off\n(#201825)\\n\\n**Resolves:\nhttps://github.com/elastic/kibana/issues/201632**\\r\\n\\r\\n##
Summary\n\\r\\n\\r\\nWhen the rule customization feature flag is
disabled, we should\nalways\\r\\nreturn `isCustomized: false`,
regardless of any changes\nintroduced to a\\r\\nrule. This ensures that
we do not accidentally mark\nprebuilt rules as\\r\\ncustomized in 8.16
with the feature flag off. For\nmore details, refer to\\r\\nthe related
issue:\nhttps://github.com/elastic/kibana/issues/201632\\r\\n\\r\\n###
Main Changes\n\\r\\n\\r\\n- The primary change in this PR is
encapsulated in\nthe\\r\\n`calculateIsCustomized` function\\r\\n- Other
changes involve\npassing the feature flag to this function\\r\\n- Added
integration tests\nto cover all API CRUD operations that can
be\\r\\nperformed
with\nrules\",\"sha\":\"22911c1828f40160cf3a2935300aec18c11b56e9\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.17\",\"8.x\",\"8.16\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201825\",\"number\":201825,\"mergeCommit\":{\"message\":\"[Security\nSolution]
Skip isCustomized calculation when the feature flag is
off\n(#201825)\\n\\n**Resolves:\nhttps://github.com/elastic/kibana/issues/201632**\\r\\n\\r\\n##
Summary\n\\r\\n\\r\\nWhen the rule customization feature flag is
disabled, we should\nalways\\r\\nreturn `isCustomized: false`,
regardless of any changes\nintroduced to a\\r\\nrule. This ensures that
we do not accidentally mark\nprebuilt rules as\\r\\ncustomized in 8.16
with the feature flag off. For\nmore details, refer to\\r\\nthe related
issue:\nhttps://github.com/elastic/kibana/issues/201632\\r\\n\\r\\n###
Main Changes\n\\r\\n\\r\\n- The primary change in this PR is
encapsulated in\nthe\\r\\n`calculateIsCustomized` function\\r\\n- Other
changes involve\npassing the feature flag to this function\\r\\n- Added
integration tests\nto cover all API CRUD operations that can
be\\r\\nperformed
with\nrules\",\"sha\":\"22911c1828f40160cf3a2935300aec18c11b56e9\"}},{\"branch\":\"8.17\",\"label\":\"v8.17.0\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.x\",\"label\":\"v8.18.0\",\"branchLabelMappingKey\":\"^v8.18.0$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.16\",\"label\":\"v8.16.2\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\nCo-authored-by:
Dmitrii Shevchenko
<dmitrii.shevchenko@elastic.co>"}},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-04 06:06:34 -06:00
Kibana Machine
22c13da776
[8.16] [Security Solution] Modify copy of the install rules title and message (#202226) (#202802)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Modify copy of the install rules title and
message (#202226)](https://github.com/elastic/kibana/pull/202226)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jacek
Kolezynski","email":"jacek.kolezynski@elastic.co"},"sourceCommit":{"committedDate":"2024-12-03T19:28:32Z","message":"[Security
Solution] Modify copy of the install rules title and message
(#202226)\n\n**Resolves: #200521**\n\n## Summary\n\nI am changing the
copy of the install rules title and message.\n\n#
BEFORE\n\n![image](https://github.com/user-attachments/assets/3d22a93a-3a37-4e1a-a187-eda609daf625)\n\n<img
width=\"873\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/5f4b82f1-094e-432f-9d25-c31042b7585b\">\n\n#
AFTER\n<img width=\"611\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/bf211743-2edc-4573-8d10-1c156000d875\">\n\n<img
width=\"791\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/612b90b1-290d-40e5-96eb-c88182f78673\">\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [X] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\n\n---------\n\nCo-authored-by:
Nastasha Solomon
<79124755+nastasha-solomon@users.noreply.github.com>","sha":"530b4d482c8b293bd7d36aeb698d75df401f349f","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v8.17.0","v8.18.0","v8.16.2"],"title":"[Security
Solution] Modify copy of the install rules title and
message","number":202226,"url":"https://github.com/elastic/kibana/pull/202226","mergeCommit":{"message":"[Security
Solution] Modify copy of the install rules title and message
(#202226)\n\n**Resolves: #200521**\n\n## Summary\n\nI am changing the
copy of the install rules title and message.\n\n#
BEFORE\n\n![image](https://github.com/user-attachments/assets/3d22a93a-3a37-4e1a-a187-eda609daf625)\n\n<img
width=\"873\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/5f4b82f1-094e-432f-9d25-c31042b7585b\">\n\n#
AFTER\n<img width=\"611\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/bf211743-2edc-4573-8d10-1c156000d875\">\n\n<img
width=\"791\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/612b90b1-290d-40e5-96eb-c88182f78673\">\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [X] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\n\n---------\n\nCo-authored-by:
Nastasha Solomon
<79124755+nastasha-solomon@users.noreply.github.com>","sha":"530b4d482c8b293bd7d36aeb698d75df401f349f"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202226","number":202226,"mergeCommit":{"message":"[Security
Solution] Modify copy of the install rules title and message
(#202226)\n\n**Resolves: #200521**\n\n## Summary\n\nI am changing the
copy of the install rules title and message.\n\n#
BEFORE\n\n![image](https://github.com/user-attachments/assets/3d22a93a-3a37-4e1a-a187-eda609daf625)\n\n<img
width=\"873\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/5f4b82f1-094e-432f-9d25-c31042b7585b\">\n\n#
AFTER\n<img width=\"611\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/bf211743-2edc-4573-8d10-1c156000d875\">\n\n<img
width=\"791\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/612b90b1-290d-40e5-96eb-c88182f78673\">\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [X] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\n\n---------\n\nCo-authored-by:
Nastasha Solomon
<79124755+nastasha-solomon@users.noreply.github.com>","sha":"530b4d482c8b293bd7d36aeb698d75df401f349f"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Jacek Kolezynski <jacek.kolezynski@elastic.co>
2024-12-03 15:19:30 -06:00
Kibana Machine
97ddbc6579
[8.16] [Search] a11y make index mappings search results accessible (#201455) (#202797)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Search] a11y make index mappings search results accessible
(#201455)](https://github.com/elastic/kibana/pull/201455)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Saarika
Bhasi","email":"55930906+saarikabhasi@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-03T18:37:51Z","message":"[Search]
a11y make index mappings search results accessible (#201455)\n\n##
Summary\r\nMake index mappings search results accessible so that it can
read by\r\nscreen reader when navigated by
keyboard","sha":"5480451f27639ad923fd04c865b56c58666473fd","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Search","v8.16.0","backport:version","v8.17.0","v8.16.1","v8.16.2"],"title":"[Search]
a11y make index mappings search results accessible
","number":201455,"url":"https://github.com/elastic/kibana/pull/201455","mergeCommit":{"message":"[Search]
a11y make index mappings search results accessible (#201455)\n\n##
Summary\r\nMake index mappings search results accessible so that it can
read by\r\nscreen reader when navigated by
keyboard","sha":"5480451f27639ad923fd04c865b56c58666473fd"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201455","number":201455,"mergeCommit":{"message":"[Search]
a11y make index mappings search results accessible (#201455)\n\n##
Summary\r\nMake index mappings search results accessible so that it can
read by\r\nscreen reader when navigated by
keyboard","sha":"5480451f27639ad923fd04c865b56c58666473fd"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Saarika Bhasi <55930906+saarikabhasi@users.noreply.github.com>
2024-12-03 14:33:45 -06:00
Patryk Kopyciński
0c0cb2afc3
[8.16] [Security KB] Fix setup KB (#201175) (#202392)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security KB] Fix setup KB
(#201175)](https://github.com/elastic/kibana/pull/201175)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Patryk
Kopyciński","email":"contact@patrykkopycinski.com"},"sourceCommit":{"committedDate":"2024-11-22T16:58:24Z","message":"[Security
KB] Fix setup KB (#201175)\n\n## Summary\r\n\r\nFix an issue with
auto-recovery of Knowledge Base setup. \r\n\r\nWhen the KB setup was
initialized on an undersized cluster, the model\r\nfailed to deploy
correctly. This resulted in the KB ending up in a\r\nbroken state,
repeatedly displaying the Setup KB
button.\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"1cb56d7196cf60b03cb539f32f6a466a17141e02","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","v9.0.0","ci:cloud-deploy","Team:Security
Generative
AI","backport:version","v8.17.0","v8.18.0","v8.16.2"],"number":201175,"url":"https://github.com/elastic/kibana/pull/201175","mergeCommit":{"message":"[Security
KB] Fix setup KB (#201175)\n\n## Summary\r\n\r\nFix an issue with
auto-recovery of Knowledge Base setup. \r\n\r\nWhen the KB setup was
initialized on an undersized cluster, the model\r\nfailed to deploy
correctly. This resulted in the KB ending up in a\r\nbroken state,
repeatedly displaying the Setup KB
button.\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"1cb56d7196cf60b03cb539f32f6a466a17141e02"}},"sourceBranch":"main","suggestedTargetBranches":["8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201175","number":201175,"mergeCommit":{"message":"[Security
KB] Fix setup KB (#201175)\n\n## Summary\r\n\r\nFix an issue with
auto-recovery of Knowledge Base setup. \r\n\r\nWhen the KB setup was
initialized on an undersized cluster, the model\r\nfailed to deploy
correctly. This resulted in the KB ending up in a\r\nbroken state,
repeatedly displaying the Setup KB
button.\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"1cb56d7196cf60b03cb539f32f6a466a17141e02"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/201436","number":201436,"state":"MERGED","mergeCommit":{"sha":"252fbfd3de5279b450358e8ffa5c87c58a8767c6","message":"[8.17]
[Security KB] Fix setup KB (#201175) (#201436)\n\n# Backport\n\nThis
will backport the following commits from `main` to `8.17`:\n- [[Security
KB] Fix setup
KB\n(#201175)](https://github.com/elastic/kibana/pull/201175)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Patryk\nKopyciński\",\"email\":\"contact@patrykkopycinski.com\"},\"sourceCommit\":{\"committedDate\":\"2024-11-22T16:58:24Z\",\"message\":\"[Security\nKB]
Fix setup KB (#201175)\\n\\n## Summary\\r\\n\\r\\nFix an issue
with\nauto-recovery of Knowledge Base setup. \\r\\n\\r\\nWhen the KB
setup was\ninitialized on an undersized cluster, the model\\r\\nfailed
to deploy\ncorrectly. This resulted in the KB ending up in a\\r\\nbroken
state,\nrepeatedly displaying the Setup
KB\nbutton.\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:
kibanamachine\n<42973632+kibanamachine@users.noreply.github.com>\",\"sha\":\"1cb56d7196cf60b03cb539f32f6a466a17141e02\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"bug\",\"release_note:fix\",\"v9.0.0\",\"ci:cloud-deploy\",\"Team:Security\nGenerative\nAI\",\"backport:version\",\"v8.17.0\",\"v8.18.0\",\"v8.16.2\"],\"title\":\"[Security\nKB]
Fix
setup\nKB\",\"number\":201175,\"url\":\"https://github.com/elastic/kibana/pull/201175\",\"mergeCommit\":{\"message\":\"[Security\nKB]
Fix setup KB (#201175)\\n\\n## Summary\\r\\n\\r\\nFix an issue
with\nauto-recovery of Knowledge Base setup. \\r\\n\\r\\nWhen the KB
setup was\ninitialized on an undersized cluster, the model\\r\\nfailed
to deploy\ncorrectly. This resulted in the KB ending up in a\\r\\nbroken
state,\nrepeatedly displaying the Setup
KB\nbutton.\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:
kibanamachine\n<42973632+kibanamachine@users.noreply.github.com>\",\"sha\":\"1cb56d7196cf60b03cb539f32f6a466a17141e02\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.17\",\"8.x\",\"8.16\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201175\",\"number\":201175,\"mergeCommit\":{\"message\":\"[Security\nKB]
Fix setup KB (#201175)\\n\\n## Summary\\r\\n\\r\\nFix an issue
with\nauto-recovery of Knowledge Base setup. \\r\\n\\r\\nWhen the KB
setup was\ninitialized on an undersized cluster, the model\\r\\nfailed
to deploy\ncorrectly. This resulted in the KB ending up in a\\r\\nbroken
state,\nrepeatedly displaying the Setup
KB\nbutton.\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:
kibanamachine\n<42973632+kibanamachine@users.noreply.github.com>\",\"sha\":\"1cb56d7196cf60b03cb539f32f6a466a17141e02\"}},{\"branch\":\"8.17\",\"label\":\"v8.17.0\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.x\",\"label\":\"v8.18.0\",\"branchLabelMappingKey\":\"^v8.18.0$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.16\",\"label\":\"v8.16.2\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\nCo-authored-by:
Patryk Kopyciński
<contact@patrykkopycinski.com>"}},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/201437","number":201437,"state":"MERGED","mergeCommit":{"sha":"7d6c034e25e6d9158edd6c5b1ab905265abb2bdb","message":"[8.x]
[Security KB] Fix setup KB (#201175) (#201437)\n\n# Backport\n\nThis
will backport the following commits from `main` to `8.x`:\n- [[Security
KB] Fix setup
KB\n(#201175)](https://github.com/elastic/kibana/pull/201175)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Patryk\nKopyciński\",\"email\":\"contact@patrykkopycinski.com\"},\"sourceCommit\":{\"committedDate\":\"2024-11-22T16:58:24Z\",\"message\":\"[Security\nKB]
Fix setup KB (#201175)\\n\\n## Summary\\r\\n\\r\\nFix an issue
with\nauto-recovery of Knowledge Base setup. \\r\\n\\r\\nWhen the KB
setup was\ninitialized on an undersized cluster, the model\\r\\nfailed
to deploy\ncorrectly. This resulted in the KB ending up in a\\r\\nbroken
state,\nrepeatedly displaying the Setup
KB\nbutton.\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:
kibanamachine\n<42973632+kibanamachine@users.noreply.github.com>\",\"sha\":\"1cb56d7196cf60b03cb539f32f6a466a17141e02\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"bug\",\"release_note:fix\",\"v9.0.0\",\"ci:cloud-deploy\",\"Team:Security\nGenerative\nAI\",\"backport:version\",\"v8.17.0\",\"v8.18.0\",\"v8.16.2\"],\"title\":\"[Security\nKB]
Fix
setup\nKB\",\"number\":201175,\"url\":\"https://github.com/elastic/kibana/pull/201175\",\"mergeCommit\":{\"message\":\"[Security\nKB]
Fix setup KB (#201175)\\n\\n## Summary\\r\\n\\r\\nFix an issue
with\nauto-recovery of Knowledge Base setup. \\r\\n\\r\\nWhen the KB
setup was\ninitialized on an undersized cluster, the model\\r\\nfailed
to deploy\ncorrectly. This resulted in the KB ending up in a\\r\\nbroken
state,\nrepeatedly displaying the Setup
KB\nbutton.\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:
kibanamachine\n<42973632+kibanamachine@users.noreply.github.com>\",\"sha\":\"1cb56d7196cf60b03cb539f32f6a466a17141e02\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.17\",\"8.x\",\"8.16\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201175\",\"number\":201175,\"mergeCommit\":{\"message\":\"[Security\nKB]
Fix setup KB (#201175)\\n\\n## Summary\\r\\n\\r\\nFix an issue
with\nauto-recovery of Knowledge Base setup. \\r\\n\\r\\nWhen the KB
setup was\ninitialized on an undersized cluster, the model\\r\\nfailed
to deploy\ncorrectly. This resulted in the KB ending up in a\\r\\nbroken
state,\nrepeatedly displaying the Setup
KB\nbutton.\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:
kibanamachine\n<42973632+kibanamachine@users.noreply.github.com>\",\"sha\":\"1cb56d7196cf60b03cb539f32f6a466a17141e02\"}},{\"branch\":\"8.17\",\"label\":\"v8.17.0\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.x\",\"label\":\"v8.18.0\",\"branchLabelMappingKey\":\"^v8.18.0$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"},{\"branch\":\"8.16\",\"label\":\"v8.16.2\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\nCo-authored-by:
Patryk Kopyciński
<contact@patrykkopycinski.com>"}},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2024-12-03 10:50:39 -07:00
Kibana Machine
7e0ea54b45
[8.16] [ML] Trained Models: Fixes spaces sync to retrieve 10000 models (#202712) (#202742)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ML] Trained Models: Fixes spaces sync to retrieve 10000 models
(#202712)](https://github.com/elastic/kibana/pull/202712)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Dima
Arnautov","email":"dmitrii.arnautov@elastic.co"},"sourceCommit":{"committedDate":"2024-12-03T14:29:28Z","message":"[ML]
Trained Models: Fixes spaces sync to retrieve 10000 models
(#202712)\n\n## Summary\r\n\r\nThe default page size for the
/trained_models API is 100. As a result,\r\nthe spaces sync task only
fetched the first 100 models, leaving the rest\r\nunassigned to spaces
and therefore invisible in the ML UI.\r\n\r\nThis PR increases the page
size to 10,000 to ensure all models are\r\nproperly assigned to Kibana
spaces.\r\n\r\n### Checklist\r\n\r\n- [ ] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"ded18eeaac82787ea57d4991bad28b983d43ad0c","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix",":ml","v9.0.0","Feature:3rd
Party
Models","Team:ML","backport:version","v8.17.0","v8.18.0","v8.16.2"],"title":"[ML]
Trained Models: Fixes spaces sync to retrieve 10000
models","number":202712,"url":"https://github.com/elastic/kibana/pull/202712","mergeCommit":{"message":"[ML]
Trained Models: Fixes spaces sync to retrieve 10000 models
(#202712)\n\n## Summary\r\n\r\nThe default page size for the
/trained_models API is 100. As a result,\r\nthe spaces sync task only
fetched the first 100 models, leaving the rest\r\nunassigned to spaces
and therefore invisible in the ML UI.\r\n\r\nThis PR increases the page
size to 10,000 to ensure all models are\r\nproperly assigned to Kibana
spaces.\r\n\r\n### Checklist\r\n\r\n- [ ] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"ded18eeaac82787ea57d4991bad28b983d43ad0c"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202712","number":202712,"mergeCommit":{"message":"[ML]
Trained Models: Fixes spaces sync to retrieve 10000 models
(#202712)\n\n## Summary\r\n\r\nThe default page size for the
/trained_models API is 100. As a result,\r\nthe spaces sync task only
fetched the first 100 models, leaving the rest\r\nunassigned to spaces
and therefore invisible in the ML UI.\r\n\r\nThis PR increases the page
size to 10,000 to ensure all models are\r\nproperly assigned to Kibana
spaces.\r\n\r\n### Checklist\r\n\r\n- [ ] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"ded18eeaac82787ea57d4991bad28b983d43ad0c"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Dima Arnautov <dmitrii.arnautov@elastic.co>
2024-12-03 10:26:06 -06:00
Lisa Cawley
e3f3ba382b
[8.16] [OpenAPI] Fix Serverless API base URL (#202373) (#202585)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[OpenAPI] Fix Serverless API base URL
(#202373)](https://github.com/elastic/kibana/pull/202373)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Lisa
Cawley","email":"lcawley@elastic.co"},"sourceCommit":{"committedDate":"2024-12-02T20:09:03Z","message":"[OpenAPI]
Fix Serverless API base URL
(#202373)","sha":"54370b209cb8f4fe02186355f69b8d2f4e4bc97e","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Docs","release_note:skip","v9.0.0","docs","ci:project-deploy-observability","Team:obs-ux-management","backport:version","v8.17.0","v8.18.0","v8.16.2"],"number":202373,"url":"https://github.com/elastic/kibana/pull/202373","mergeCommit":{"message":"[OpenAPI]
Fix Serverless API base URL
(#202373)","sha":"54370b209cb8f4fe02186355f69b8d2f4e4bc97e"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202373","number":202373,"mergeCommit":{"message":"[OpenAPI]
Fix Serverless API base URL
(#202373)","sha":"54370b209cb8f4fe02186355f69b8d2f4e4bc97e"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-03 10:51:27 -05:00
Kibana Machine
1bd20907d9
[8.16] [EDR Workflows] Fix wrong endpoint link (#202434) (#202701)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[EDR Workflows] Fix wrong endpoint link
(#202434)](https://github.com/elastic/kibana/pull/202434)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Tomasz
Ciecierski","email":"tomasz.ciecierski@elastic.co"},"sourceCommit":{"committedDate":"2024-12-03T12:25:30Z","message":"[EDR
Workflows] Fix wrong endpoint link
(#202434)","sha":"bcd442239f0eaa6ba84579ea19311ad29221c01f","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Defend
Workflows","ci:cloud-deploy","ci:project-deploy-security","v8.16.0","backport:version","v8.17.0","v8.18.0"],"title":"[EDR
Workflows] Fix wrong endpoint
link","number":202434,"url":"https://github.com/elastic/kibana/pull/202434","mergeCommit":{"message":"[EDR
Workflows] Fix wrong endpoint link
(#202434)","sha":"bcd442239f0eaa6ba84579ea19311ad29221c01f"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.17","8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202434","number":202434,"mergeCommit":{"message":"[EDR
Workflows] Fix wrong endpoint link
(#202434)","sha":"bcd442239f0eaa6ba84579ea19311ad29221c01f"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Tomasz Ciecierski <tomasz.ciecierski@elastic.co>
2024-12-03 08:25:26 -06:00
Kibana Machine
a98da9bf50
[8.16] Exclude unrecognized tasks from the task manager aggregate API (#202163) (#202681)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Exclude unrecognized tasks from the task manager aggregate API
(#202163)](https://github.com/elastic/kibana/pull/202163)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Mike
Côté","email":"mikecote@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-03T11:21:49Z","message":"Exclude
unrecognized tasks from the task manager aggregate API (#202163)\n\nIn
this PR, I'm removing tasks with a status `unrecognized`
from\r\nreturning on any `taskStore.aggregate` calls. Without this, we
had\r\nunrecognized recurring tasks that were still part of the task
manager\r\ncapacity calculation
under\r\n`assumedAverageRecurringRequiredThroughputPerMinutePerKibana`.\r\n\r\n##
To Verify\r\n1. Create a few ES Query alerting rules running every
1s\r\n2. Capture the task manager health API report
via\r\n`/api/task_manager/_health`\r\n3. Apply the following diff to
mark es query alerting tasks as\r\nunrecognized\r\n```\r\ndiff --git
a/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts
b/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\nindex
1988eebc21a..8d649f4c6a5 100644\r\n---
a/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\n+++
b/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\n@@
-10,5 +10,5 @@ import { getRuleType } from './rule_type';\r\n\r\n export
function register(params: RegisterRuleTypesParams, isServerless:
boolean) {\r\n const { alerting, core } = params;\r\n-
alerting.registerType(getRuleType(core, isServerless));\r\n+ //
alerting.registerType(getRuleType(core, isServerless));\r\n }\r\ndiff
--git
a/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts
b/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\nindex
e28d5221e72..dbfc1bbd135 100644\r\n---
a/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\n+++
b/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\n@@
-33,6 +33,11 @@ export async function
scheduleMarkRemovedTasksAsUnrecognizedDefinition(\r\n state: {},\r\n
params: {},\r\n });\r\n+ try {\r\n+ await
taskScheduling.runSoon(TASK_ID);\r\n+ } catch (e) {\r\n+ // Ignore\r\n+
}\r\n } catch (e) {\r\n logger.error(`Error scheduling ${TASK_ID} task,
received ${e.message}`);\r\n }\r\ndiff --git
a/x-pack/plugins/task_manager/server/task_type_dictionary.ts
b/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\nindex
e0b28eccea3..142c07bb507 100644\r\n---
a/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\n+++
b/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\n@@ -32,6
+32,8 @@ export const REMOVED_TYPES: string[] = [\r\n\r\n
'cleanup_failed_action_executions',\r\n 'reports:monitor',\r\n+\r\n+
'alerting:.es-query',\r\n ];\r\n\r\n /**\r\n```\r\n5. Capture the task
manager health API report again via\r\n`/api/task_manager/_health`\r\n6.
Notice the number dropped
for\r\n`capacity_estimation.value.observed.avg_recurring_required_throughput_per_minute`","sha":"3b670980431da414535940aeeb0088d2ae7ff89c","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Feature:Task
Manager","Team:ResponseOps","v9.0.0","backport:version","v8.17.0","v8.18.0","v8.16.2"],"title":"Exclude
unrecognized tasks from the task manager aggregate
API","number":202163,"url":"https://github.com/elastic/kibana/pull/202163","mergeCommit":{"message":"Exclude
unrecognized tasks from the task manager aggregate API (#202163)\n\nIn
this PR, I'm removing tasks with a status `unrecognized`
from\r\nreturning on any `taskStore.aggregate` calls. Without this, we
had\r\nunrecognized recurring tasks that were still part of the task
manager\r\ncapacity calculation
under\r\n`assumedAverageRecurringRequiredThroughputPerMinutePerKibana`.\r\n\r\n##
To Verify\r\n1. Create a few ES Query alerting rules running every
1s\r\n2. Capture the task manager health API report
via\r\n`/api/task_manager/_health`\r\n3. Apply the following diff to
mark es query alerting tasks as\r\nunrecognized\r\n```\r\ndiff --git
a/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts
b/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\nindex
1988eebc21a..8d649f4c6a5 100644\r\n---
a/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\n+++
b/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\n@@
-10,5 +10,5 @@ import { getRuleType } from './rule_type';\r\n\r\n export
function register(params: RegisterRuleTypesParams, isServerless:
boolean) {\r\n const { alerting, core } = params;\r\n-
alerting.registerType(getRuleType(core, isServerless));\r\n+ //
alerting.registerType(getRuleType(core, isServerless));\r\n }\r\ndiff
--git
a/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts
b/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\nindex
e28d5221e72..dbfc1bbd135 100644\r\n---
a/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\n+++
b/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\n@@
-33,6 +33,11 @@ export async function
scheduleMarkRemovedTasksAsUnrecognizedDefinition(\r\n state: {},\r\n
params: {},\r\n });\r\n+ try {\r\n+ await
taskScheduling.runSoon(TASK_ID);\r\n+ } catch (e) {\r\n+ // Ignore\r\n+
}\r\n } catch (e) {\r\n logger.error(`Error scheduling ${TASK_ID} task,
received ${e.message}`);\r\n }\r\ndiff --git
a/x-pack/plugins/task_manager/server/task_type_dictionary.ts
b/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\nindex
e0b28eccea3..142c07bb507 100644\r\n---
a/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\n+++
b/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\n@@ -32,6
+32,8 @@ export const REMOVED_TYPES: string[] = [\r\n\r\n
'cleanup_failed_action_executions',\r\n 'reports:monitor',\r\n+\r\n+
'alerting:.es-query',\r\n ];\r\n\r\n /**\r\n```\r\n5. Capture the task
manager health API report again via\r\n`/api/task_manager/_health`\r\n6.
Notice the number dropped
for\r\n`capacity_estimation.value.observed.avg_recurring_required_throughput_per_minute`","sha":"3b670980431da414535940aeeb0088d2ae7ff89c"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202163","number":202163,"mergeCommit":{"message":"Exclude
unrecognized tasks from the task manager aggregate API (#202163)\n\nIn
this PR, I'm removing tasks with a status `unrecognized`
from\r\nreturning on any `taskStore.aggregate` calls. Without this, we
had\r\nunrecognized recurring tasks that were still part of the task
manager\r\ncapacity calculation
under\r\n`assumedAverageRecurringRequiredThroughputPerMinutePerKibana`.\r\n\r\n##
To Verify\r\n1. Create a few ES Query alerting rules running every
1s\r\n2. Capture the task manager health API report
via\r\n`/api/task_manager/_health`\r\n3. Apply the following diff to
mark es query alerting tasks as\r\nunrecognized\r\n```\r\ndiff --git
a/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts
b/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\nindex
1988eebc21a..8d649f4c6a5 100644\r\n---
a/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\n+++
b/x-pack/plugins/stack_alerts/server/rule_types/es_query/index.ts\r\n@@
-10,5 +10,5 @@ import { getRuleType } from './rule_type';\r\n\r\n export
function register(params: RegisterRuleTypesParams, isServerless:
boolean) {\r\n const { alerting, core } = params;\r\n-
alerting.registerType(getRuleType(core, isServerless));\r\n+ //
alerting.registerType(getRuleType(core, isServerless));\r\n }\r\ndiff
--git
a/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts
b/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\nindex
e28d5221e72..dbfc1bbd135 100644\r\n---
a/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\n+++
b/x-pack/plugins/task_manager/server/removed_tasks/mark_removed_tasks_as_unrecognized.ts\r\n@@
-33,6 +33,11 @@ export async function
scheduleMarkRemovedTasksAsUnrecognizedDefinition(\r\n state: {},\r\n
params: {},\r\n });\r\n+ try {\r\n+ await
taskScheduling.runSoon(TASK_ID);\r\n+ } catch (e) {\r\n+ // Ignore\r\n+
}\r\n } catch (e) {\r\n logger.error(`Error scheduling ${TASK_ID} task,
received ${e.message}`);\r\n }\r\ndiff --git
a/x-pack/plugins/task_manager/server/task_type_dictionary.ts
b/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\nindex
e0b28eccea3..142c07bb507 100644\r\n---
a/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\n+++
b/x-pack/plugins/task_manager/server/task_type_dictionary.ts\r\n@@ -32,6
+32,8 @@ export const REMOVED_TYPES: string[] = [\r\n\r\n
'cleanup_failed_action_executions',\r\n 'reports:monitor',\r\n+\r\n+
'alerting:.es-query',\r\n ];\r\n\r\n /**\r\n```\r\n5. Capture the task
manager health API report again via\r\n`/api/task_manager/_health`\r\n6.
Notice the number dropped
for\r\n`capacity_estimation.value.observed.avg_recurring_required_throughput_per_minute`","sha":"3b670980431da414535940aeeb0088d2ae7ff89c"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Mike Côté <mikecote@users.noreply.github.com>
2024-12-03 07:19:11 -06:00
Kibana Machine
eb1381bebd
[8.16] Expose values of certain task manager configuration settings in the telemetry (#202511) (#202684)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Expose values of certain task manager configuration settings in the
telemetry (#202511)](https://github.com/elastic/kibana/pull/202511)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Mike
Côté","email":"mikecote@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-03T11:22:23Z","message":"Expose
values of certain task manager configuration settings in the telemetry
(#202511)\n\nIn this PR, I'm adding some settings to the `exposeToUsage`
variable\r\nwhich allows the values of these settings to be reported via
telemetry.\r\nThis way we can see what values, ratios, etc a certain
setting has.\r\n\r\nSettings to report values instead of
`[redacted]`:\r\n- `xpack.task_manager.claim_strategy`\r\n-
`xpack.task_manager.discovery.active_nodes_lookback`\r\n-
`xpack.task_manager.unsafe.exclude_task_types`","sha":"bca48508144714b678772541a22a6e5f9210f4a5","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Feature:Task
Manager","Team:ResponseOps","v9.0.0","backport:version","v8.17.0","v8.18.0","v8.16.2"],"title":"Expose
values of certain task manager configuration settings in the
telemetry","number":202511,"url":"https://github.com/elastic/kibana/pull/202511","mergeCommit":{"message":"Expose
values of certain task manager configuration settings in the telemetry
(#202511)\n\nIn this PR, I'm adding some settings to the `exposeToUsage`
variable\r\nwhich allows the values of these settings to be reported via
telemetry.\r\nThis way we can see what values, ratios, etc a certain
setting has.\r\n\r\nSettings to report values instead of
`[redacted]`:\r\n- `xpack.task_manager.claim_strategy`\r\n-
`xpack.task_manager.discovery.active_nodes_lookback`\r\n-
`xpack.task_manager.unsafe.exclude_task_types`","sha":"bca48508144714b678772541a22a6e5f9210f4a5"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202511","number":202511,"mergeCommit":{"message":"Expose
values of certain task manager configuration settings in the telemetry
(#202511)\n\nIn this PR, I'm adding some settings to the `exposeToUsage`
variable\r\nwhich allows the values of these settings to be reported via
telemetry.\r\nThis way we can see what values, ratios, etc a certain
setting has.\r\n\r\nSettings to report values instead of
`[redacted]`:\r\n- `xpack.task_manager.claim_strategy`\r\n-
`xpack.task_manager.discovery.active_nodes_lookback`\r\n-
`xpack.task_manager.unsafe.exclude_task_types`","sha":"bca48508144714b678772541a22a6e5f9210f4a5"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Mike Côté <mikecote@users.noreply.github.com>
2024-12-03 07:16:09 -06:00
Agustina Nahir Ruidiaz
048f45474c
[8.16] [Security Solution] [Onboarding] t1_analyst role blocked from interacting with cards due to missing integration privileges (#202413) (#202643)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] [Onboarding] t1_analyst role blocked from
interacting with cards due to missing integration privileges
(#202413)](https://github.com/elastic/kibana/pull/202413)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Agustina Nahir
Ruidiaz","email":"61565784+agusruidiazgd@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-02T14:23:56Z","message":"[Security
Solution] [Onboarding] t1_analyst role blocked from interacting with
cards due to missing integration privileges (#202413)\n\n##
Summary\r\n\r\nThis PR temporarily fixes the #201799 issue for
Serverless.\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/604128cb-49b0-4a93-9a15-2a5a0c511883\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"3daaaa5b8c3e3a47b1e29f75df301b42d89caa87","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat
Hunting:Explore","ci:cloud-deploy","backport:version","v8.18.0"],"number":202413,"url":"https://github.com/elastic/kibana/pull/202413","mergeCommit":{"message":"[Security
Solution] [Onboarding] t1_analyst role blocked from interacting with
cards due to missing integration privileges (#202413)\n\n##
Summary\r\n\r\nThis PR temporarily fixes the #201799 issue for
Serverless.\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/604128cb-49b0-4a93-9a15-2a5a0c511883\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"3daaaa5b8c3e3a47b1e29f75df301b42d89caa87"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202413","number":202413,"mergeCommit":{"message":"[Security
Solution] [Onboarding] t1_analyst role blocked from interacting with
cards due to missing integration privileges (#202413)\n\n##
Summary\r\n\r\nThis PR temporarily fixes the #201799 issue for
Serverless.\r\n\r\n\r\n\r\nhttps://github.com/user-attachments/assets/604128cb-49b0-4a93-9a15-2a5a0c511883\r\n\r\n\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"3daaaa5b8c3e3a47b1e29f75df301b42d89caa87"}},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-03 12:49:41 +00:00
Kibana Machine
c521832f00
[8.16] [Automatic Import] Reject CEF logs in Auto Import until it is supported (#201792) (#202635)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Automatic Import] Reject CEF logs in Auto Import until it is
supported (#201792)](https://github.com/elastic/kibana/pull/201792)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Bharat
Pasupula","email":"123897612+bhapas@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-02T11:46:04Z","message":"[Automatic
Import] Reject CEF logs in Auto Import until it is supported
(#201792)\n\n## Release Note\r\n\r\nRestrict and Reject CEF logs in
Automatic Import and redirect to CEF\r\nintegration instead.\r\n\r\n##
Summary\r\n\r\nCurrently Automatic Import does not handle CEF logs
properly and gives\r\nwierd errors.\r\n\r\nThis PR identifies the CEF
logs and sends an error popup to\r\nalternatively go for CEF integration
instead.\r\n\r\n<img width=\"1229\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/59037dd4-323a-476a-9747-950fbc6e384d\">\r\n\r\n##
Testing\r\n\r\nTested this with different types of CEF
logs\r\n\r\n```\r\n<14>Nov 22 16:19:13 ABQ-ZTA-VRNS-3 CEF:0|Varonis
Inc.|DatAdvantage|8.6.51|6000|Folder permissions added|3|rt=Nov 22 2024
16:19:09 cat=Alert cs2=Permissions granted to Global Access Groups
cs2Label=RuleName cn1=132 cn1Label=RuleID end=Nov 22 2024 16:19:05
duser=zta.local\\\\Dani Lulli (ADMIN) dhost=10.100.20.12
filePath=E:\\\\Share\\\\Share\\\\Finance fname=Finance act=Folder
permissions added dvchost= outcome=Success msg=Read & Execute
permissions for This folder, subfolders and files (not inherited) was
added to Everyone on E:\\\\Share\\\\Share\\\\Finance cs3=
cs3Label=AttachmentName cs4= cs4Label=ClientAccessType
deviceCustomDate1= fileType= cs1= cs1Label=MailRecipient suser= cs5=
cs5Label=MailboxAccessType cnt= cs6=Read & Execute
cs6Label=ChangedPermissions oldFilePermission=None filePermission=Read &
Execute dpriv=Everyone start=\r\n<14>Nov 22 16:44:31 ABQ-ZTA-VRNS-3
CEF:0|Varonis Inc.|DatAdvantage|8.6.51|1|File opened|2|rt=Nov 22 2024
16:44:31 cat=Alert cs2=Dani Test - access of credentials
cs2Label=RuleName cn1=184 cn1Label=RuleID end=Nov 22 2024 16:34:33
duser=zta.local\\\\Dani Lulli (ADMIN) dhost=10.100.20.12
filePath=E:\\\\Share\\\\Share\\\\B4\\\\Project mgmt\\\\U3
projects11.txt:Zone.Identifier fname=U3 projects11.txt:Zone.Identifier
act=File opened dvchost= outcome=Success msg= cs3=
cs3Label=AttachmentName cs4= cs4Label=ClientAccessType
deviceCustomDate1= fileType= cs1= cs1Label=MailRecipient suser= cs5=
cs5Label=MailboxAccessType cnt= cs6=None cs6Label=ChangedPermissions
oldFilePermission=None filePermission=None dpriv=
start=\r\n```\r\n\r\n```\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|eventId=3457 requestMethod=POST slat=38.915 slong=-77.511
proto=TCP sourceServiceName=httpd requestContext=https://www.google.com
src=89.160.20.156 spt=33876 dst=192.168.10.1 dpt=443
request=https://www.example.com/cart\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|eventId=123
src=89.160.20.156 spt=33876 dst=89.160.20.156 dpt=443 duser=alice
suser=bob destinationTranslatedAddress=10.10.10.10
fileHash=bc8bbe52f041fd17318f08a0f73762ce
oldFileHash=a9796280592f86b74b27e370662d41eb\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|spriv=user
dpriv=root\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|message=This
event is padded with whitespace dst=192.168.1.2
src=192.168.3.4\r\n```\r\n\r\n```\r\n<163>Apr 1 05:14:15 192.0.2.1
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc3164\r\nApr 1 05:14:15 192.0.2.1
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc3164\r\n<164>1 2021-04-01T05:14:15.000003-05:00
192.0.2.1 rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n2021-04-01T05:14:15.000003-05:00 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n<165>1 2021-04-01T05:14:15.000003Z 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n2021-04-01T05:14:15.000003Z 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n```\r\n\r\n### Checklist\r\n\r\nCheck the PR
satisfies following conditions. \r\n\r\nReviewers should verify this PR
satisfies this list as well.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [x] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"f6fa94f4768f8a2623fceaaf242ead24a3667ad6","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:prev-minor","backport:prev-major","Team:Security-Scalability","Feature:AutomaticImport","v8.18.0"],"title":"[Automatic
Import] Reject CEF logs in Auto Import until it is
supported","number":201792,"url":"https://github.com/elastic/kibana/pull/201792","mergeCommit":{"message":"[Automatic
Import] Reject CEF logs in Auto Import until it is supported
(#201792)\n\n## Release Note\r\n\r\nRestrict and Reject CEF logs in
Automatic Import and redirect to CEF\r\nintegration instead.\r\n\r\n##
Summary\r\n\r\nCurrently Automatic Import does not handle CEF logs
properly and gives\r\nwierd errors.\r\n\r\nThis PR identifies the CEF
logs and sends an error popup to\r\nalternatively go for CEF integration
instead.\r\n\r\n<img width=\"1229\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/59037dd4-323a-476a-9747-950fbc6e384d\">\r\n\r\n##
Testing\r\n\r\nTested this with different types of CEF
logs\r\n\r\n```\r\n<14>Nov 22 16:19:13 ABQ-ZTA-VRNS-3 CEF:0|Varonis
Inc.|DatAdvantage|8.6.51|6000|Folder permissions added|3|rt=Nov 22 2024
16:19:09 cat=Alert cs2=Permissions granted to Global Access Groups
cs2Label=RuleName cn1=132 cn1Label=RuleID end=Nov 22 2024 16:19:05
duser=zta.local\\\\Dani Lulli (ADMIN) dhost=10.100.20.12
filePath=E:\\\\Share\\\\Share\\\\Finance fname=Finance act=Folder
permissions added dvchost= outcome=Success msg=Read & Execute
permissions for This folder, subfolders and files (not inherited) was
added to Everyone on E:\\\\Share\\\\Share\\\\Finance cs3=
cs3Label=AttachmentName cs4= cs4Label=ClientAccessType
deviceCustomDate1= fileType= cs1= cs1Label=MailRecipient suser= cs5=
cs5Label=MailboxAccessType cnt= cs6=Read & Execute
cs6Label=ChangedPermissions oldFilePermission=None filePermission=Read &
Execute dpriv=Everyone start=\r\n<14>Nov 22 16:44:31 ABQ-ZTA-VRNS-3
CEF:0|Varonis Inc.|DatAdvantage|8.6.51|1|File opened|2|rt=Nov 22 2024
16:44:31 cat=Alert cs2=Dani Test - access of credentials
cs2Label=RuleName cn1=184 cn1Label=RuleID end=Nov 22 2024 16:34:33
duser=zta.local\\\\Dani Lulli (ADMIN) dhost=10.100.20.12
filePath=E:\\\\Share\\\\Share\\\\B4\\\\Project mgmt\\\\U3
projects11.txt:Zone.Identifier fname=U3 projects11.txt:Zone.Identifier
act=File opened dvchost= outcome=Success msg= cs3=
cs3Label=AttachmentName cs4= cs4Label=ClientAccessType
deviceCustomDate1= fileType= cs1= cs1Label=MailRecipient suser= cs5=
cs5Label=MailboxAccessType cnt= cs6=None cs6Label=ChangedPermissions
oldFilePermission=None filePermission=None dpriv=
start=\r\n```\r\n\r\n```\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|eventId=3457 requestMethod=POST slat=38.915 slong=-77.511
proto=TCP sourceServiceName=httpd requestContext=https://www.google.com
src=89.160.20.156 spt=33876 dst=192.168.10.1 dpt=443
request=https://www.example.com/cart\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|eventId=123
src=89.160.20.156 spt=33876 dst=89.160.20.156 dpt=443 duser=alice
suser=bob destinationTranslatedAddress=10.10.10.10
fileHash=bc8bbe52f041fd17318f08a0f73762ce
oldFileHash=a9796280592f86b74b27e370662d41eb\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|spriv=user
dpriv=root\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|message=This
event is padded with whitespace dst=192.168.1.2
src=192.168.3.4\r\n```\r\n\r\n```\r\n<163>Apr 1 05:14:15 192.0.2.1
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc3164\r\nApr 1 05:14:15 192.0.2.1
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc3164\r\n<164>1 2021-04-01T05:14:15.000003-05:00
192.0.2.1 rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n2021-04-01T05:14:15.000003-05:00 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n<165>1 2021-04-01T05:14:15.000003Z 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n2021-04-01T05:14:15.000003Z 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n```\r\n\r\n### Checklist\r\n\r\nCheck the PR
satisfies following conditions. \r\n\r\nReviewers should verify this PR
satisfies this list as well.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [x] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"f6fa94f4768f8a2623fceaaf242ead24a3667ad6"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201792","number":201792,"mergeCommit":{"message":"[Automatic
Import] Reject CEF logs in Auto Import until it is supported
(#201792)\n\n## Release Note\r\n\r\nRestrict and Reject CEF logs in
Automatic Import and redirect to CEF\r\nintegration instead.\r\n\r\n##
Summary\r\n\r\nCurrently Automatic Import does not handle CEF logs
properly and gives\r\nwierd errors.\r\n\r\nThis PR identifies the CEF
logs and sends an error popup to\r\nalternatively go for CEF integration
instead.\r\n\r\n<img width=\"1229\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/59037dd4-323a-476a-9747-950fbc6e384d\">\r\n\r\n##
Testing\r\n\r\nTested this with different types of CEF
logs\r\n\r\n```\r\n<14>Nov 22 16:19:13 ABQ-ZTA-VRNS-3 CEF:0|Varonis
Inc.|DatAdvantage|8.6.51|6000|Folder permissions added|3|rt=Nov 22 2024
16:19:09 cat=Alert cs2=Permissions granted to Global Access Groups
cs2Label=RuleName cn1=132 cn1Label=RuleID end=Nov 22 2024 16:19:05
duser=zta.local\\\\Dani Lulli (ADMIN) dhost=10.100.20.12
filePath=E:\\\\Share\\\\Share\\\\Finance fname=Finance act=Folder
permissions added dvchost= outcome=Success msg=Read & Execute
permissions for This folder, subfolders and files (not inherited) was
added to Everyone on E:\\\\Share\\\\Share\\\\Finance cs3=
cs3Label=AttachmentName cs4= cs4Label=ClientAccessType
deviceCustomDate1= fileType= cs1= cs1Label=MailRecipient suser= cs5=
cs5Label=MailboxAccessType cnt= cs6=Read & Execute
cs6Label=ChangedPermissions oldFilePermission=None filePermission=Read &
Execute dpriv=Everyone start=\r\n<14>Nov 22 16:44:31 ABQ-ZTA-VRNS-3
CEF:0|Varonis Inc.|DatAdvantage|8.6.51|1|File opened|2|rt=Nov 22 2024
16:44:31 cat=Alert cs2=Dani Test - access of credentials
cs2Label=RuleName cn1=184 cn1Label=RuleID end=Nov 22 2024 16:34:33
duser=zta.local\\\\Dani Lulli (ADMIN) dhost=10.100.20.12
filePath=E:\\\\Share\\\\Share\\\\B4\\\\Project mgmt\\\\U3
projects11.txt:Zone.Identifier fname=U3 projects11.txt:Zone.Identifier
act=File opened dvchost= outcome=Success msg= cs3=
cs3Label=AttachmentName cs4= cs4Label=ClientAccessType
deviceCustomDate1= fileType= cs1= cs1Label=MailRecipient suser= cs5=
cs5Label=MailboxAccessType cnt= cs6=None cs6Label=ChangedPermissions
oldFilePermission=None filePermission=None dpriv=
start=\r\n```\r\n\r\n```\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|eventId=3457 requestMethod=POST slat=38.915 slong=-77.511
proto=TCP sourceServiceName=httpd requestContext=https://www.google.com
src=89.160.20.156 spt=33876 dst=192.168.10.1 dpt=443
request=https://www.example.com/cart\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|eventId=123
src=89.160.20.156 spt=33876 dst=89.160.20.156 dpt=443 duser=alice
suser=bob destinationTranslatedAddress=10.10.10.10
fileHash=bc8bbe52f041fd17318f08a0f73762ce
oldFileHash=a9796280592f86b74b27e370662d41eb\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|spriv=user
dpriv=root\r\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|message=This
event is padded with whitespace dst=192.168.1.2
src=192.168.3.4\r\n```\r\n\r\n```\r\n<163>Apr 1 05:14:15 192.0.2.1
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc3164\r\nApr 1 05:14:15 192.0.2.1
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc3164\r\n<164>1 2021-04-01T05:14:15.000003-05:00
192.0.2.1 rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n2021-04-01T05:14:15.000003-05:00 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n<165>1 2021-04-01T05:14:15.000003Z 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n2021-04-01T05:14:15.000003Z 192.0.2.1
rfc5424App 8710 - - CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web
request|low|msg=rfc5424\r\n```\r\n\r\n### Checklist\r\n\r\nCheck the PR
satisfies following conditions. \r\n\r\nReviewers should verify this PR
satisfies this list as well.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [x] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] The PR
description includes the appropriate Release Notes section,\r\nand the
correct `release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"f6fa94f4768f8a2623fceaaf242ead24a3667ad6"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/202444","number":202444,"state":"MERGED","mergeCommit":{"sha":"a1cb4c22e82e107313fa8a9c587a9de47a280689","message":"[8.x]
[Automatic Import] Reject CEF logs in Auto Import until it is supported
(#201792) (#202444)\n\n# Backport\n\nThis will backport the following
commits from `main` to `8.x`:\n- [[Automatic Import] Reject CEF logs in
Auto Import until it is\nsupported
(#201792)](https://github.com/elastic/kibana/pull/201792)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Bharat\nPasupula\",\"email\":\"123897612+bhapas@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2024-12-02T11:46:04Z\",\"message\":\"[Automatic\nImport]
Reject CEF logs in Auto Import until it is supported\n(#201792)\\n\\n##
Release Note\\r\\n\\r\\nRestrict and Reject CEF logs in\nAutomatic
Import and redirect to CEF\\r\\nintegration
instead.\\r\\n\\r\\n##\nSummary\\r\\n\\r\\nCurrently Automatic Import
does not handle CEF logs\nproperly and gives\\r\\nwierd
errors.\\r\\n\\r\\nThis PR identifies the CEF\nlogs and sends an error
popup to\\r\\nalternatively go for CEF
integration\ninstead.\\r\\n\\r\\n<img
width=\\\"1229\\\"\nalt=\\\"image\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/59037dd4-323a-476a-9747-950fbc6e384d\\\">\\r\\n\\r\\n##\nTesting\\r\\n\\r\\nTested
this with different types of CEF\nlogs\\r\\n\\r\\n```\\r\\n<14>Nov 22
16:19:13 ABQ-ZTA-VRNS-3
CEF:0|Varonis\nInc.|DatAdvantage|8.6.51|6000|Folder permissions
added|3|rt=Nov 22 2024\n16:19:09 cat=Alert cs2=Permissions granted to
Global Access Groups\ncs2Label=RuleName cn1=132 cn1Label=RuleID end=Nov
22 2024 16:19:05\nduser=zta.local\\\\\\\\Dani Lulli (ADMIN)
dhost=10.100.20.12\nfilePath=E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\Finance
fname=Finance act=Folder\npermissions added dvchost= outcome=Success
msg=Read & Execute\npermissions for This folder, subfolders and files
(not inherited) was\nadded to Everyone on
E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\Finance
cs3=\ncs3Label=AttachmentName cs4=
cs4Label=ClientAccessType\ndeviceCustomDate1= fileType= cs1=
cs1Label=MailRecipient suser= cs5=\ncs5Label=MailboxAccessType cnt=
cs6=Read & Execute\ncs6Label=ChangedPermissions oldFilePermission=None
filePermission=Read &\nExecute dpriv=Everyone start=\\r\\n<14>Nov 22
16:44:31 ABQ-ZTA-VRNS-3\nCEF:0|Varonis Inc.|DatAdvantage|8.6.51|1|File
opened|2|rt=Nov 22 2024\n16:44:31 cat=Alert cs2=Dani Test - access of
credentials\ncs2Label=RuleName cn1=184 cn1Label=RuleID end=Nov 22 2024
16:34:33\nduser=zta.local\\\\\\\\Dani Lulli (ADMIN)
dhost=10.100.20.12\nfilePath=E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\B4\\\\\\\\Project
mgmt\\\\\\\\U3\nprojects11.txt:Zone.Identifier fname=U3
projects11.txt:Zone.Identifier\nact=File opened dvchost= outcome=Success
msg= cs3=\ncs3Label=AttachmentName cs4=
cs4Label=ClientAccessType\ndeviceCustomDate1= fileType= cs1=
cs1Label=MailRecipient suser= cs5=\ncs5Label=MailboxAccessType cnt=
cs6=None cs6Label=ChangedPermissions\noldFilePermission=None
filePermission=None
dpriv=\nstart=\\r\\n```\\r\\n\\r\\n```\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|eventId=3457
requestMethod=POST slat=38.915 slong=-77.511\nproto=TCP
sourceServiceName=httpd
requestContext=https://www.google.com\nsrc=89.160.20.156 spt=33876
dst=192.168.10.1
dpt=443\nrequest=https://www.example.com/cart\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|eventId=123\nsrc=89.160.20.156
spt=33876 dst=89.160.20.156 dpt=443 duser=alice\nsuser=bob
destinationTranslatedAddress=10.10.10.10\nfileHash=bc8bbe52f041fd17318f08a0f73762ce\noldFileHash=a9796280592f86b74b27e370662d41eb\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|spriv=user\ndpriv=root\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|message=This\nevent
is padded with whitespace
dst=192.168.1.2\nsrc=192.168.3.4\\r\\n```\\r\\n\\r\\n```\\r\\n<163>Apr 1
05:14:15
192.0.2.1\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc3164\\r\\nApr
1 05:14:15
192.0.2.1\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc3164\\r\\n<164>1
2021-04-01T05:14:15.000003-05:00\n192.0.2.1 rfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n2021-04-01T05:14:15.000003-05:00
192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n<165>1
2021-04-01T05:14:15.000003Z 192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n2021-04-01T05:14:15.000003Z
192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n```\\r\\n\\r\\n###
Checklist\\r\\n\\r\\nCheck the PR\nsatisfies following conditions.
\\r\\n\\r\\nReviewers should verify this PR\nsatisfies this list as
well.\\r\\n\\r\\n- [x] Any text added follows
[EUI's\nwriting\\r\\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),\nuses\\r\\nsentence
case text and
includes\n[i18n\\r\\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\\r\\n-\n[\n]\\r\\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\\r\\nwas\nadded
for features that require explanation or tutorials\\r\\n- [x]
[Unit\nor\nfunctional\\r\\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\\r\\nwere\nupdated
or added to match the most common scenarios\\r\\n- [x] The
PR\ndescription includes the appropriate Release Notes section,\\r\\nand
the\ncorrect `release_note:*` label is applied
per\nthe\\r\\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:\nElastic
Machine\n<elasticmachine@users.noreply.github.com>\",\"sha\":\"f6fa94f4768f8a2623fceaaf242ead24a3667ad6\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:fix\",\"v9.0.0\",\"backport:prev-minor\",\"Team:Security-Scalability\",\"Feature:AutomaticImport\"],\"title\":\"[Automatic\nImport]
Reject CEF logs in Auto Import until it
is\nsupported\",\"number\":201792,\"url\":\"https://github.com/elastic/kibana/pull/201792\",\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Reject CEF logs in Auto Import until it is supported\n(#201792)\\n\\n##
Release Note\\r\\n\\r\\nRestrict and Reject CEF logs in\nAutomatic
Import and redirect to CEF\\r\\nintegration
instead.\\r\\n\\r\\n##\nSummary\\r\\n\\r\\nCurrently Automatic Import
does not handle CEF logs\nproperly and gives\\r\\nwierd
errors.\\r\\n\\r\\nThis PR identifies the CEF\nlogs and sends an error
popup to\\r\\nalternatively go for CEF
integration\ninstead.\\r\\n\\r\\n<img
width=\\\"1229\\\"\nalt=\\\"image\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/59037dd4-323a-476a-9747-950fbc6e384d\\\">\\r\\n\\r\\n##\nTesting\\r\\n\\r\\nTested
this with different types of CEF\nlogs\\r\\n\\r\\n```\\r\\n<14>Nov 22
16:19:13 ABQ-ZTA-VRNS-3
CEF:0|Varonis\nInc.|DatAdvantage|8.6.51|6000|Folder permissions
added|3|rt=Nov 22 2024\n16:19:09 cat=Alert cs2=Permissions granted to
Global Access Groups\ncs2Label=RuleName cn1=132 cn1Label=RuleID end=Nov
22 2024 16:19:05\nduser=zta.local\\\\\\\\Dani Lulli (ADMIN)
dhost=10.100.20.12\nfilePath=E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\Finance
fname=Finance act=Folder\npermissions added dvchost= outcome=Success
msg=Read & Execute\npermissions for This folder, subfolders and files
(not inherited) was\nadded to Everyone on
E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\Finance
cs3=\ncs3Label=AttachmentName cs4=
cs4Label=ClientAccessType\ndeviceCustomDate1= fileType= cs1=
cs1Label=MailRecipient suser= cs5=\ncs5Label=MailboxAccessType cnt=
cs6=Read & Execute\ncs6Label=ChangedPermissions oldFilePermission=None
filePermission=Read &\nExecute dpriv=Everyone start=\\r\\n<14>Nov 22
16:44:31 ABQ-ZTA-VRNS-3\nCEF:0|Varonis Inc.|DatAdvantage|8.6.51|1|File
opened|2|rt=Nov 22 2024\n16:44:31 cat=Alert cs2=Dani Test - access of
credentials\ncs2Label=RuleName cn1=184 cn1Label=RuleID end=Nov 22 2024
16:34:33\nduser=zta.local\\\\\\\\Dani Lulli (ADMIN)
dhost=10.100.20.12\nfilePath=E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\B4\\\\\\\\Project
mgmt\\\\\\\\U3\nprojects11.txt:Zone.Identifier fname=U3
projects11.txt:Zone.Identifier\nact=File opened dvchost= outcome=Success
msg= cs3=\ncs3Label=AttachmentName cs4=
cs4Label=ClientAccessType\ndeviceCustomDate1= fileType= cs1=
cs1Label=MailRecipient suser= cs5=\ncs5Label=MailboxAccessType cnt=
cs6=None cs6Label=ChangedPermissions\noldFilePermission=None
filePermission=None
dpriv=\nstart=\\r\\n```\\r\\n\\r\\n```\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|eventId=3457
requestMethod=POST slat=38.915 slong=-77.511\nproto=TCP
sourceServiceName=httpd
requestContext=https://www.google.com\nsrc=89.160.20.156 spt=33876
dst=192.168.10.1
dpt=443\nrequest=https://www.example.com/cart\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|eventId=123\nsrc=89.160.20.156
spt=33876 dst=89.160.20.156 dpt=443 duser=alice\nsuser=bob
destinationTranslatedAddress=10.10.10.10\nfileHash=bc8bbe52f041fd17318f08a0f73762ce\noldFileHash=a9796280592f86b74b27e370662d41eb\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|spriv=user\ndpriv=root\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|message=This\nevent
is padded with whitespace
dst=192.168.1.2\nsrc=192.168.3.4\\r\\n```\\r\\n\\r\\n```\\r\\n<163>Apr 1
05:14:15
192.0.2.1\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc3164\\r\\nApr
1 05:14:15
192.0.2.1\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc3164\\r\\n<164>1
2021-04-01T05:14:15.000003-05:00\n192.0.2.1 rfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n2021-04-01T05:14:15.000003-05:00
192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n<165>1
2021-04-01T05:14:15.000003Z 192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n2021-04-01T05:14:15.000003Z
192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n```\\r\\n\\r\\n###
Checklist\\r\\n\\r\\nCheck the PR\nsatisfies following conditions.
\\r\\n\\r\\nReviewers should verify this PR\nsatisfies this list as
well.\\r\\n\\r\\n- [x] Any text added follows
[EUI's\nwriting\\r\\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),\nuses\\r\\nsentence
case text and
includes\n[i18n\\r\\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\\r\\n-\n[\n]\\r\\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\\r\\nwas\nadded
for features that require explanation or tutorials\\r\\n- [x]
[Unit\nor\nfunctional\\r\\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\\r\\nwere\nupdated
or added to match the most common scenarios\\r\\n- [x] The
PR\ndescription includes the appropriate Release Notes section,\\r\\nand
the\ncorrect `release_note:*` label is applied
per\nthe\\r\\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:\nElastic
Machine\n<elasticmachine@users.noreply.github.com>\",\"sha\":\"f6fa94f4768f8a2623fceaaf242ead24a3667ad6\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201792\",\"number\":201792,\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Reject CEF logs in Auto Import until it is supported\n(#201792)\\n\\n##
Release Note\\r\\n\\r\\nRestrict and Reject CEF logs in\nAutomatic
Import and redirect to CEF\\r\\nintegration
instead.\\r\\n\\r\\n##\nSummary\\r\\n\\r\\nCurrently Automatic Import
does not handle CEF logs\nproperly and gives\\r\\nwierd
errors.\\r\\n\\r\\nThis PR identifies the CEF\nlogs and sends an error
popup to\\r\\nalternatively go for CEF
integration\ninstead.\\r\\n\\r\\n<img
width=\\\"1229\\\"\nalt=\\\"image\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/59037dd4-323a-476a-9747-950fbc6e384d\\\">\\r\\n\\r\\n##\nTesting\\r\\n\\r\\nTested
this with different types of CEF\nlogs\\r\\n\\r\\n```\\r\\n<14>Nov 22
16:19:13 ABQ-ZTA-VRNS-3
CEF:0|Varonis\nInc.|DatAdvantage|8.6.51|6000|Folder permissions
added|3|rt=Nov 22 2024\n16:19:09 cat=Alert cs2=Permissions granted to
Global Access Groups\ncs2Label=RuleName cn1=132 cn1Label=RuleID end=Nov
22 2024 16:19:05\nduser=zta.local\\\\\\\\Dani Lulli (ADMIN)
dhost=10.100.20.12\nfilePath=E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\Finance
fname=Finance act=Folder\npermissions added dvchost= outcome=Success
msg=Read & Execute\npermissions for This folder, subfolders and files
(not inherited) was\nadded to Everyone on
E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\Finance
cs3=\ncs3Label=AttachmentName cs4=
cs4Label=ClientAccessType\ndeviceCustomDate1= fileType= cs1=
cs1Label=MailRecipient suser= cs5=\ncs5Label=MailboxAccessType cnt=
cs6=Read & Execute\ncs6Label=ChangedPermissions oldFilePermission=None
filePermission=Read &\nExecute dpriv=Everyone start=\\r\\n<14>Nov 22
16:44:31 ABQ-ZTA-VRNS-3\nCEF:0|Varonis Inc.|DatAdvantage|8.6.51|1|File
opened|2|rt=Nov 22 2024\n16:44:31 cat=Alert cs2=Dani Test - access of
credentials\ncs2Label=RuleName cn1=184 cn1Label=RuleID end=Nov 22 2024
16:34:33\nduser=zta.local\\\\\\\\Dani Lulli (ADMIN)
dhost=10.100.20.12\nfilePath=E:\\\\\\\\Share\\\\\\\\Share\\\\\\\\B4\\\\\\\\Project
mgmt\\\\\\\\U3\nprojects11.txt:Zone.Identifier fname=U3
projects11.txt:Zone.Identifier\nact=File opened dvchost= outcome=Success
msg= cs3=\ncs3Label=AttachmentName cs4=
cs4Label=ClientAccessType\ndeviceCustomDate1= fileType= cs1=
cs1Label=MailRecipient suser= cs5=\ncs5Label=MailboxAccessType cnt=
cs6=None cs6Label=ChangedPermissions\noldFilePermission=None
filePermission=None
dpriv=\nstart=\\r\\n```\\r\\n\\r\\n```\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|eventId=3457
requestMethod=POST slat=38.915 slong=-77.511\nproto=TCP
sourceServiceName=httpd
requestContext=https://www.google.com\nsrc=89.160.20.156 spt=33876
dst=192.168.10.1
dpt=443\nrequest=https://www.example.com/cart\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|eventId=123\nsrc=89.160.20.156
spt=33876 dst=89.160.20.156 dpt=443 duser=alice\nsuser=bob
destinationTranslatedAddress=10.10.10.10\nfileHash=bc8bbe52f041fd17318f08a0f73762ce\noldFileHash=a9796280592f86b74b27e370662d41eb\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|spriv=user\ndpriv=root\\r\\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Authentication|low|message=This\nevent
is padded with whitespace
dst=192.168.1.2\nsrc=192.168.3.4\\r\\n```\\r\\n\\r\\n```\\r\\n<163>Apr 1
05:14:15
192.0.2.1\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc3164\\r\\nApr
1 05:14:15
192.0.2.1\nCEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc3164\\r\\n<164>1
2021-04-01T05:14:15.000003-05:00\n192.0.2.1 rfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n2021-04-01T05:14:15.000003-05:00
192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n<165>1
2021-04-01T05:14:15.000003Z 192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n2021-04-01T05:14:15.000003Z
192.0.2.1\nrfc5424App 8710 - -
CEF:0|Elastic|Vaporware|1.0.0-alpha|18|Web\nrequest|low|msg=rfc5424\\r\\n```\\r\\n\\r\\n###
Checklist\\r\\n\\r\\nCheck the PR\nsatisfies following conditions.
\\r\\n\\r\\nReviewers should verify this PR\nsatisfies this list as
well.\\r\\n\\r\\n- [x] Any text added follows
[EUI's\nwriting\\r\\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),\nuses\\r\\nsentence
case text and
includes\n[i18n\\r\\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\\r\\n-\n[\n]\\r\\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\\r\\nwas\nadded
for features that require explanation or tutorials\\r\\n- [x]
[Unit\nor\nfunctional\\r\\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\\r\\nwere\nupdated
or added to match the most common scenarios\\r\\n- [x] The
PR\ndescription includes the appropriate Release Notes section,\\r\\nand
the\ncorrect `release_note:*` label is applied
per\nthe\\r\\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\\r\\n\\r\\n---------\\r\\n\\r\\nCo-authored-by:\nElastic
Machine\n<elasticmachine@users.noreply.github.com>\",\"sha\":\"f6fa94f4768f8a2623fceaaf242ead24a3667ad6\"}}]}]\nBACKPORT-->\n\nCo-authored-by:
Bharat Pasupula <123897612+bhapas@users.noreply.github.com>"}}]}]
BACKPORT-->

Co-authored-by: Bharat Pasupula <123897612+bhapas@users.noreply.github.com>
2024-12-03 05:03:26 -06:00
Kibana Machine
2faee8a967
[8.16] [Search][Connectors] Disable Elastic managed option when running Kibana locally (#201950) (#202589)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Search][Connectors] Disable Elastic managed option when running
Kibana locally (#201950)](https://github.com/elastic/kibana/pull/201950)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"José Luis
González","email":"joseluisgj@gmail.com"},"sourceCommit":{"committedDate":"2024-12-02T21:37:01Z","message":"[Search][Connectors]
Disable Elastic managed option when running Kibana locally
(#201950)\n\n## Summary\r\n\r\nThis PR disables the _Elastic managed_
option when creating a connector\r\nwhile running Kibana locally. We
also inform and encourage users to get\r\na Cloud trial taking them
to\r\nhttps://cloud.elastic.co/registration?onboarding_token=connectors
If the\r\nuser finish up the registration process he will en up in
the\r\n`/app/enterprise_search/content/connectors` in product
connectors\r\nsection.\r\n\r\n![CleanShot 2024-12-02 at 22
33\r\n07](https://github.com/user-attachments/assets/f95181c5-1d9f-447c-8c30-ac251a60b6c1)\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"b5273734317b6278b015851b396d0b4c4edcc571","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Search","backport:version","v8.17.0","v8.18.0","v8.16.2"],"title":"[Search][Connectors]
Disable Elastic managed option when running Kibana
locally","number":201950,"url":"https://github.com/elastic/kibana/pull/201950","mergeCommit":{"message":"[Search][Connectors]
Disable Elastic managed option when running Kibana locally
(#201950)\n\n## Summary\r\n\r\nThis PR disables the _Elastic managed_
option when creating a connector\r\nwhile running Kibana locally. We
also inform and encourage users to get\r\na Cloud trial taking them
to\r\nhttps://cloud.elastic.co/registration?onboarding_token=connectors
If the\r\nuser finish up the registration process he will en up in
the\r\n`/app/enterprise_search/content/connectors` in product
connectors\r\nsection.\r\n\r\n![CleanShot 2024-12-02 at 22
33\r\n07](https://github.com/user-attachments/assets/f95181c5-1d9f-447c-8c30-ac251a60b6c1)\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"b5273734317b6278b015851b396d0b4c4edcc571"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201950","number":201950,"mergeCommit":{"message":"[Search][Connectors]
Disable Elastic managed option when running Kibana locally
(#201950)\n\n## Summary\r\n\r\nThis PR disables the _Elastic managed_
option when creating a connector\r\nwhile running Kibana locally. We
also inform and encourage users to get\r\na Cloud trial taking them
to\r\nhttps://cloud.elastic.co/registration?onboarding_token=connectors
If the\r\nuser finish up the registration process he will en up in
the\r\n`/app/enterprise_search/content/connectors` in product
connectors\r\nsection.\r\n\r\n![CleanShot 2024-12-02 at 22
33\r\n07](https://github.com/user-attachments/assets/f95181c5-1d9f-447c-8c30-ac251a60b6c1)\r\n\r\n---------\r\n\r\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"b5273734317b6278b015851b396d0b4c4edcc571"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: José Luis González <joseluisgj@gmail.com>
2024-12-02 17:24:53 -06:00
Kibana Machine
3eeb9f17ee
[8.16] [Synthetics] Fix to handle ops genie as default connector !! (#201923) (#202571)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Synthetics] Fix to handle ops genie as default connector !!
(#201923)](https://github.com/elastic/kibana/pull/201923)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"Shahzad","email":"shahzad31comp@gmail.com"},"sourceCommit":{"committedDate":"2024-12-02T19:20:26Z","message":"[Synthetics]
Fix to handle ops genie as default connector !! (#201923)\n\n##
Summary\r\n\r\nfixes
https://github.com/elastic/kibana/issues/168681\r\n\r\nFix to handle ops
genie as default connector !!\r\n\r\nTested by creating a trail account
in ops genie \r\n\r\n<img width=\"1712\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/ec768758-0fd3-4e3e-bb16-2bc11f10f6b7\">","sha":"a674b9d043faf58494feda039bb2a563c9f4d661","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:prev-major","ci:project-deploy-observability","Team:obs-ux-management"],"title":"[Synthetics]
Fix to handle ops genie as default connector
!!","number":201923,"url":"https://github.com/elastic/kibana/pull/201923","mergeCommit":{"message":"[Synthetics]
Fix to handle ops genie as default connector !! (#201923)\n\n##
Summary\r\n\r\nfixes
https://github.com/elastic/kibana/issues/168681\r\n\r\nFix to handle ops
genie as default connector !!\r\n\r\nTested by creating a trail account
in ops genie \r\n\r\n<img width=\"1712\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/ec768758-0fd3-4e3e-bb16-2bc11f10f6b7\">","sha":"a674b9d043faf58494feda039bb2a563c9f4d661"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201923","number":201923,"mergeCommit":{"message":"[Synthetics]
Fix to handle ops genie as default connector !! (#201923)\n\n##
Summary\r\n\r\nfixes
https://github.com/elastic/kibana/issues/168681\r\n\r\nFix to handle ops
genie as default connector !!\r\n\r\nTested by creating a trail account
in ops genie \r\n\r\n<img width=\"1712\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/ec768758-0fd3-4e3e-bb16-2bc11f10f6b7\">","sha":"a674b9d043faf58494feda039bb2a563c9f4d661"}}]}]
BACKPORT-->

Co-authored-by: Shahzad <shahzad31comp@gmail.com>
2024-12-02 15:34:21 -06:00
Kibana Machine
515bcb0d57
[8.16] [Stack Connectors][SentinelOne + Crowdstrike] Update Crowdstrike and Sentinelone connectors to NOT validate API responses (#202515) (#202568)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Stack Connectors][SentinelOne + Crowdstrike] Update Crowdstrike and
Sentinelone connectors to NOT validate API responses
(#202515)](https://github.com/elastic/kibana/pull/202515)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Paul
Tavares","email":"56442535+paul-tavares@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-02T19:01:56Z","message":"[Stack
Connectors][SentinelOne + Crowdstrike] Update Crowdstrike and
Sentinelone connectors to NOT validate API responses (#202515)\n\n##
Summary\r\n\r\n- Changed Crowdstrike and SentinelOne connectors to no
longer validate\r\nAPI responses from the external
system","sha":"35fb69e11602173f54b3e61341bb31b8fe8317bc","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Defend
Workflows","backport:prev-minor","v8.17.0","v8.16.2"],"title":"[Stack
Connectors][SentinelOne + Crowdstrike] Update Crowdstrike and
Sentinelone connectors to NOT validate API
responses","number":202515,"url":"https://github.com/elastic/kibana/pull/202515","mergeCommit":{"message":"[Stack
Connectors][SentinelOne + Crowdstrike] Update Crowdstrike and
Sentinelone connectors to NOT validate API responses (#202515)\n\n##
Summary\r\n\r\n- Changed Crowdstrike and SentinelOne connectors to no
longer validate\r\nAPI responses from the external
system","sha":"35fb69e11602173f54b3e61341bb31b8fe8317bc"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202515","number":202515,"mergeCommit":{"message":"[Stack
Connectors][SentinelOne + Crowdstrike] Update Crowdstrike and
Sentinelone connectors to NOT validate API responses (#202515)\n\n##
Summary\r\n\r\n- Changed Crowdstrike and SentinelOne connectors to no
longer validate\r\nAPI responses from the external
system","sha":"35fb69e11602173f54b3e61341bb31b8fe8317bc"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Paul Tavares <56442535+paul-tavares@users.noreply.github.com>
2024-12-02 14:51:42 -06:00
Kibana Machine
216722b05c
[8.16] [Security solution] Remove legacy ESQL quick prompt (#201276) (#202540)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security solution] Remove legacy ESQL quick prompt
(#201276)](https://github.com/elastic/kibana/pull/201276)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Steph
Milovic","email":"stephanie.milovic@elastic.co"},"sourceCommit":{"committedDate":"2024-12-02T16:47:18Z","message":"[Security
solution] Remove legacy ESQL quick prompt
(#201276)","sha":"30ceb1a0533364e6915bf544827d59cf441bcbf5","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:
SecuritySolution","backport:prev-major","Team:Security Generative
AI"],"title":"[Security solution] Remove legacy ESQL quick
prompt","number":201276,"url":"https://github.com/elastic/kibana/pull/201276","mergeCommit":{"message":"[Security
solution] Remove legacy ESQL quick prompt
(#201276)","sha":"30ceb1a0533364e6915bf544827d59cf441bcbf5"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201276","number":201276,"mergeCommit":{"message":"[Security
solution] Remove legacy ESQL quick prompt
(#201276)","sha":"30ceb1a0533364e6915bf544827d59cf441bcbf5"}}]}]
BACKPORT-->

Co-authored-by: Steph Milovic <stephanie.milovic@elastic.co>
2024-12-02 12:39:38 -06:00
Kibana Machine
264b11d91c
[8.16] [Synthetics TLS certificate] Fix error when opening rule flyout (#202386) (#202525)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Synthetics TLS certificate] Fix error when opening rule flyout
(#202386)](https://github.com/elastic/kibana/pull/202386)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Bena
Kansara","email":"69037875+benakansara@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-12-02T16:11:12Z","message":"[Synthetics
TLS certificate] Fix error when opening rule flyout (#202386)\n\nFixes
https://github.com/elastic/kibana/issues/188828","sha":"c4dc230f2ee3da6568d58e4f7caf2daba2ad842f","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:prev-major","ci:project-deploy-observability","Team:obs-ux-management"],"title":"[Synthetics
TLS certificate] Fix error when opening rule
flyout","number":202386,"url":"https://github.com/elastic/kibana/pull/202386","mergeCommit":{"message":"[Synthetics
TLS certificate] Fix error when opening rule flyout (#202386)\n\nFixes
https://github.com/elastic/kibana/issues/188828","sha":"c4dc230f2ee3da6568d58e4f7caf2daba2ad842f"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202386","number":202386,"mergeCommit":{"message":"[Synthetics
TLS certificate] Fix error when opening rule flyout (#202386)\n\nFixes
https://github.com/elastic/kibana/issues/188828","sha":"c4dc230f2ee3da6568d58e4f7caf2daba2ad842f"}}]}]
BACKPORT-->

Co-authored-by: Bena Kansara <69037875+benakansara@users.noreply.github.com>
2024-12-02 11:59:22 -06:00
Jatin Kathuria
06b1474424
[8.16] [Security Solution] Adds callback onUpdatePageIndex to get current pageIndex in Unified Data table (#201240) (#202349)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Adds callback `onUpdatePageIndex` to get current
`pageIndex` in Unified Data table
(#201240)](https://github.com/elastic/kibana/pull/201240)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jatin
Kathuria","email":"jatin.kathuria@elastic.co"},"sourceCommit":{"committedDate":"2024-11-29T15:14:27Z","message":"[Security
Solution] Adds callback `onUpdatePageIndex` to get current `pageIndex`
in Unified Data table (#201240)\n\n## Summary\n\nHandles resolution
for\n- Notes fetching data for all Timeline Records which leads
to\nperformance issues.\n-
https://github.com/elastic/kibana/issues/201330 \n\n## Issue - Notes
fetching data for all Timeline Records \n\nCurrently, there was no way
for consumer of `UnifiedDataGrid` to get the\ncurrent `pageIndex`.
Security Solution needs to get the current\n`pageIndex` so the items on
the current page can be calculated.\n\n@elastic/kibana-data-discovery ,
please let us know if you have any\nopinion here.\n\nThis results in
notes being fetched for all Timeline Records which means\nminimum of 500
records and if user has queries 5000 records ( for\nexample ), a request
will be made to query notes for all those 5000\nnotes which leads to
performance issue and sometimes error as
shown\nbelow:\n\n\n![image](https://github.com/user-attachments/assets/6fcfe05d-340c-4dcb-a273-5af53ed12945)\n\n\n##
👨‍💻 Changes\n\nThis adds attribute `pageIndex` to timeline state.
\n\n```javascript\n{\n \"pageIndex\": number\n}\n```\n`pageIndex` helps
with getting the events for that particular page.\n\n## 🟡 Caveat\n\n-
Currently this `pageIndex` is shared between Query and EQL tabs
which\ncan lead to wonky behavior at time.\n- Additionally, as of now
table maintains its own page index and\nconsumer component cannot effect
the `pageIndex` of the
UnifiedDataGrid.","sha":"de9d5465df5900936991d79306cb2cbbe63f4623","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["backport","release_note:fix","v9.0.0","Team:Threat
Hunting:Investigations","v8.16.2"],"number":201240,"url":"https://github.com/elastic/kibana/pull/201240","mergeCommit":{"message":"[Security
Solution] Adds callback `onUpdatePageIndex` to get current `pageIndex`
in Unified Data table (#201240)\n\n## Summary\n\nHandles resolution
for\n- Notes fetching data for all Timeline Records which leads
to\nperformance issues.\n-
https://github.com/elastic/kibana/issues/201330 \n\n## Issue - Notes
fetching data for all Timeline Records \n\nCurrently, there was no way
for consumer of `UnifiedDataGrid` to get the\ncurrent `pageIndex`.
Security Solution needs to get the current\n`pageIndex` so the items on
the current page can be calculated.\n\n@elastic/kibana-data-discovery ,
please let us know if you have any\nopinion here.\n\nThis results in
notes being fetched for all Timeline Records which means\nminimum of 500
records and if user has queries 5000 records ( for\nexample ), a request
will be made to query notes for all those 5000\nnotes which leads to
performance issue and sometimes error as
shown\nbelow:\n\n\n![image](https://github.com/user-attachments/assets/6fcfe05d-340c-4dcb-a273-5af53ed12945)\n\n\n##
👨‍💻 Changes\n\nThis adds attribute `pageIndex` to timeline state.
\n\n```javascript\n{\n \"pageIndex\": number\n}\n```\n`pageIndex` helps
with getting the events for that particular page.\n\n## 🟡 Caveat\n\n-
Currently this `pageIndex` is shared between Query and EQL tabs
which\ncan lead to wonky behavior at time.\n- Additionally, as of now
table maintains its own page index and\nconsumer component cannot effect
the `pageIndex` of the
UnifiedDataGrid.","sha":"de9d5465df5900936991d79306cb2cbbe63f4623"}},"sourceBranch":"main","suggestedTargetBranches":["8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201240","number":201240,"mergeCommit":{"message":"[Security
Solution] Adds callback `onUpdatePageIndex` to get current `pageIndex`
in Unified Data table (#201240)\n\n## Summary\n\nHandles resolution
for\n- Notes fetching data for all Timeline Records which leads
to\nperformance issues.\n-
https://github.com/elastic/kibana/issues/201330 \n\n## Issue - Notes
fetching data for all Timeline Records \n\nCurrently, there was no way
for consumer of `UnifiedDataGrid` to get the\ncurrent `pageIndex`.
Security Solution needs to get the current\n`pageIndex` so the items on
the current page can be calculated.\n\n@elastic/kibana-data-discovery ,
please let us know if you have any\nopinion here.\n\nThis results in
notes being fetched for all Timeline Records which means\nminimum of 500
records and if user has queries 5000 records ( for\nexample ), a request
will be made to query notes for all those 5000\nnotes which leads to
performance issue and sometimes error as
shown\nbelow:\n\n\n![image](https://github.com/user-attachments/assets/6fcfe05d-340c-4dcb-a273-5af53ed12945)\n\n\n##
👨‍💻 Changes\n\nThis adds attribute `pageIndex` to timeline state.
\n\n```javascript\n{\n \"pageIndex\": number\n}\n```\n`pageIndex` helps
with getting the events for that particular page.\n\n## 🟡 Caveat\n\n-
Currently this `pageIndex` is shared between Query and EQL tabs
which\ncan lead to wonky behavior at time.\n- Additionally, as of now
table maintains its own page index and\nconsumer component cannot effect
the `pageIndex` of the
UnifiedDataGrid.","sha":"de9d5465df5900936991d79306cb2cbbe63f4623"}},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-12-02 08:38:53 -06:00
Cauê Marcondes
9c1a1025a2
[8.16] [Profiling x APM Integration] Use both host.hostname or host.name and container.id to correlate profiling data on APM (#201403) (#202420)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Profiling x APM Integration] Use both host.hostname or host.name and
container.id to correlate profiling data on APM
(#201403)](https://github.com/elastic/kibana/pull/201403)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Cauê
Marcondes","email":"55978943+cauemarcondes@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-11-25T15:51:23Z","message":"[Profiling
x APM Integration] Use both host.hostname or host.name and container.id
to correlate profiling data on APM (#201403)\n\ncloses
https://github.com/elastic/kibana/issues/180036\r\n\r\nThe logic now,
first checks if there are `container.ids` on the selected\r\nservice, if
not, it falls back to the `host.name` or `host.hostname`.\r\n\r\n##
container.id\r\n<img width=\"1320\" alt=\"Screenshot 2024-11-25 at 10 53
44\"\r\nsrc=\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\">\r\n<img
width=\"1300\" alt=\"Screenshot 2024-11-25 at 10 53
55\"\r\nsrc=\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\">\r\n<img
width=\"1303\" alt=\"Screenshot 2024-11-25 at 11 06
55\"\r\nsrc=\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\">\r\n\r\n\r\n##
host.name\r\n<img width=\"1314\" alt=\"Screenshot 2024-11-25 at 11 02
49\"\r\nsrc=\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\">\r\n<img
width=\"1326\" alt=\"Screenshot 2024-11-25 at 11 03
00\"\r\nsrc=\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\">\r\n<img
width=\"1342\" alt=\"Screenshot 2024-11-25 at 11 03
08\"\r\nsrc=\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\">\r\n\r\n##
host.hostname\r\n<img width=\"1323\" alt=\"Screenshot 2024-11-25 at 11
04
24\"\r\nsrc=\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\">\r\n<img
width=\"1321\" alt=\"Screenshot 2024-11-25 at 11 04
34\"\r\nsrc=\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\">\r\n<img
width=\"1311\" alt=\"Screenshot 2024-11-25 at 11 04
51\"\r\nsrc=\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\">","sha":"ff97e5234b58599a503c76549f41afb6ce595dc5","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","ci:project-deploy-observability","Team:obs-ux-infra_services","v8.17.0","v8.18.0"],"number":201403,"url":"https://github.com/elastic/kibana/pull/201403","mergeCommit":{"message":"[Profiling
x APM Integration] Use both host.hostname or host.name and container.id
to correlate profiling data on APM (#201403)\n\ncloses
https://github.com/elastic/kibana/issues/180036\r\n\r\nThe logic now,
first checks if there are `container.ids` on the selected\r\nservice, if
not, it falls back to the `host.name` or `host.hostname`.\r\n\r\n##
container.id\r\n<img width=\"1320\" alt=\"Screenshot 2024-11-25 at 10 53
44\"\r\nsrc=\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\">\r\n<img
width=\"1300\" alt=\"Screenshot 2024-11-25 at 10 53
55\"\r\nsrc=\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\">\r\n<img
width=\"1303\" alt=\"Screenshot 2024-11-25 at 11 06
55\"\r\nsrc=\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\">\r\n\r\n\r\n##
host.name\r\n<img width=\"1314\" alt=\"Screenshot 2024-11-25 at 11 02
49\"\r\nsrc=\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\">\r\n<img
width=\"1326\" alt=\"Screenshot 2024-11-25 at 11 03
00\"\r\nsrc=\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\">\r\n<img
width=\"1342\" alt=\"Screenshot 2024-11-25 at 11 03
08\"\r\nsrc=\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\">\r\n\r\n##
host.hostname\r\n<img width=\"1323\" alt=\"Screenshot 2024-11-25 at 11
04
24\"\r\nsrc=\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\">\r\n<img
width=\"1321\" alt=\"Screenshot 2024-11-25 at 11 04
34\"\r\nsrc=\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\">\r\n<img
width=\"1311\" alt=\"Screenshot 2024-11-25 at 11 04
51\"\r\nsrc=\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\">","sha":"ff97e5234b58599a503c76549f41afb6ce595dc5"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201403","number":201403,"mergeCommit":{"message":"[Profiling
x APM Integration] Use both host.hostname or host.name and container.id
to correlate profiling data on APM (#201403)\n\ncloses
https://github.com/elastic/kibana/issues/180036\r\n\r\nThe logic now,
first checks if there are `container.ids` on the selected\r\nservice, if
not, it falls back to the `host.name` or `host.hostname`.\r\n\r\n##
container.id\r\n<img width=\"1320\" alt=\"Screenshot 2024-11-25 at 10 53
44\"\r\nsrc=\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\">\r\n<img
width=\"1300\" alt=\"Screenshot 2024-11-25 at 10 53
55\"\r\nsrc=\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\">\r\n<img
width=\"1303\" alt=\"Screenshot 2024-11-25 at 11 06
55\"\r\nsrc=\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\">\r\n\r\n\r\n##
host.name\r\n<img width=\"1314\" alt=\"Screenshot 2024-11-25 at 11 02
49\"\r\nsrc=\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\">\r\n<img
width=\"1326\" alt=\"Screenshot 2024-11-25 at 11 03
00\"\r\nsrc=\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\">\r\n<img
width=\"1342\" alt=\"Screenshot 2024-11-25 at 11 03
08\"\r\nsrc=\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\">\r\n\r\n##
host.hostname\r\n<img width=\"1323\" alt=\"Screenshot 2024-11-25 at 11
04
24\"\r\nsrc=\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\">\r\n<img
width=\"1321\" alt=\"Screenshot 2024-11-25 at 11 04
34\"\r\nsrc=\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\">\r\n<img
width=\"1311\" alt=\"Screenshot 2024-11-25 at 11 04
51\"\r\nsrc=\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\">","sha":"ff97e5234b58599a503c76549f41afb6ce595dc5"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/201635","number":201635,"state":"MERGED","mergeCommit":{"sha":"86288e107d47e0e345bea9cfdde839e457712266","message":"[8.17]
[Profiling x APM Integration] Use both host.hostname or host.name and
container.id to correlate profiling data on APM (#201403) (#201635)\n\n#
Backport\n\nThis will backport the following commits from `main` to
`8.17`:\n- [[Profiling x APM Integration] Use both host.hostname or
host.name and\ncontainer.id to correlate profiling data on
APM\n(#201403)](https://github.com/elastic/kibana/pull/201403)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Cauê\nMarcondes\",\"email\":\"55978943+cauemarcondes@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2024-11-25T15:51:23Z\",\"message\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data on APM
(#201403)\\n\\ncloses\nhttps://github.com/elastic/kibana/issues/180036\\r\\n\\r\\nThe
logic now,\nfirst checks if there are `container.ids` on the
selected\\r\\nservice, if\nnot, it falls back to the `host.name` or
`host.hostname`.\\r\\n\\r\\n##\ncontainer.id\\r\\n<img
width=\\\"1320\\\" alt=\\\"Screenshot 2024-11-25 at 10
53\n44\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\\\">\\r\\n<img\nwidth=\\\"1300\\\"
alt=\\\"Screenshot 2024-11-25 at 10
53\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\\\">\\r\\n<img\nwidth=\\\"1303\\\"
alt=\\\"Screenshot 2024-11-25 at 11
06\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\\\">\\r\\n\\r\\n\\r\\n##\nhost.name\\r\\n<img
width=\\\"1314\\\" alt=\\\"Screenshot 2024-11-25 at 11
02\n49\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\\\">\\r\\n<img\nwidth=\\\"1326\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n00\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\\\">\\r\\n<img\nwidth=\\\"1342\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n08\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\\\">\\r\\n\\r\\n##\nhost.hostname\\r\\n<img
width=\\\"1323\\\" alt=\\\"Screenshot 2024-11-25 at
11\n04\n24\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\\\">\\r\\n<img\nwidth=\\\"1321\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n34\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\\\">\\r\\n<img\nwidth=\\\"1311\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n51\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\\\">\",\"sha\":\"ff97e5234b58599a503c76549f41afb6ce595dc5\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"v9.0.0\",\"backport:prev-minor\",\"ci:project-deploy-observability\",\"Team:obs-ux-infra_services\",\"v8.17.0\"],\"title\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data
on\nAPM\",\"number\":201403,\"url\":\"https://github.com/elastic/kibana/pull/201403\",\"mergeCommit\":{\"message\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data on APM
(#201403)\\n\\ncloses\nhttps://github.com/elastic/kibana/issues/180036\\r\\n\\r\\nThe
logic now,\nfirst checks if there are `container.ids` on the
selected\\r\\nservice, if\nnot, it falls back to the `host.name` or
`host.hostname`.\\r\\n\\r\\n##\ncontainer.id\\r\\n<img
width=\\\"1320\\\" alt=\\\"Screenshot 2024-11-25 at 10
53\n44\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\\\">\\r\\n<img\nwidth=\\\"1300\\\"
alt=\\\"Screenshot 2024-11-25 at 10
53\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\\\">\\r\\n<img\nwidth=\\\"1303\\\"
alt=\\\"Screenshot 2024-11-25 at 11
06\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\\\">\\r\\n\\r\\n\\r\\n##\nhost.name\\r\\n<img
width=\\\"1314\\\" alt=\\\"Screenshot 2024-11-25 at 11
02\n49\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\\\">\\r\\n<img\nwidth=\\\"1326\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n00\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\\\">\\r\\n<img\nwidth=\\\"1342\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n08\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\\\">\\r\\n\\r\\n##\nhost.hostname\\r\\n<img
width=\\\"1323\\\" alt=\\\"Screenshot 2024-11-25 at
11\n04\n24\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\\\">\\r\\n<img\nwidth=\\\"1321\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n34\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\\\">\\r\\n<img\nwidth=\\\"1311\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n51\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\\\">\",\"sha\":\"ff97e5234b58599a503c76549f41afb6ce595dc5\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.17\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201403\",\"number\":201403,\"mergeCommit\":{\"message\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data on APM
(#201403)\\n\\ncloses\nhttps://github.com/elastic/kibana/issues/180036\\r\\n\\r\\nThe
logic now,\nfirst checks if there are `container.ids` on the
selected\\r\\nservice, if\nnot, it falls back to the `host.name` or
`host.hostname`.\\r\\n\\r\\n##\ncontainer.id\\r\\n<img
width=\\\"1320\\\" alt=\\\"Screenshot 2024-11-25 at 10
53\n44\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\\\">\\r\\n<img\nwidth=\\\"1300\\\"
alt=\\\"Screenshot 2024-11-25 at 10
53\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\\\">\\r\\n<img\nwidth=\\\"1303\\\"
alt=\\\"Screenshot 2024-11-25 at 11
06\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\\\">\\r\\n\\r\\n\\r\\n##\nhost.name\\r\\n<img
width=\\\"1314\\\" alt=\\\"Screenshot 2024-11-25 at 11
02\n49\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\\\">\\r\\n<img\nwidth=\\\"1326\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n00\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\\\">\\r\\n<img\nwidth=\\\"1342\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n08\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\\\">\\r\\n\\r\\n##\nhost.hostname\\r\\n<img
width=\\\"1323\\\" alt=\\\"Screenshot 2024-11-25 at
11\n04\n24\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\\\">\\r\\n<img\nwidth=\\\"1321\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n34\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\\\">\\r\\n<img\nwidth=\\\"1311\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n51\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\\\">\",\"sha\":\"ff97e5234b58599a503c76549f41afb6ce595dc5\"}},{\"branch\":\"8.17\",\"label\":\"v8.17.0\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\nCo-authored-by:
Cauê Marcondes
<55978943+cauemarcondes@users.noreply.github.com>"}},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/201636","number":201636,"state":"MERGED","mergeCommit":{"sha":"522f57387ba55e7dd66eb7c5b525a110ab0db04c","message":"[8.x]
[Profiling x APM Integration] Use both host.hostname or host.name and
container.id to correlate profiling data on APM (#201403) (#201636)\n\n#
Backport\n\nThis will backport the following commits from `main` to
`8.x`:\n- [[Profiling x APM Integration] Use both host.hostname or
host.name and\ncontainer.id to correlate profiling data on
APM\n(#201403)](https://github.com/elastic/kibana/pull/201403)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Cauê\nMarcondes\",\"email\":\"55978943+cauemarcondes@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2024-11-25T15:51:23Z\",\"message\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data on APM
(#201403)\\n\\ncloses\nhttps://github.com/elastic/kibana/issues/180036\\r\\n\\r\\nThe
logic now,\nfirst checks if there are `container.ids` on the
selected\\r\\nservice, if\nnot, it falls back to the `host.name` or
`host.hostname`.\\r\\n\\r\\n##\ncontainer.id\\r\\n<img
width=\\\"1320\\\" alt=\\\"Screenshot 2024-11-25 at 10
53\n44\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\\\">\\r\\n<img\nwidth=\\\"1300\\\"
alt=\\\"Screenshot 2024-11-25 at 10
53\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\\\">\\r\\n<img\nwidth=\\\"1303\\\"
alt=\\\"Screenshot 2024-11-25 at 11
06\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\\\">\\r\\n\\r\\n\\r\\n##\nhost.name\\r\\n<img
width=\\\"1314\\\" alt=\\\"Screenshot 2024-11-25 at 11
02\n49\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\\\">\\r\\n<img\nwidth=\\\"1326\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n00\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\\\">\\r\\n<img\nwidth=\\\"1342\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n08\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\\\">\\r\\n\\r\\n##\nhost.hostname\\r\\n<img
width=\\\"1323\\\" alt=\\\"Screenshot 2024-11-25 at
11\n04\n24\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\\\">\\r\\n<img\nwidth=\\\"1321\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n34\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\\\">\\r\\n<img\nwidth=\\\"1311\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n51\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\\\">\",\"sha\":\"ff97e5234b58599a503c76549f41afb6ce595dc5\",\"branchLabelMapping\":{\"^v9.0.0$\":\"main\",\"^v8.18.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"v9.0.0\",\"backport:prev-minor\",\"ci:project-deploy-observability\",\"Team:obs-ux-infra_services\",\"v8.17.0\"],\"title\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data
on\nAPM\",\"number\":201403,\"url\":\"https://github.com/elastic/kibana/pull/201403\",\"mergeCommit\":{\"message\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data on APM
(#201403)\\n\\ncloses\nhttps://github.com/elastic/kibana/issues/180036\\r\\n\\r\\nThe
logic now,\nfirst checks if there are `container.ids` on the
selected\\r\\nservice, if\nnot, it falls back to the `host.name` or
`host.hostname`.\\r\\n\\r\\n##\ncontainer.id\\r\\n<img
width=\\\"1320\\\" alt=\\\"Screenshot 2024-11-25 at 10
53\n44\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\\\">\\r\\n<img\nwidth=\\\"1300\\\"
alt=\\\"Screenshot 2024-11-25 at 10
53\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\\\">\\r\\n<img\nwidth=\\\"1303\\\"
alt=\\\"Screenshot 2024-11-25 at 11
06\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\\\">\\r\\n\\r\\n\\r\\n##\nhost.name\\r\\n<img
width=\\\"1314\\\" alt=\\\"Screenshot 2024-11-25 at 11
02\n49\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\\\">\\r\\n<img\nwidth=\\\"1326\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n00\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\\\">\\r\\n<img\nwidth=\\\"1342\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n08\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\\\">\\r\\n\\r\\n##\nhost.hostname\\r\\n<img
width=\\\"1323\\\" alt=\\\"Screenshot 2024-11-25 at
11\n04\n24\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\\\">\\r\\n<img\nwidth=\\\"1321\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n34\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\\\">\\r\\n<img\nwidth=\\\"1311\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n51\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\\\">\",\"sha\":\"ff97e5234b58599a503c76549f41afb6ce595dc5\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.17\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.0.0\",\"branchLabelMappingKey\":\"^v9.0.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/201403\",\"number\":201403,\"mergeCommit\":{\"message\":\"[Profiling\nx
APM Integration] Use both host.hostname or host.name and
container.id\nto correlate profiling data on APM
(#201403)\\n\\ncloses\nhttps://github.com/elastic/kibana/issues/180036\\r\\n\\r\\nThe
logic now,\nfirst checks if there are `container.ids` on the
selected\\r\\nservice, if\nnot, it falls back to the `host.name` or
`host.hostname`.\\r\\n\\r\\n##\ncontainer.id\\r\\n<img
width=\\\"1320\\\" alt=\\\"Screenshot 2024-11-25 at 10
53\n44\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/b0515e7a-0319-4d88-bf39-3fbbba3ad957\\\">\\r\\n<img\nwidth=\\\"1300\\\"
alt=\\\"Screenshot 2024-11-25 at 10
53\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/66ceacfd-dc36-4f18-bdfa-67f656d41d36\\\">\\r\\n<img\nwidth=\\\"1303\\\"
alt=\\\"Screenshot 2024-11-25 at 11
06\n55\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/57516d46-b2ee-41d4-9710-74a8b36124a9\\\">\\r\\n\\r\\n\\r\\n##\nhost.name\\r\\n<img
width=\\\"1314\\\" alt=\\\"Screenshot 2024-11-25 at 11
02\n49\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/5b7c0cdf-267a-4874-bb29-b9ddba8fb53f\\\">\\r\\n<img\nwidth=\\\"1326\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n00\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/ab8eb946-4513-4b4b-8775-6b8be7fe6957\\\">\\r\\n<img\nwidth=\\\"1342\\\"
alt=\\\"Screenshot 2024-11-25 at 11
03\n08\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/80017155-5bcb-4154-91ca-52b154b945b2\\\">\\r\\n\\r\\n##\nhost.hostname\\r\\n<img
width=\\\"1323\\\" alt=\\\"Screenshot 2024-11-25 at
11\n04\n24\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/a2a8df63-4049-463e-8bc2-88b7c05c727b\\\">\\r\\n<img\nwidth=\\\"1321\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n34\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/29d6532c-8027-4eb4-88bd-46d32ea56353\\\">\\r\\n<img\nwidth=\\\"1311\\\"
alt=\\\"Screenshot 2024-11-25 at 11
04\n51\\\"\\r\\nsrc=\\\"https://github.com/user-attachments/assets/897bd883-014e-4d95-8ed6-d2263eceb490\\\">\",\"sha\":\"ff97e5234b58599a503c76549f41afb6ce595dc5\"}},{\"branch\":\"8.17\",\"label\":\"v8.17.0\",\"branchLabelMappingKey\":\"^v(\\\\d+).(\\\\d+).\\\\d+$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\nCo-authored-by:
Cauê Marcondes <55978943+cauemarcondes@users.noreply.github.com>"}}]}]
BACKPORT-->
2024-12-02 06:04:00 -06:00
Mike Côté
7ed9a663bc
[8.16] Set refresh according to stateful vs stateless when indexing alert documents (#201209) (#202222)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Set refresh according to stateful vs stateless when indexing alert
documents (#201209)](https://github.com/elastic/kibana/pull/201209)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Mike
Côté","email":"mikecote@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-11-28T17:10:56Z","message":"Set
refresh according to stateful vs stateless when indexing alert documents
(#201209)\n\nIn this PR, I'm making the change so when Kibana is running
with\r\nElasticsearch stateful we set refresh to `wait_for` (instead of
`true`)\r\nso we are not putting too much pressure on the Elasticsearch
indices\r\nwhen under load.\r\n\r\n## To verify\r\n\r\nVery using the
Cloud deployment and Serverless project created from
this\r\nPR\r\n\r\n1. Create an always firing ES Query rule\r\n2. Create
an always firing security detection rule w/ alert suppression\r\n3.
Verify the ECH cluster logs and observe `*** Refresh value
when\r\nindexing alerts: wait_for` and `*** Rule registry - refresh
value when\r\nindexing alerts: wait_for` messages\r\n4. Verify the
serverless project logs on QA overview and observe `***\r\nRefresh value
when indexing alerts: true` and `*** Rule registry -\r\nrefresh value
when indexing alerts: true` messages\r\n\r\n## To-Do\r\n\r\n- [x] Revert
commit\r\n7c19b458e6\r\nthat
was added for testing purposes\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"a4cb330af2d414e383d75efce526513171098ece","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Alerting","release_note:skip","Team:ResponseOps","v9.0.0","ci:project-deploy-observability","Team:obs-ux-management","backport:version","v8.17.0","v8.16.1"],"number":201209,"url":"https://github.com/elastic/kibana/pull/201209","mergeCommit":{"message":"Set
refresh according to stateful vs stateless when indexing alert documents
(#201209)\n\nIn this PR, I'm making the change so when Kibana is running
with\r\nElasticsearch stateful we set refresh to `wait_for` (instead of
`true`)\r\nso we are not putting too much pressure on the Elasticsearch
indices\r\nwhen under load.\r\n\r\n## To verify\r\n\r\nVery using the
Cloud deployment and Serverless project created from
this\r\nPR\r\n\r\n1. Create an always firing ES Query rule\r\n2. Create
an always firing security detection rule w/ alert suppression\r\n3.
Verify the ECH cluster logs and observe `*** Refresh value
when\r\nindexing alerts: wait_for` and `*** Rule registry - refresh
value when\r\nindexing alerts: wait_for` messages\r\n4. Verify the
serverless project logs on QA overview and observe `***\r\nRefresh value
when indexing alerts: true` and `*** Rule registry -\r\nrefresh value
when indexing alerts: true` messages\r\n\r\n## To-Do\r\n\r\n- [x] Revert
commit\r\n7c19b458e6\r\nthat
was added for testing purposes\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"a4cb330af2d414e383d75efce526513171098ece"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201209","number":201209,"mergeCommit":{"message":"Set
refresh according to stateful vs stateless when indexing alert documents
(#201209)\n\nIn this PR, I'm making the change so when Kibana is running
with\r\nElasticsearch stateful we set refresh to `wait_for` (instead of
`true`)\r\nso we are not putting too much pressure on the Elasticsearch
indices\r\nwhen under load.\r\n\r\n## To verify\r\n\r\nVery using the
Cloud deployment and Serverless project created from
this\r\nPR\r\n\r\n1. Create an always firing ES Query rule\r\n2. Create
an always firing security detection rule w/ alert suppression\r\n3.
Verify the ECH cluster logs and observe `*** Refresh value
when\r\nindexing alerts: wait_for` and `*** Rule registry - refresh
value when\r\nindexing alerts: wait_for` messages\r\n4. Verify the
serverless project logs on QA overview and observe `***\r\nRefresh value
when indexing alerts: true` and `*** Rule registry -\r\nrefresh value
when indexing alerts: true` messages\r\n\r\n## To-Do\r\n\r\n- [x] Revert
commit\r\n7c19b458e6\r\nthat
was added for testing purposes\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"a4cb330af2d414e383d75efce526513171098ece"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.1","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-11-29 07:45:23 -06:00
Kibana Machine
60efa2c292
[8.16] [Fleet] Fix agent policy mappings for space awareness (#201689) (#202239)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Fleet] Fix agent policy mappings for space awareness
(#201689)](https://github.com/elastic/kibana/pull/201689)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Nicolas
Chaulet","email":"nicolas.chaulet@elastic.co"},"sourceCommit":{"committedDate":"2024-11-28T22:11:10Z","message":"[Fleet]
Fix agent policy mappings for space awareness
(#201689)","sha":"721b4beb1ae7f12171a34d50ba6068b8c2d7288e","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Fleet","v9.0.0","backport:prev-minor","v8.17.0","v8.16.2"],"title":"[Fleet]
Fix agent policy mappings for space
awareness","number":201689,"url":"https://github.com/elastic/kibana/pull/201689","mergeCommit":{"message":"[Fleet]
Fix agent policy mappings for space awareness
(#201689)","sha":"721b4beb1ae7f12171a34d50ba6068b8c2d7288e"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201689","number":201689,"mergeCommit":{"message":"[Fleet]
Fix agent policy mappings for space awareness
(#201689)","sha":"721b4beb1ae7f12171a34d50ba6068b8c2d7288e"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Nicolas Chaulet <nicolas.chaulet@elastic.co>
2024-11-28 17:56:41 -06:00
Kibana Machine
2e1ed36c0a
[8.16] [ML] Trained Models: Show deployment stats for unallocated deployments (#202005) (#202166)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ML] Trained Models: Show deployment stats for unallocated
deployments (#202005)](https://github.com/elastic/kibana/pull/202005)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Dima
Arnautov","email":"dmitrii.arnautov@elastic.co"},"sourceCommit":{"committedDate":"2024-11-28T13:22:31Z","message":"[ML]
Trained Models: Show deployment stats for unallocated deployments
(#202005)\n\n## Summary\r\n\r\nFixes #201930 \r\n\r\nShow deployment on
the Deployent stats table even if it hasn't been\r\nallocated to any
node yet.\r\n\r\n\r\n<img width=\"875\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/858041fd-16d4-44f3-8d13-1ad45550452e\">","sha":"c06adbc8ec55cb211aba6a154f8d740b25c2b9c0","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix",":ml","v9.0.0","Feature:3rd
Party
Models","Team:ML","ci:cloud-deploy","backport:version","v8.17.0","v8.18.0","v8.16.2"],"title":"[ML]
Trained Models: Show deployment stats for unallocated deployments
","number":202005,"url":"https://github.com/elastic/kibana/pull/202005","mergeCommit":{"message":"[ML]
Trained Models: Show deployment stats for unallocated deployments
(#202005)\n\n## Summary\r\n\r\nFixes #201930 \r\n\r\nShow deployment on
the Deployent stats table even if it hasn't been\r\nallocated to any
node yet.\r\n\r\n\r\n<img width=\"875\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/858041fd-16d4-44f3-8d13-1ad45550452e\">","sha":"c06adbc8ec55cb211aba6a154f8d740b25c2b9c0"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202005","number":202005,"mergeCommit":{"message":"[ML]
Trained Models: Show deployment stats for unallocated deployments
(#202005)\n\n## Summary\r\n\r\nFixes #201930 \r\n\r\nShow deployment on
the Deployent stats table even if it hasn't been\r\nallocated to any
node yet.\r\n\r\n\r\n<img width=\"875\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/858041fd-16d4-44f3-8d13-1ad45550452e\">","sha":"c06adbc8ec55cb211aba6a154f8d740b25c2b9c0"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Dima Arnautov <dmitrii.arnautov@elastic.co>
2024-11-28 09:18:14 -06:00
Jean-Louis Leysens
1796fcd71c
[8.16] [UA] Update wizard copy to callout "x.last" (#201633) (#202112)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[UA] Update wizard copy to callout "x.last"
(#201633)](https://github.com/elastic/kibana/pull/201633)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jean-Louis
Leysens","email":"jeanlouis.leysens@elastic.co"},"sourceCommit":{"committedDate":"2024-11-27T14:42:01Z","message":"[UA]
Update wizard copy to callout \"x.last\" (#201633)\n\n##
Summary\r\n\r\nWe want to make sure users for the upgrade assistant are
aware that the\r\nonly way to safely perform a major version upgrade is
to upgrade to the\r\nlatest minor of the major they are
on.\r\n\r\n\r\n### Current\r\n<img width=\"1258\" alt=\"Screenshot
2024-11-25 at 16 44
37\"\r\nsrc=\"https://github.com/user-attachments/assets/ad114e44-82f4-4afd-98b4-0fe307c8175b\">\r\n\r\n###
Next\r\n\r\n<img width=\"1265\" alt=\"Screenshot 2024-11-27 at 13 52
30\"\r\nsrc=\"https://github.com/user-attachments/assets/b02b54a0-cb9e-439e-9218-f1ebe813c1fa\">\r\n\r\n\r\nRelated
https://github.com/elastic/kibana/issues/201377\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] If a plugin
configuration key changed, check if it needs to be\r\nallowlisted in the
cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\r\nchanges have been approved by the breaking-change committee.
The\r\n`release_note:breaking` label should be applied in these
situations.\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] The PR description includes
the appropriate Release Notes section,\r\nand the correct
`release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n###
Identify risks\r\n\r\nDoes this PR introduce any risks? For example,
consider risks like hard\r\nto test bugs, performance regression,
potential of data loss.\r\n\r\nDescribe the risk, its severity, and
mitigation for each identified\r\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\r\n\r\n- [ ] [See some
risk\r\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\r\n-
[ ]
...","sha":"e3c532b54a1e79c92e4df0c7006fccec61f40bf1","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Core","Team:Kibana
Management","release_note:skip","Feature:Upgrade
Assistant","v9.0.0","backport:version","v8.17.0","v7.17.26","v8.18.0","v8.15.5","v8.16.2"],"number":201633,"url":"https://github.com/elastic/kibana/pull/201633","mergeCommit":{"message":"[UA]
Update wizard copy to callout \"x.last\" (#201633)\n\n##
Summary\r\n\r\nWe want to make sure users for the upgrade assistant are
aware that the\r\nonly way to safely perform a major version upgrade is
to upgrade to the\r\nlatest minor of the major they are
on.\r\n\r\n\r\n### Current\r\n<img width=\"1258\" alt=\"Screenshot
2024-11-25 at 16 44
37\"\r\nsrc=\"https://github.com/user-attachments/assets/ad114e44-82f4-4afd-98b4-0fe307c8175b\">\r\n\r\n###
Next\r\n\r\n<img width=\"1265\" alt=\"Screenshot 2024-11-27 at 13 52
30\"\r\nsrc=\"https://github.com/user-attachments/assets/b02b54a0-cb9e-439e-9218-f1ebe813c1fa\">\r\n\r\n\r\nRelated
https://github.com/elastic/kibana/issues/201377\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] If a plugin
configuration key changed, check if it needs to be\r\nallowlisted in the
cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\r\nchanges have been approved by the breaking-change committee.
The\r\n`release_note:breaking` label should be applied in these
situations.\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] The PR description includes
the appropriate Release Notes section,\r\nand the correct
`release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n###
Identify risks\r\n\r\nDoes this PR introduce any risks? For example,
consider risks like hard\r\nto test bugs, performance regression,
potential of data loss.\r\n\r\nDescribe the risk, its severity, and
mitigation for each identified\r\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\r\n\r\n- [ ] [See some
risk\r\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\r\n-
[ ]
...","sha":"e3c532b54a1e79c92e4df0c7006fccec61f40bf1"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","7.17","8.x","8.15","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","labelRegex":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201633","number":201633,"mergeCommit":{"message":"[UA]
Update wizard copy to callout \"x.last\" (#201633)\n\n##
Summary\r\n\r\nWe want to make sure users for the upgrade assistant are
aware that the\r\nonly way to safely perform a major version upgrade is
to upgrade to the\r\nlatest minor of the major they are
on.\r\n\r\n\r\n### Current\r\n<img width=\"1258\" alt=\"Screenshot
2024-11-25 at 16 44
37\"\r\nsrc=\"https://github.com/user-attachments/assets/ad114e44-82f4-4afd-98b4-0fe307c8175b\">\r\n\r\n###
Next\r\n\r\n<img width=\"1265\" alt=\"Screenshot 2024-11-27 at 13 52
30\"\r\nsrc=\"https://github.com/user-attachments/assets/b02b54a0-cb9e-439e-9218-f1ebe813c1fa\">\r\n\r\n\r\nRelated
https://github.com/elastic/kibana/issues/201377\r\n\r\n###
Checklist\r\n\r\nCheck the PR satisfies following conditions.
\r\n\r\nReviewers should verify this PR satisfies this list as
well.\r\n\r\n- [ ] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n-
[
]\r\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\r\nwas
added for features that require explanation or tutorials\r\n- [ ] [Unit
or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [ ] If a plugin
configuration key changed, check if it needs to be\r\nallowlisted in the
cloud and added to the
[docker\r\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\r\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\r\nchanges have been approved by the breaking-change committee.
The\r\n`release_note:breaking` label should be applied in these
situations.\r\n- [ ] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests changed\r\n- [ ] The PR description includes
the appropriate Release Notes section,\r\nand the correct
`release_note:*` label is applied per
the\r\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\r\n\r\n###
Identify risks\r\n\r\nDoes this PR introduce any risks? For example,
consider risks like hard\r\nto test bugs, performance regression,
potential of data loss.\r\n\r\nDescribe the risk, its severity, and
mitigation for each identified\r\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\r\n\r\n- [ ] [See some
risk\r\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\r\n-
[ ]
...","sha":"e3c532b54a1e79c92e4df0c7006fccec61f40bf1"}},{"branch":"8.17","label":"v8.17.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"7.17","label":"v7.17.26","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","labelRegex":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.15","label":"v8.15.5","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
2024-11-28 13:48:04 +01:00
Kibana Machine
c3f9d61643
[8.16] [Stack Monitoring] Switch Logs Explorer locator for Discover locator in Stack Monitoring (#200546) (#202136)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Stack Monitoring] Switch Logs Explorer locator for Discover locator
in Stack Monitoring
(#200546)](https://github.com/elastic/kibana/pull/200546)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Kerry
Gallagher","email":"kerry.gallagher@elastic.co"},"sourceCommit":{"committedDate":"2024-11-28T10:52:38Z","message":"[Stack
Monitoring] Switch Logs Explorer locator for Discover locator in Stack
Monitoring (#200546)\n\n## Summary\r\n\r\nCloses
https://github.com/elastic/kibana/issues/200256
and\r\nhttps://github.com/elastic/kibana/issues/200218.\r\n\r\n##
Overview of changes\r\n\r\n- The call to
`logsShared.logViews.defineInternalLogView()` is removed\r\nas Log Views
will be deprecated.\r\n- The logs indices that were previously defined
via\r\n`defineInternalLogView()` are now exposed
via\r\n`externalConfig.logsIndices`\r\n- As part of this change
`ui.logs` from `config` is now exposed to\r\nbrowser. Given this is just
an index pattern I don't believe there are\r\nany security concerns
here.\r\n- `getIndexPatterns()` has been moved to common (this makes it
look like\r\nthere's a lot of file changes here).\r\n- The Logs Explorer
locator is swapped for the Discover locator using an\r\nad-hoc data
view.\r\n - This is hidden if Discover isn't available.\r\n\r\nThe
behaviour here should match exactly what we had before, as the
same\r\nindices are constructed from `getIndexPatterns()` and we apply
the same\r\n`query`.\r\n\r\nStack Monitoring reviewer: The path changes
from moving\r\n`getIndexPatterns()` were automated so there shouldn't be
any issues,\r\nbut given it's used extensively please check everything
works as\r\nexpected.\r\n\r\n## Screenshots\r\n\r\n![Screenshot
2024-11-18 at 11
59\r\n45](https://github.com/user-attachments/assets/59b61421-c6f9-4df0-87c5-c67ca732c89f)\r\n\r\n![Screenshot
2024-11-18 at 12
00\r\n15](https://github.com/user-attachments/assets/5a934883-1c35-4551-a045-705b28dfcbb7)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"3e538d67c1378dc438d9f81cb603a7965026ac0c","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:obs-ux-logs","backport:version","v8.18.0","v8.16.2"],"title":"[Stack
Monitoring] Switch Logs Explorer locator for Discover locator in Stack
Monitoring","number":200546,"url":"https://github.com/elastic/kibana/pull/200546","mergeCommit":{"message":"[Stack
Monitoring] Switch Logs Explorer locator for Discover locator in Stack
Monitoring (#200546)\n\n## Summary\r\n\r\nCloses
https://github.com/elastic/kibana/issues/200256
and\r\nhttps://github.com/elastic/kibana/issues/200218.\r\n\r\n##
Overview of changes\r\n\r\n- The call to
`logsShared.logViews.defineInternalLogView()` is removed\r\nas Log Views
will be deprecated.\r\n- The logs indices that were previously defined
via\r\n`defineInternalLogView()` are now exposed
via\r\n`externalConfig.logsIndices`\r\n- As part of this change
`ui.logs` from `config` is now exposed to\r\nbrowser. Given this is just
an index pattern I don't believe there are\r\nany security concerns
here.\r\n- `getIndexPatterns()` has been moved to common (this makes it
look like\r\nthere's a lot of file changes here).\r\n- The Logs Explorer
locator is swapped for the Discover locator using an\r\nad-hoc data
view.\r\n - This is hidden if Discover isn't available.\r\n\r\nThe
behaviour here should match exactly what we had before, as the
same\r\nindices are constructed from `getIndexPatterns()` and we apply
the same\r\n`query`.\r\n\r\nStack Monitoring reviewer: The path changes
from moving\r\n`getIndexPatterns()` were automated so there shouldn't be
any issues,\r\nbut given it's used extensively please check everything
works as\r\nexpected.\r\n\r\n## Screenshots\r\n\r\n![Screenshot
2024-11-18 at 11
59\r\n45](https://github.com/user-attachments/assets/59b61421-c6f9-4df0-87c5-c67ca732c89f)\r\n\r\n![Screenshot
2024-11-18 at 12
00\r\n15](https://github.com/user-attachments/assets/5a934883-1c35-4551-a045-705b28dfcbb7)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"3e538d67c1378dc438d9f81cb603a7965026ac0c"}},"sourceBranch":"main","suggestedTargetBranches":["8.x","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/200546","number":200546,"mergeCommit":{"message":"[Stack
Monitoring] Switch Logs Explorer locator for Discover locator in Stack
Monitoring (#200546)\n\n## Summary\r\n\r\nCloses
https://github.com/elastic/kibana/issues/200256
and\r\nhttps://github.com/elastic/kibana/issues/200218.\r\n\r\n##
Overview of changes\r\n\r\n- The call to
`logsShared.logViews.defineInternalLogView()` is removed\r\nas Log Views
will be deprecated.\r\n- The logs indices that were previously defined
via\r\n`defineInternalLogView()` are now exposed
via\r\n`externalConfig.logsIndices`\r\n- As part of this change
`ui.logs` from `config` is now exposed to\r\nbrowser. Given this is just
an index pattern I don't believe there are\r\nany security concerns
here.\r\n- `getIndexPatterns()` has been moved to common (this makes it
look like\r\nthere's a lot of file changes here).\r\n- The Logs Explorer
locator is swapped for the Discover locator using an\r\nad-hoc data
view.\r\n - This is hidden if Discover isn't available.\r\n\r\nThe
behaviour here should match exactly what we had before, as the
same\r\nindices are constructed from `getIndexPatterns()` and we apply
the same\r\n`query`.\r\n\r\nStack Monitoring reviewer: The path changes
from moving\r\n`getIndexPatterns()` were automated so there shouldn't be
any issues,\r\nbut given it's used extensively please check everything
works as\r\nexpected.\r\n\r\n## Screenshots\r\n\r\n![Screenshot
2024-11-18 at 11
59\r\n45](https://github.com/user-attachments/assets/59b61421-c6f9-4df0-87c5-c67ca732c89f)\r\n\r\n![Screenshot
2024-11-18 at 12
00\r\n15](https://github.com/user-attachments/assets/5a934883-1c35-4551-a045-705b28dfcbb7)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"3e538d67c1378dc438d9f81cb603a7965026ac0c"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Kerry Gallagher <kerry.gallagher@elastic.co>
2024-11-28 06:47:46 -06:00
Kibana Machine
1ce29a7a86
[8.16] [Stack Monitoring] Do not add empty include array when retrieving logstash pipelines (#202039) (#202099)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Stack Monitoring] Do not add empty include array when retrieving
logstash pipelines
(#202039)](https://github.com/elastic/kibana/pull/202039)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Valentin
Crettaz","email":"valentin.crettaz@elastic.co"},"sourceCommit":{"committedDate":"2024-11-28T04:05:51Z","message":"[Stack
Monitoring] Do not add empty include array when retrieving logstash
pipelines (#202039)\n\n## Summary\r\n\r\nThis PR fixes the query that
retrieves Logstash pipeline stats and\r\nmetrics to be displayed in
Stack Monitoring. The problem with the\r\nexisting query is that a
`terms` aggregation contains an empty\r\n`\"include\": []` filtering
array, but that has the nasty effect of\r\nexcluding everything and not
returning anything, hence the screen is\r\nempty.\r\n\r\nThe fix is to
only add the `include` array if it's not empty. The PR\r\nalso fixes a
wrong field name used in a cardinality
aggregation:\r\n`logstash.node.stats.logstash.uuid` instead
of\r\n`logstash_stats.logstash.uuid`\r\n\r\nCloses
https://github.com/elastic/kibana/issues/202020\r\n\r\n###
Checklist\r\n\r\n- [X] This was checked for breaking HTTP API changes,
and any breaking\r\nchanges have been approved by the breaking-change
committee. The\r\n`release_note:breaking` label should be applied in
these situations.\r\n\r\n---------\r\n\r\nCo-authored-by: Chris Earle
<chris.earle@elastic.co>","sha":"b7e46bdae9da7ac6ea7346cd3450597796995eb5","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["backport","Team:Monitoring","release_note:skip","Feature:Stack
Monitoring","v9.0.0","backport:version","v8.17.0","v8.18.0","v8.16.2","v8.15.6"],"title":"[Stack
Monitoring] Do not add empty include array when retrieving logstash
pipelines","number":202039,"url":"https://github.com/elastic/kibana/pull/202039","mergeCommit":{"message":"[Stack
Monitoring] Do not add empty include array when retrieving logstash
pipelines (#202039)\n\n## Summary\r\n\r\nThis PR fixes the query that
retrieves Logstash pipeline stats and\r\nmetrics to be displayed in
Stack Monitoring. The problem with the\r\nexisting query is that a
`terms` aggregation contains an empty\r\n`\"include\": []` filtering
array, but that has the nasty effect of\r\nexcluding everything and not
returning anything, hence the screen is\r\nempty.\r\n\r\nThe fix is to
only add the `include` array if it's not empty. The PR\r\nalso fixes a
wrong field name used in a cardinality
aggregation:\r\n`logstash.node.stats.logstash.uuid` instead
of\r\n`logstash_stats.logstash.uuid`\r\n\r\nCloses
https://github.com/elastic/kibana/issues/202020\r\n\r\n###
Checklist\r\n\r\n- [X] This was checked for breaking HTTP API changes,
and any breaking\r\nchanges have been approved by the breaking-change
committee. The\r\n`release_note:breaking` label should be applied in
these situations.\r\n\r\n---------\r\n\r\nCo-authored-by: Chris Earle
<chris.earle@elastic.co>","sha":"b7e46bdae9da7ac6ea7346cd3450597796995eb5"}},"sourceBranch":"main","suggestedTargetBranches":["8.17","8.x","8.16","8.15"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/202039","number":202039,"mergeCommit":{"message":"[Stack
Monitoring] Do not add empty include array when retrieving logstash
pipelines (#202039)\n\n## Summary\r\n\r\nThis PR fixes the query that
retrieves Logstash pipeline stats and\r\nmetrics to be displayed in
Stack Monitoring. The problem with the\r\nexisting query is that a
`terms` aggregation contains an empty\r\n`\"include\": []` filtering
array, but that has the nasty effect of\r\nexcluding everything and not
returning anything, hence the screen is\r\nempty.\r\n\r\nThe fix is to
only add the `include` array if it's not empty. The PR\r\nalso fixes a
wrong field name used in a cardinality
aggregation:\r\n`logstash.node.stats.logstash.uuid` instead
of\r\n`logstash_stats.logstash.uuid`\r\n\r\nCloses
https://github.com/elastic/kibana/issues/202020\r\n\r\n###
Checklist\r\n\r\n- [X] This was checked for breaking HTTP API changes,
and any breaking\r\nchanges have been approved by the breaking-change
committee. The\r\n`release_note:breaking` label should be applied in
these situations.\r\n\r\n---------\r\n\r\nCo-authored-by: Chris Earle
<chris.earle@elastic.co>","sha":"b7e46bdae9da7ac6ea7346cd3450597796995eb5"}},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.15","label":"v8.15.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Valentin Crettaz <valentin.crettaz@elastic.co>
2024-11-28 00:24:56 -06:00
Kibana Machine
bb1b99a4b2
[8.16] [Security Solution] Fix code scanning alert no. 469: Prototype-polluting function (#201712) (#202080)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Fix code scanning alert no. 469:
Prototype-polluting function
(#201712)](https://github.com/elastic/kibana/pull/201712)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Kevin
Qualters","email":"56408403+kqualters-elastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-11-27T21:56:59Z","message":"[Security
Solution] Fix code scanning alert no. 469: Prototype-polluting function
(#201712)\n\nFixes\r\n[https://github.com/elastic/kibana/security/code-scanning/469](https://github.com/elastic/kibana/security/code-scanning/469)\r\n\r\nWhile
I don't think this is actually an issue, as source is only a set\r\nof
ecs fields that ultimately are defined in the code and not
controlled\r\nby the
user\r\nhttps://github.com/elastic/kibana/blob/main/packages/kbn-alerts-as-data-utils/src/search/security/fields.ts#L47\r\nThis
suggested fix doesn't have any negative impact/makes it future\r\nproof
if ever used elsewhere.\r\n\r\nTo fix the prototype pollution issue in
the `deepMerge` function, we\r\nneed to ensure that the function does
not copy the special properties\r\n`__proto__` and `constructor`.
Additionally, we should verify that the\r\nproperties being copied are
own properties of the `source` object. This\r\ncan be achieved by adding
checks within the `deepMerge` function.\r\n\r\n\r\n_Suggested fixes
powered by Copilot Autofix. Review carefully
before\r\nmerging._\r\n\r\n---------\r\n\r\nCo-authored-by: Copilot
Autofix powered by AI
<62310815+github-advanced-security[bot]@users.noreply.github.com>\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"bcbf85a71f0b30e431a9dc94f3a04773e2f43623","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat
Hunting:Investigations","backport:prev-major"],"title":"[Security
Solution] Fix code scanning alert no. 469: Prototype-polluting
function","number":201712,"url":"https://github.com/elastic/kibana/pull/201712","mergeCommit":{"message":"[Security
Solution] Fix code scanning alert no. 469: Prototype-polluting function
(#201712)\n\nFixes\r\n[https://github.com/elastic/kibana/security/code-scanning/469](https://github.com/elastic/kibana/security/code-scanning/469)\r\n\r\nWhile
I don't think this is actually an issue, as source is only a set\r\nof
ecs fields that ultimately are defined in the code and not
controlled\r\nby the
user\r\nhttps://github.com/elastic/kibana/blob/main/packages/kbn-alerts-as-data-utils/src/search/security/fields.ts#L47\r\nThis
suggested fix doesn't have any negative impact/makes it future\r\nproof
if ever used elsewhere.\r\n\r\nTo fix the prototype pollution issue in
the `deepMerge` function, we\r\nneed to ensure that the function does
not copy the special properties\r\n`__proto__` and `constructor`.
Additionally, we should verify that the\r\nproperties being copied are
own properties of the `source` object. This\r\ncan be achieved by adding
checks within the `deepMerge` function.\r\n\r\n\r\n_Suggested fixes
powered by Copilot Autofix. Review carefully
before\r\nmerging._\r\n\r\n---------\r\n\r\nCo-authored-by: Copilot
Autofix powered by AI
<62310815+github-advanced-security[bot]@users.noreply.github.com>\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"bcbf85a71f0b30e431a9dc94f3a04773e2f43623"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/201712","number":201712,"mergeCommit":{"message":"[Security
Solution] Fix code scanning alert no. 469: Prototype-polluting function
(#201712)\n\nFixes\r\n[https://github.com/elastic/kibana/security/code-scanning/469](https://github.com/elastic/kibana/security/code-scanning/469)\r\n\r\nWhile
I don't think this is actually an issue, as source is only a set\r\nof
ecs fields that ultimately are defined in the code and not
controlled\r\nby the
user\r\nhttps://github.com/elastic/kibana/blob/main/packages/kbn-alerts-as-data-utils/src/search/security/fields.ts#L47\r\nThis
suggested fix doesn't have any negative impact/makes it future\r\nproof
if ever used elsewhere.\r\n\r\nTo fix the prototype pollution issue in
the `deepMerge` function, we\r\nneed to ensure that the function does
not copy the special properties\r\n`__proto__` and `constructor`.
Additionally, we should verify that the\r\nproperties being copied are
own properties of the `source` object. This\r\ncan be achieved by adding
checks within the `deepMerge` function.\r\n\r\n\r\n_Suggested fixes
powered by Copilot Autofix. Review carefully
before\r\nmerging._\r\n\r\n---------\r\n\r\nCo-authored-by: Copilot
Autofix powered by AI
<62310815+github-advanced-security[bot]@users.noreply.github.com>\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"bcbf85a71f0b30e431a9dc94f3a04773e2f43623"}}]}]
BACKPORT-->

Co-authored-by: Kevin Qualters <56408403+kqualters-elastic@users.noreply.github.com>
2024-11-27 17:43:31 -06:00