Commit graph

43281 commits

Author SHA1 Message Date
Kibana Machine
688008c1dd
[8.16] [Security Solution] Fix redux action being fired because of unused react-router value (#217055) (#218452)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Fix redux action being fired because of unused
react-router value
(#217055)](https://github.com/elastic/kibana/pull/217055)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Kevin
Qualters","email":"56408403+kqualters-elastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-16T14:13:44Z","message":"[Security
Solution] Fix redux action being fired because of unused react-router
value (#217055)\n\n## Summary\n\nThis pr fixes a bug with the
RouteCapture component, used at a high\nlevel in the security solution
component tree, to reflect url changes\ninto redux. The code previously
used the full result of\n'react-router-dom' 's useLocation hook as the
payload, which contains 4\nparameters, pathname, search, hash that we
make use of, and a 4th that\nwas added sometime later by the library
that is essentially a random id\ngenerated every time the hook is
called, called key. We have never used\nthis, and it was being
inadvertently copied into the redux state, and\nalso causing some other
actions or hooks based listeners to run I think\nas well.\n\nBelow is
the contrived example of going from the home page to an empty\nalerts
page, and you can see 4 actions in the after, and 5 in the\nbefore, with
1 updating only the key. May reduce more unneeded actions\nwith more
going on in the page, but exactly how many is not
known.\nBefore:\n\n![image](ebd75055-4e17-497b-bed2-a5fd58c5c92f)\n\n\n###
Checklist\n\n- [ ] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"c277812ffe3e74eb9bc0733a538bd78ea9b95f58","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Threat
Hunting:Investigations","backport:all-open","v9.1.0"],"title":"[Security
Solution] Fix redux action being fired because of unused react-router
value","number":217055,"url":"https://github.com/elastic/kibana/pull/217055","mergeCommit":{"message":"[Security
Solution] Fix redux action being fired because of unused react-router
value (#217055)\n\n## Summary\n\nThis pr fixes a bug with the
RouteCapture component, used at a high\nlevel in the security solution
component tree, to reflect url changes\ninto redux. The code previously
used the full result of\n'react-router-dom' 's useLocation hook as the
payload, which contains 4\nparameters, pathname, search, hash that we
make use of, and a 4th that\nwas added sometime later by the library
that is essentially a random id\ngenerated every time the hook is
called, called key. We have never used\nthis, and it was being
inadvertently copied into the redux state, and\nalso causing some other
actions or hooks based listeners to run I think\nas well.\n\nBelow is
the contrived example of going from the home page to an empty\nalerts
page, and you can see 4 actions in the after, and 5 in the\nbefore, with
1 updating only the key. May reduce more unneeded actions\nwith more
going on in the page, but exactly how many is not
known.\nBefore:\n\n![image](ebd75055-4e17-497b-bed2-a5fd58c5c92f)\n\n\n###
Checklist\n\n- [ ] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"c277812ffe3e74eb9bc0733a538bd78ea9b95f58"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217055","number":217055,"mergeCommit":{"message":"[Security
Solution] Fix redux action being fired because of unused react-router
value (#217055)\n\n## Summary\n\nThis pr fixes a bug with the
RouteCapture component, used at a high\nlevel in the security solution
component tree, to reflect url changes\ninto redux. The code previously
used the full result of\n'react-router-dom' 's useLocation hook as the
payload, which contains 4\nparameters, pathname, search, hash that we
make use of, and a 4th that\nwas added sometime later by the library
that is essentially a random id\ngenerated every time the hook is
called, called key. We have never used\nthis, and it was being
inadvertently copied into the redux state, and\nalso causing some other
actions or hooks based listeners to run I think\nas well.\n\nBelow is
the contrived example of going from the home page to an empty\nalerts
page, and you can see 4 actions in the after, and 5 in the\nbefore, with
1 updating only the key. May reduce more unneeded actions\nwith more
going on in the page, but exactly how many is not
known.\nBefore:\n\n![image](ebd75055-4e17-497b-bed2-a5fd58c5c92f)\n\n\n###
Checklist\n\n- [ ] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"c277812ffe3e74eb9bc0733a538bd78ea9b95f58"}}]}]
BACKPORT-->

Co-authored-by: Kevin Qualters <56408403+kqualters-elastic@users.noreply.github.com>
2025-04-16 18:14:00 +02:00
Kibana Machine
22e3bc3fa8
[8.16] fix: [Analytics:Graph page]Dialog modal missing title from announcement (#217827) (#218420)
# Backport

This will backport the following commits from `main` to `8.16`:
- [fix: [Analytics:Graph page]Dialog modal missing title from
announcement (#217827)](https://github.com/elastic/kibana/pull/217827)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alexey
Antonov","email":"alexwizp@gmail.com"},"sourceCommit":{"committedDate":"2025-04-16T12:03:38Z","message":"fix:
[Analytics:Graph page]Dialog modal missing title from announcement
(#217827)\n\nCloses: #214760\n\n**Description**\nDialog modal, flyout,
field visible title should be announced for the\nusers, especially using
assistive technology to know what dialog modal,\nflyout opened, what
field is active and what is needed to enter in it.\n\n**Changes
made:**\n\n1. Set correct value for` aria-labelledby`
attr.","sha":"b91da375a3c965181e2b2ee6f899d42ee6dcc0f0","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Project:Accessibility","release_note:skip","backport:prev-major","v9.1.0"],"title":"fix:
[Analytics:Graph page]Dialog modal missing title from
announcement","number":217827,"url":"https://github.com/elastic/kibana/pull/217827","mergeCommit":{"message":"fix:
[Analytics:Graph page]Dialog modal missing title from announcement
(#217827)\n\nCloses: #214760\n\n**Description**\nDialog modal, flyout,
field visible title should be announced for the\nusers, especially using
assistive technology to know what dialog modal,\nflyout opened, what
field is active and what is needed to enter in it.\n\n**Changes
made:**\n\n1. Set correct value for` aria-labelledby`
attr.","sha":"b91da375a3c965181e2b2ee6f899d42ee6dcc0f0"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217827","number":217827,"mergeCommit":{"message":"fix:
[Analytics:Graph page]Dialog modal missing title from announcement
(#217827)\n\nCloses: #214760\n\n**Description**\nDialog modal, flyout,
field visible title should be announced for the\nusers, especially using
assistive technology to know what dialog modal,\nflyout opened, what
field is active and what is needed to enter in it.\n\n**Changes
made:**\n\n1. Set correct value for` aria-labelledby`
attr.","sha":"b91da375a3c965181e2b2ee6f899d42ee6dcc0f0"}}]}] BACKPORT-->

Co-authored-by: Alexey Antonov <alexwizp@gmail.com>
2025-04-16 16:09:41 +02:00
Kibana Machine
ea780a68d1
[8.16] [Custom threshold rule] Allow group for ip type fields !! (#216062) (#218334)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Custom threshold rule] Allow group for ip type fields !!
(#216062)](https://github.com/elastic/kibana/pull/216062)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"Shahzad","email":"shahzad31comp@gmail.com"},"sourceCommit":{"committedDate":"2025-04-15T18:15:02Z","message":"[Custom
threshold rule] Allow group for ip type fields !! (#216062)\n\nAllow
group by for ip fields !!\n\n---------\n\nCo-authored-by: Faisal Kanout
<faisal.kanout@elastic.co>\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"83f3d614ccb66bca3aa626a6db39c0f41eb1a9f1","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:all-open","Team:obs-ux-management","v9.1.0"],"title":"[Custom
threshold rule] Allow group for ip type fields
!!","number":216062,"url":"https://github.com/elastic/kibana/pull/216062","mergeCommit":{"message":"[Custom
threshold rule] Allow group for ip type fields !! (#216062)\n\nAllow
group by for ip fields !!\n\n---------\n\nCo-authored-by: Faisal Kanout
<faisal.kanout@elastic.co>\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"83f3d614ccb66bca3aa626a6db39c0f41eb1a9f1"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216062","number":216062,"mergeCommit":{"message":"[Custom
threshold rule] Allow group for ip type fields !! (#216062)\n\nAllow
group by for ip fields !!\n\n---------\n\nCo-authored-by: Faisal Kanout
<faisal.kanout@elastic.co>\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"83f3d614ccb66bca3aa626a6db39c0f41eb1a9f1"}}]}]
BACKPORT-->

Co-authored-by: Shahzad <shahzad31comp@gmail.com>
2025-04-15 22:15:09 +02:00
Kibana Machine
a67b352c42
[8.16] fix: [Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit model snapshot flyout missing title from announcement (#217831) (#218271)
# Backport

This will backport the following commits from `main` to `8.16`:
- [fix: [Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit
model snapshot flyout missing title from announcement
(#217831)](https://github.com/elastic/kibana/pull/217831)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alexey
Antonov","email":"alexwizp@gmail.com"},"sourceCommit":{"committedDate":"2025-04-15T13:38:48Z","message":"fix:
[Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit model
snapshot flyout missing title from announcement (#217831)\n\nCloses:
#216147\n\n**Description**\nDialog modal, flyout, field visible title
should be announced for the\nusers, especially using assistive
technology to know what dialog modal,\nflyout opened, what field is
active and what is needed to enter in it.\n\n**Changes made:**\n\n1.
Added` aria-labelledby={flyoutTitleId} `for mentioned
places","sha":"d47e77627ac594883969066205a0888bb5034efb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Project:Accessibility",":ml","Feature:Anomaly
Detection","release_note:skip","backport:prev-major","v9.1.0"],"title":"fix:
[Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit model
snapshot flyout missing title from
announcement","number":217831,"url":"https://github.com/elastic/kibana/pull/217831","mergeCommit":{"message":"fix:
[Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit model
snapshot flyout missing title from announcement (#217831)\n\nCloses:
#216147\n\n**Description**\nDialog modal, flyout, field visible title
should be announced for the\nusers, especially using assistive
technology to know what dialog modal,\nflyout opened, what field is
active and what is needed to enter in it.\n\n**Changes made:**\n\n1.
Added` aria-labelledby={flyoutTitleId} `for mentioned
places","sha":"d47e77627ac594883969066205a0888bb5034efb"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217831","number":217831,"mergeCommit":{"message":"fix:
[Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit model
snapshot flyout missing title from announcement (#217831)\n\nCloses:
#216147\n\n**Description**\nDialog modal, flyout, field visible title
should be announced for the\nusers, especially using assistive
technology to know what dialog modal,\nflyout opened, what field is
active and what is needed to enter in it.\n\n**Changes made:**\n\n1.
Added` aria-labelledby={flyoutTitleId} `for mentioned
places","sha":"d47e77627ac594883969066205a0888bb5034efb"}}]}]
BACKPORT-->

Co-authored-by: Alexey Antonov <alexwizp@gmail.com>
2025-04-15 17:44:52 +02:00
Kibana Machine
cf4d918a62
[8.16] fix: [ML] Data Frame Analytics: Analytics selection flyout missing title from announcement (#217666) (#218256)
# Backport

This will backport the following commits from `main` to `8.16`:
- [fix: [ML] Data Frame Analytics: Analytics selection flyout missing
title from announcement
(#217666)](https://github.com/elastic/kibana/pull/217666)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alexey
Antonov","email":"alexwizp@gmail.com"},"sourceCommit":{"committedDate":"2025-04-15T12:17:20Z","message":"fix:
[ML] Data Frame Analytics: Analytics selection flyout missing title from
announcement (#217666)\n\nCloses:
https://github.com/elastic/kibana/issues/217511\n\n**Description**\nDialog
modal, flyout, field visible title should be announced for the\nusers,
especially using assistive technology to know what dialog modal,\nflyout
opened, what field is active and what is needed to enter in
it.\n\n**Changes made:**\n1. Set correct value for `aria-labelledby`
attr.","sha":"4399248cf013552902af726e61b0da5b2ed23b2e","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Project:Accessibility",":ml","release_note:skip","Feature:Data
Frame Analytics","backport:prev-major","v9.1.0"],"title":"fix: [ML] Data
Frame Analytics: Analytics selection flyout missing title from
announcement","number":217666,"url":"https://github.com/elastic/kibana/pull/217666","mergeCommit":{"message":"fix:
[ML] Data Frame Analytics: Analytics selection flyout missing title from
announcement (#217666)\n\nCloses:
https://github.com/elastic/kibana/issues/217511\n\n**Description**\nDialog
modal, flyout, field visible title should be announced for the\nusers,
especially using assistive technology to know what dialog modal,\nflyout
opened, what field is active and what is needed to enter in
it.\n\n**Changes made:**\n1. Set correct value for `aria-labelledby`
attr.","sha":"4399248cf013552902af726e61b0da5b2ed23b2e"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217666","number":217666,"mergeCommit":{"message":"fix:
[ML] Data Frame Analytics: Analytics selection flyout missing title from
announcement (#217666)\n\nCloses:
https://github.com/elastic/kibana/issues/217511\n\n**Description**\nDialog
modal, flyout, field visible title should be announced for the\nusers,
especially using assistive technology to know what dialog modal,\nflyout
opened, what field is active and what is needed to enter in
it.\n\n**Changes made:**\n1. Set correct value for `aria-labelledby`
attr.","sha":"4399248cf013552902af726e61b0da5b2ed23b2e"}}]}] BACKPORT-->

Co-authored-by: Alexey Antonov <alexwizp@gmail.com>
2025-04-15 16:14:32 +02:00
Jeramy Soucy
f9e3b56b26
[8.16] Fixes bulk re-encryption for encrypted objects located in all spaces (#217625) (#218181)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Fixes bulk re-encryption for encrypted objects located in all spaces
(#217625)](https://github.com/elastic/kibana/pull/217625)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Jeramy
Soucy","email":"jeramy.soucy@elastic.co"},"sourceCommit":{"committedDate":"2025-04-14T19:20:38Z","message":"Fixes
bulk re-encryption for encrypted objects located in all spaces
(#217625)\n\nCloses #215534\n\n## Summary\n\nThe Encrypted Saved Objects
Key Rotation service makes use of the Saved\nObjects Bulk Update API to
re-encrypt objects. Bulk update supports an\noptional 'namespace'
parameter, per-object, defining the space to access\na specific object.
This allows objects outside of the current space to\nbe affected in the
update operation. The Key Rotation service leverages\nthis optional
parameter for each object to ensure that the re-encryption\noperation is
not limited to the current space.\n\nHowever, should a multi-namespace
encrypted object reside in all spaces,\nthe only value in the object's
namespaces property is the\n`ALL_NAMESPACES_STRING` constant '*'. As
this is not a valid single\nnamespace, the Bulk Update operation will
skip updating the object.\n\nPR resolves the issue by only providing a
object namespace for objects\nthat do not reside in all spaces. Objects
that reside in all spaces can\nbe accessed from the current space
without the need for an override.\n\nThis PR also updates unit tests to
account for this case.\n\n### Testing\n- [x] Set the encrypted saved
objects encryption key to a known value\n(either in kibana.yml or
kibana.dev.yml). For example:\n```\nxpack.encryptedSavedObjects:\n
encryptionKey: \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\" \n```\n- [x] Start
ES & Kibana\n- [x] You will need to set up a Fleet agent policy and
create a\nsynthetics location and monitor. The UI will guide you through
this when\nyou navigate to Observability -> Synthetics\n- [x] Create a
synthetics parameter, Observability -> Synthetics ->\nSettings, Global
Parameters tab. Use anything for a value, but be sure\nto check the
`Share across spaces` option.\n- [x] Update the kibana config to change
the encryption key, and use the\nold key as a decryption-only
key\n```\nxpack.encryptedSavedObjects:\n encryptionKey:
\"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\" \n keyRotation:\n
decryptionOnlyKeys: [\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"] \n```\n- [x]
Wait for Kibana to restart\n- [x] Call the key rotation HTTP API as a
privileged user (I just used\nthe `elastic` superuser
account)\n\n`[you_kibana_endpoint]/api/encrypted_saved_objects/_rotate_key?type=synthetics-param`\n-
[x] Verify that 1 out of 1 objects were processed with 0 failures.\n-
[x] Repeat these steps from Main and note that 0 of 1
objects\nsucceeded, and there is 1 failure\n\n### Release Note\nFixes an
issue where the Saved Objects Rotate Encryption Key API would\nnot
affect sharable encrypted object types that exist in all
spaces.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"1176625dcaf8ec8ca4e4aa0b1324279ab0f2def3","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Security","backport:all-open","v9.1.0"],"title":"Fixes
bulk re-encryption for encrypted objects located in all
spaces","number":217625,"url":"https://github.com/elastic/kibana/pull/217625","mergeCommit":{"message":"Fixes
bulk re-encryption for encrypted objects located in all spaces
(#217625)\n\nCloses #215534\n\n## Summary\n\nThe Encrypted Saved Objects
Key Rotation service makes use of the Saved\nObjects Bulk Update API to
re-encrypt objects. Bulk update supports an\noptional 'namespace'
parameter, per-object, defining the space to access\na specific object.
This allows objects outside of the current space to\nbe affected in the
update operation. The Key Rotation service leverages\nthis optional
parameter for each object to ensure that the re-encryption\noperation is
not limited to the current space.\n\nHowever, should a multi-namespace
encrypted object reside in all spaces,\nthe only value in the object's
namespaces property is the\n`ALL_NAMESPACES_STRING` constant '*'. As
this is not a valid single\nnamespace, the Bulk Update operation will
skip updating the object.\n\nPR resolves the issue by only providing a
object namespace for objects\nthat do not reside in all spaces. Objects
that reside in all spaces can\nbe accessed from the current space
without the need for an override.\n\nThis PR also updates unit tests to
account for this case.\n\n### Testing\n- [x] Set the encrypted saved
objects encryption key to a known value\n(either in kibana.yml or
kibana.dev.yml). For example:\n```\nxpack.encryptedSavedObjects:\n
encryptionKey: \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\" \n```\n- [x] Start
ES & Kibana\n- [x] You will need to set up a Fleet agent policy and
create a\nsynthetics location and monitor. The UI will guide you through
this when\nyou navigate to Observability -> Synthetics\n- [x] Create a
synthetics parameter, Observability -> Synthetics ->\nSettings, Global
Parameters tab. Use anything for a value, but be sure\nto check the
`Share across spaces` option.\n- [x] Update the kibana config to change
the encryption key, and use the\nold key as a decryption-only
key\n```\nxpack.encryptedSavedObjects:\n encryptionKey:
\"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\" \n keyRotation:\n
decryptionOnlyKeys: [\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"] \n```\n- [x]
Wait for Kibana to restart\n- [x] Call the key rotation HTTP API as a
privileged user (I just used\nthe `elastic` superuser
account)\n\n`[you_kibana_endpoint]/api/encrypted_saved_objects/_rotate_key?type=synthetics-param`\n-
[x] Verify that 1 out of 1 objects were processed with 0 failures.\n-
[x] Repeat these steps from Main and note that 0 of 1
objects\nsucceeded, and there is 1 failure\n\n### Release Note\nFixes an
issue where the Saved Objects Rotate Encryption Key API would\nnot
affect sharable encrypted object types that exist in all
spaces.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"1176625dcaf8ec8ca4e4aa0b1324279ab0f2def3"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217625","number":217625,"mergeCommit":{"message":"Fixes
bulk re-encryption for encrypted objects located in all spaces
(#217625)\n\nCloses #215534\n\n## Summary\n\nThe Encrypted Saved Objects
Key Rotation service makes use of the Saved\nObjects Bulk Update API to
re-encrypt objects. Bulk update supports an\noptional 'namespace'
parameter, per-object, defining the space to access\na specific object.
This allows objects outside of the current space to\nbe affected in the
update operation. The Key Rotation service leverages\nthis optional
parameter for each object to ensure that the re-encryption\noperation is
not limited to the current space.\n\nHowever, should a multi-namespace
encrypted object reside in all spaces,\nthe only value in the object's
namespaces property is the\n`ALL_NAMESPACES_STRING` constant '*'. As
this is not a valid single\nnamespace, the Bulk Update operation will
skip updating the object.\n\nPR resolves the issue by only providing a
object namespace for objects\nthat do not reside in all spaces. Objects
that reside in all spaces can\nbe accessed from the current space
without the need for an override.\n\nThis PR also updates unit tests to
account for this case.\n\n### Testing\n- [x] Set the encrypted saved
objects encryption key to a known value\n(either in kibana.yml or
kibana.dev.yml). For example:\n```\nxpack.encryptedSavedObjects:\n
encryptionKey: \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\" \n```\n- [x] Start
ES & Kibana\n- [x] You will need to set up a Fleet agent policy and
create a\nsynthetics location and monitor. The UI will guide you through
this when\nyou navigate to Observability -> Synthetics\n- [x] Create a
synthetics parameter, Observability -> Synthetics ->\nSettings, Global
Parameters tab. Use anything for a value, but be sure\nto check the
`Share across spaces` option.\n- [x] Update the kibana config to change
the encryption key, and use the\nold key as a decryption-only
key\n```\nxpack.encryptedSavedObjects:\n encryptionKey:
\"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\" \n keyRotation:\n
decryptionOnlyKeys: [\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"] \n```\n- [x]
Wait for Kibana to restart\n- [x] Call the key rotation HTTP API as a
privileged user (I just used\nthe `elastic` superuser
account)\n\n`[you_kibana_endpoint]/api/encrypted_saved_objects/_rotate_key?type=synthetics-param`\n-
[x] Verify that 1 out of 1 objects were processed with 0 failures.\n-
[x] Repeat these steps from Main and note that 0 of 1
objects\nsucceeded, and there is 1 failure\n\n### Release Note\nFixes an
issue where the Saved Objects Rotate Encryption Key API would\nnot
affect sharable encrypted object types that exist in all
spaces.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"1176625dcaf8ec8ca4e4aa0b1324279ab0f2def3"}}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-15 15:42:59 +02:00
Kibana Machine
808d355930
[8.16] [Infra] Check ML permissions before requesting ML data (#218069) (#218226)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Infra] Check ML permissions before requesting ML data
(#218069)](https://github.com/elastic/kibana/pull/218069)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Carlos
Crespo","email":"crespocarlos@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-15T10:02:51Z","message":"[Infra]
Check ML permissions before requesting ML data (#218069)\n\nfixes
[#189213](https://github.com/elastic/kibana/issues/189213)\n\n##
Summary\n\nChecks whether the user has permission to ML before
triggering requests\nto fetch ML data\n\n\n### How to test\n\n- Create a
user whose role doesn't have permission to ML, but has\npermission to
O11y apps\n- Run `node scripts/synthtrace infra_hosts_with_apm_hosts
--live\n--clean`\n - Navigate to Inventory Infrastructure / Hosts
View\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"5423655975924c5e2840f684132fc0447e4bcec3","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:prev-minor","backport:prev-major","Team:obs-ux-infra_services","v9.1.0"],"title":"[Infra]
Check ML permissions before requesting ML
data","number":218069,"url":"https://github.com/elastic/kibana/pull/218069","mergeCommit":{"message":"[Infra]
Check ML permissions before requesting ML data (#218069)\n\nfixes
[#189213](https://github.com/elastic/kibana/issues/189213)\n\n##
Summary\n\nChecks whether the user has permission to ML before
triggering requests\nto fetch ML data\n\n\n### How to test\n\n- Create a
user whose role doesn't have permission to ML, but has\npermission to
O11y apps\n- Run `node scripts/synthtrace infra_hosts_with_apm_hosts
--live\n--clean`\n - Navigate to Inventory Infrastructure / Hosts
View\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"5423655975924c5e2840f684132fc0447e4bcec3"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218069","number":218069,"mergeCommit":{"message":"[Infra]
Check ML permissions before requesting ML data (#218069)\n\nfixes
[#189213](https://github.com/elastic/kibana/issues/189213)\n\n##
Summary\n\nChecks whether the user has permission to ML before
triggering requests\nto fetch ML data\n\n\n### How to test\n\n- Create a
user whose role doesn't have permission to ML, but has\npermission to
O11y apps\n- Run `node scripts/synthtrace infra_hosts_with_apm_hosts
--live\n--clean`\n - Navigate to Inventory Infrastructure / Hosts
View\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"5423655975924c5e2840f684132fc0447e4bcec3"}}]}]
BACKPORT-->

Co-authored-by: Carlos Crespo <crespocarlos@users.noreply.github.com>
2025-04-15 15:40:36 +02:00
Milosz Marcinkowski
8ea1340a09
[8.16] [APM][UI] Sort environment dropdown alphabetically (#217710) (#217883)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM][UI] Sort environment dropdown alphabetically
(#217710)](https://github.com/elastic/kibana/pull/217710)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Milosz
Marcinkowski","email":"38698566+miloszmarcinkowski@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-10T15:38:20Z","message":"[APM][UI]
Sort environment dropdown alphabetically (#217710)\n\nCloses
#217814\n\n### Summary\n\nSort environment list
alphabetically.\n\n|Before|After|\n|-|-|\n|<img width=\"1724\"
alt=\"Screenshot 2025-04-10 at 12 01
15\"\nsrc=\"https://github.com/user-attachments/assets/53f0b66d-146a-45d9-b4e3-25bde350a263\"\n/>|<img
width=\"1722\" alt=\"Screenshot 2025-04-10 at 11 58
27\"\nsrc=\"https://github.com/user-attachments/assets/91315d23-801c-4a16-8688-c43d60c389c8\"\n/>|","sha":"23cbaa6d55de4e331ce180f6857db94ca11c209a","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:prev-major","Team:obs-ux-infra_services","v9.1.0"],"title":"[APM][UI]
Sort environment dropdown
alphabetically","number":217710,"url":"https://github.com/elastic/kibana/pull/217710","mergeCommit":{"message":"[APM][UI]
Sort environment dropdown alphabetically (#217710)\n\nCloses
#217814\n\n### Summary\n\nSort environment list
alphabetically.\n\n|Before|After|\n|-|-|\n|<img width=\"1724\"
alt=\"Screenshot 2025-04-10 at 12 01
15\"\nsrc=\"https://github.com/user-attachments/assets/53f0b66d-146a-45d9-b4e3-25bde350a263\"\n/>|<img
width=\"1722\" alt=\"Screenshot 2025-04-10 at 11 58
27\"\nsrc=\"https://github.com/user-attachments/assets/91315d23-801c-4a16-8688-c43d60c389c8\"\n/>|","sha":"23cbaa6d55de4e331ce180f6857db94ca11c209a"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/217710","number":217710,"mergeCommit":{"message":"[APM][UI]
Sort environment dropdown alphabetically (#217710)\n\nCloses
#217814\n\n### Summary\n\nSort environment list
alphabetically.\n\n|Before|After|\n|-|-|\n|<img width=\"1724\"
alt=\"Screenshot 2025-04-10 at 12 01
15\"\nsrc=\"https://github.com/user-attachments/assets/53f0b66d-146a-45d9-b4e3-25bde350a263\"\n/>|<img
width=\"1722\" alt=\"Screenshot 2025-04-10 at 11 58
27\"\nsrc=\"https://github.com/user-attachments/assets/91315d23-801c-4a16-8688-c43d60c389c8\"\n/>|","sha":"23cbaa6d55de4e331ce180f6857db94ca11c209a"}}]}]
BACKPORT-->
2025-04-14 11:16:34 +02:00
Alex Szabo
8d54f81f5a skip failing suite (#212236) 2025-04-11 15:53:21 +02:00
Kibana Machine
eda04dc640 skip failing test suite (#144057) 2025-04-10 22:31:28 +02:00
Kibana Machine
499c038e6b
[8.16] [APM] Span links: add tooltip explaining the reason for missing linked span details (#216487) (#216955)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM] Span links: add tooltip explaining the reason for missing
linked span details
(#216487)](https://github.com/elastic/kibana/pull/216487)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Milosz
Marcinkowski","email":"38698566+miloszmarcinkowski@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-01T14:39:00Z","message":"[APM]
Span links: add tooltip explaining the reason for missing linked span
details (#216487)\n\nCloses #214558\n\n### Summary\n\nWhen fetching
details for the Span Links flyout, it is possible that the\nparent span
has not yet been ingested, resulting in an 'Unknown' service\nname which
might be misleading to users. To avoid confusion, we decided\nto add
tooltip to the icon with explanation.\n\n<img width=\"2558\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/9e29544b-28df-43b2-9987-24c6d90c481e\"\n/>\n\n###
How to test:\n- use edge-oblt data\n- in Applications go to
`accountingservice` service\n- select `orders receive` transaction\n- in
trace waterfall click `Span Links`
button","sha":"e7edff9ddcd5e7d80903c8c3139eab87d0aadc72","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","backport:prev-major","Team:obs-ux-infra_services","v9.1.0"],"title":"[APM]
Span links: add tooltip explaining the reason for missing linked span
details","number":216487,"url":"https://github.com/elastic/kibana/pull/216487","mergeCommit":{"message":"[APM]
Span links: add tooltip explaining the reason for missing linked span
details (#216487)\n\nCloses #214558\n\n### Summary\n\nWhen fetching
details for the Span Links flyout, it is possible that the\nparent span
has not yet been ingested, resulting in an 'Unknown' service\nname which
might be misleading to users. To avoid confusion, we decided\nto add
tooltip to the icon with explanation.\n\n<img width=\"2558\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/9e29544b-28df-43b2-9987-24c6d90c481e\"\n/>\n\n###
How to test:\n- use edge-oblt data\n- in Applications go to
`accountingservice` service\n- select `orders receive` transaction\n- in
trace waterfall click `Span Links`
button","sha":"e7edff9ddcd5e7d80903c8c3139eab87d0aadc72"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/216660","number":216660,"state":"MERGED","mergeCommit":{"sha":"b587f643d0bcc489d7a11886a81296723da00616","message":"[9.0]
[APM] Span links: add tooltip explaining the reason for missing linked
span details (#216487) (#216660)\n\n# Backport\n\nThis will backport the
following commits from `main` to `9.0`:\n- [[APM] Span links: add
tooltip explaining the reason for missing\nlinked span
details\n(#216487)](https://github.com/elastic/kibana/pull/216487)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Milosz Marcinkowski
<38698566+miloszmarcinkowski@users.noreply.github.com>"}},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216487","number":216487,"mergeCommit":{"message":"[APM]
Span links: add tooltip explaining the reason for missing linked span
details (#216487)\n\nCloses #214558\n\n### Summary\n\nWhen fetching
details for the Span Links flyout, it is possible that the\nparent span
has not yet been ingested, resulting in an 'Unknown' service\nname which
might be misleading to users. To avoid confusion, we decided\nto add
tooltip to the icon with explanation.\n\n<img width=\"2558\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/9e29544b-28df-43b2-9987-24c6d90c481e\"\n/>\n\n###
How to test:\n- use edge-oblt data\n- in Applications go to
`accountingservice` service\n- select `orders receive` transaction\n- in
trace waterfall click `Span Links`
button","sha":"e7edff9ddcd5e7d80903c8c3139eab87d0aadc72"}}]}]
BACKPORT-->

Co-authored-by: Milosz Marcinkowski <38698566+miloszmarcinkowski@users.noreply.github.com>
2025-04-03 10:26:20 +01:00
Kibana Machine
c7a5877aed
[8.16] [Usage collection] Replace agent.type with hard coded value to categorize monitoring type correctly. (#216391) (#216949)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Usage collection] Replace `agent.type` with hard coded value to
categorize monitoring type correctly.
(#216391)](https://github.com/elastic/kibana/pull/216391)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"Mashhur","email":"99575341+mashhurs@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-03T07:06:38Z","message":"[Usage
collection] Replace `agent.type` with hard coded value to categorize
monitoring type correctly. (#216391)\n\n## Summary\nCollection type was
set with `agent.type` which conflicts on stack and\nmetricbeat
monitorings (same `metricbeat` value). For the stack\nmonitoring,
elastic-agent internally utilizes filebat or metricbeat.\nThis change
hard codes the `collection_types` corresponding on each\nmonitoring type
to categorize monitoring type correctly.\n\n\n\n### Checklist\n\nCheck
the PR satisfies following conditions. \n\nReviewers should verify this
PR satisfies this list as well.\n\n- ~~[ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)~~\n-
~~[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials~~\n- [x] [Unit
or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- ~~[ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)~~\n-
~~[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.~~\n- ~~[ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed~~\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\n- [ ] \n\n\n### Example data\n- when stack
monitoring\n```\n{\n \"clusterUuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n
\"stats\": {\n \"collectionSource\": \"monitoring\",\n \"cacheDetails\":
{\n \"updatedAt\": \"2025-03-31T23:07:32.154Z\",\n \"fetchedAt\":
\"2025-03-31T23:07:33.349Z\"\n },\n \"cluster_name\": \"logstash\",\n
\"timestamp\": \"2025-03-31T23:07:32Z\",\n \"version\": \"9.1.0\",\n
\"cluster_uuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n \"stack_stats\": {\n
\"logstash\": {\n \"versions\": [\n {\n \"version\": \"9.1.0\",\n
\"count\": 1\n }\n ],\n \"count\": 1,\n \"cluster_stats\": {\n
\"pipelines\": {\n \"count\": 1,\n \"batch_size_total\": 125,\n
\"batch_size_max\": 125,\n \"batch_size_min\": 125,\n
\"batch_size_avg\": 125,\n \"workers_total\": 10,\n \"workers_max\":
10,\n \"workers_min\": 10,\n \"workers_avg\": 10,\n \"sources\": {\n
\"file\": true\n }\n },\n \"plugins\": [\n {\n \"name\":
\"logstash-input-heartbeat\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-filter-ruby\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-filter-mutate\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-output-stdout\",\n \"count\": 1\n }\n ],\n
\"monitoringClusterUuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n
\"collection_types\": {\n \"agent\": 1\n },\n \"queues\": {\n
\"memory\": 1\n }\n }\n }\n },\n \"cluster_stats\": {}\n }\n
}\n```\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"c4ad8cbe8c13fb490bf2d3d56077098fa85ff736","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Usage
collection] Replace `agent.type` with hard coded value to categorize
monitoring type
correctly.","number":216391,"url":"https://github.com/elastic/kibana/pull/216391","mergeCommit":{"message":"[Usage
collection] Replace `agent.type` with hard coded value to categorize
monitoring type correctly. (#216391)\n\n## Summary\nCollection type was
set with `agent.type` which conflicts on stack and\nmetricbeat
monitorings (same `metricbeat` value). For the stack\nmonitoring,
elastic-agent internally utilizes filebat or metricbeat.\nThis change
hard codes the `collection_types` corresponding on each\nmonitoring type
to categorize monitoring type correctly.\n\n\n\n### Checklist\n\nCheck
the PR satisfies following conditions. \n\nReviewers should verify this
PR satisfies this list as well.\n\n- ~~[ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)~~\n-
~~[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials~~\n- [x] [Unit
or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- ~~[ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)~~\n-
~~[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.~~\n- ~~[ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed~~\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\n- [ ] \n\n\n### Example data\n- when stack
monitoring\n```\n{\n \"clusterUuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n
\"stats\": {\n \"collectionSource\": \"monitoring\",\n \"cacheDetails\":
{\n \"updatedAt\": \"2025-03-31T23:07:32.154Z\",\n \"fetchedAt\":
\"2025-03-31T23:07:33.349Z\"\n },\n \"cluster_name\": \"logstash\",\n
\"timestamp\": \"2025-03-31T23:07:32Z\",\n \"version\": \"9.1.0\",\n
\"cluster_uuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n \"stack_stats\": {\n
\"logstash\": {\n \"versions\": [\n {\n \"version\": \"9.1.0\",\n
\"count\": 1\n }\n ],\n \"count\": 1,\n \"cluster_stats\": {\n
\"pipelines\": {\n \"count\": 1,\n \"batch_size_total\": 125,\n
\"batch_size_max\": 125,\n \"batch_size_min\": 125,\n
\"batch_size_avg\": 125,\n \"workers_total\": 10,\n \"workers_max\":
10,\n \"workers_min\": 10,\n \"workers_avg\": 10,\n \"sources\": {\n
\"file\": true\n }\n },\n \"plugins\": [\n {\n \"name\":
\"logstash-input-heartbeat\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-filter-ruby\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-filter-mutate\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-output-stdout\",\n \"count\": 1\n }\n ],\n
\"monitoringClusterUuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n
\"collection_types\": {\n \"agent\": 1\n },\n \"queues\": {\n
\"memory\": 1\n }\n }\n }\n },\n \"cluster_stats\": {}\n }\n
}\n```\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"c4ad8cbe8c13fb490bf2d3d56077098fa85ff736"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216391","number":216391,"mergeCommit":{"message":"[Usage
collection] Replace `agent.type` with hard coded value to categorize
monitoring type correctly. (#216391)\n\n## Summary\nCollection type was
set with `agent.type` which conflicts on stack and\nmetricbeat
monitorings (same `metricbeat` value). For the stack\nmonitoring,
elastic-agent internally utilizes filebat or metricbeat.\nThis change
hard codes the `collection_types` corresponding on each\nmonitoring type
to categorize monitoring type correctly.\n\n\n\n### Checklist\n\nCheck
the PR satisfies following conditions. \n\nReviewers should verify this
PR satisfies this list as well.\n\n- ~~[ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)~~\n-
~~[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials~~\n- [x] [Unit
or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- ~~[ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)~~\n-
~~[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.~~\n- ~~[ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed~~\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\n- [ ] \n\n\n### Example data\n- when stack
monitoring\n```\n{\n \"clusterUuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n
\"stats\": {\n \"collectionSource\": \"monitoring\",\n \"cacheDetails\":
{\n \"updatedAt\": \"2025-03-31T23:07:32.154Z\",\n \"fetchedAt\":
\"2025-03-31T23:07:33.349Z\"\n },\n \"cluster_name\": \"logstash\",\n
\"timestamp\": \"2025-03-31T23:07:32Z\",\n \"version\": \"9.1.0\",\n
\"cluster_uuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n \"stack_stats\": {\n
\"logstash\": {\n \"versions\": [\n {\n \"version\": \"9.1.0\",\n
\"count\": 1\n }\n ],\n \"count\": 1,\n \"cluster_stats\": {\n
\"pipelines\": {\n \"count\": 1,\n \"batch_size_total\": 125,\n
\"batch_size_max\": 125,\n \"batch_size_min\": 125,\n
\"batch_size_avg\": 125,\n \"workers_total\": 10,\n \"workers_max\":
10,\n \"workers_min\": 10,\n \"workers_avg\": 10,\n \"sources\": {\n
\"file\": true\n }\n },\n \"plugins\": [\n {\n \"name\":
\"logstash-input-heartbeat\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-filter-ruby\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-filter-mutate\",\n \"count\": 1\n },\n {\n \"name\":
\"logstash-output-stdout\",\n \"count\": 1\n }\n ],\n
\"monitoringClusterUuid\": \"WKhHGcv8Rt6nHwKRmKDdAw\",\n
\"collection_types\": {\n \"agent\": 1\n },\n \"queues\": {\n
\"memory\": 1\n }\n }\n }\n },\n \"cluster_stats\": {}\n }\n
}\n```\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"c4ad8cbe8c13fb490bf2d3d56077098fa85ff736"}}]}]
BACKPORT-->

Co-authored-by: Mashhur <99575341+mashhurs@users.noreply.github.com>
2025-04-03 10:13:18 +01:00
Davis McPhee
0e2eba8b74
[8.16] [Discover] Fix getAdditionalCellActions FTR tests (#216540) (#216883)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Discover] Fix `getAdditionalCellActions` FTR tests
(#216540)](https://github.com/elastic/kibana/pull/216540)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Davis
McPhee","email":"davis.mcphee@elastic.co"},"sourceCommit":{"committedDate":"2025-04-02T14:45:08Z","message":"[Discover]
Fix `getAdditionalCellActions` FTR tests (#216540)\n\n## Summary\n\nThis
PR fixes the `getAdditionalCellActions` FTR tests that started\nfailing
due to an issue dismissing alerts.\n\nResolves #213300.\nResolves
#213422.\n\n### Checklist\n\n- [ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"d08e5521f28f4459a76b7176b902efbaea023b06","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:DataDiscovery","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Discover]
Fix `getAdditionalCellActions` FTR
tests","number":216540,"url":"https://github.com/elastic/kibana/pull/216540","mergeCommit":{"message":"[Discover]
Fix `getAdditionalCellActions` FTR tests (#216540)\n\n## Summary\n\nThis
PR fixes the `getAdditionalCellActions` FTR tests that started\nfailing
due to an issue dismissing alerts.\n\nResolves #213300.\nResolves
#213422.\n\n### Checklist\n\n- [ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"d08e5521f28f4459a76b7176b902efbaea023b06"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216540","number":216540,"mergeCommit":{"message":"[Discover]
Fix `getAdditionalCellActions` FTR tests (#216540)\n\n## Summary\n\nThis
PR fixes the `getAdditionalCellActions` FTR tests that started\nfailing
due to an issue dismissing alerts.\n\nResolves #213300.\nResolves
#213422.\n\n### Checklist\n\n- [ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"d08e5521f28f4459a76b7176b902efbaea023b06"}},{"url":"https://github.com/elastic/kibana/pull/216858","number":216858,"branch":"8.18","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/216860","number":216860,"branch":"9.0","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/216859","number":216859,"branch":"8.x","state":"OPEN"}]}]
BACKPORT-->
2025-04-02 12:31:54 -07:00
Kibana Machine
a6113352d7
[8.16] [Security Solution] Fix alerts table grouping severity stats not showing badge (#216738) (#216841)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Fix alerts table grouping severity stats not
showing badge (#216738)](https://github.com/elastic/kibana/pull/216738)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Philippe
Oberti","email":"philippe.oberti@elastic.co"},"sourceCommit":{"committedDate":"2025-04-02T13:42:46Z","message":"[Security
Solution] Fix alerts table grouping severity stats not showing badge
(#216738)\n\n## Summary\n\nThis PR fixes an issue introduced by
[this\nPR](https://github.com/elastic/kibana/pull/184635) back in
`8.16`. I\ndon't think anyone noticed the problem until now...\n\nIn the
PR linked above, the name of the property responsible to render\ncustom
components in the group stats section of the alerts table\ngrouping was
changed from `renderer` to `component` but there was (at\nleast) one
usage that had not been updated. Because that usage wasn't\ncorrectly
typed and there was no unit tests to verify the behavior, the\nissue
went unnoticed...\n\n### Notes\n\nThis whole code should be refactored
eventually. This is not the purpose\nof this PR. This only focuses on
fixing the issue, adding proper types\nand unit tests.\n\n| Before |
After |\n| ------------- | ------------- |\n| ![Screenshot 2025-04-01 at
5
00\n16 PM](https://github.com/user-attachments/assets/c64b8140-4c16-4618-b8b0-0c295e9e35d5)\n|
![Screenshot 2025-04-01 at 5
05\n48 PM](https://github.com/user-attachments/assets/5b06ee16-b6eb-4d33-9510-75a80c569718)\n|\n\n###
Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"c1939bb6478bc1f64046680bf77346549517921f","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Threat
Hunting:Investigations","Team:Security Generative
AI","backport:version","v9.1.0","v8.19.0","v8.18.1","v9.0.1","v8.17.5","v8.16.7"],"title":"[Security
Solution] Fix alerts table grouping severity stats not showing
badge","number":216738,"url":"https://github.com/elastic/kibana/pull/216738","mergeCommit":{"message":"[Security
Solution] Fix alerts table grouping severity stats not showing badge
(#216738)\n\n## Summary\n\nThis PR fixes an issue introduced by
[this\nPR](https://github.com/elastic/kibana/pull/184635) back in
`8.16`. I\ndon't think anyone noticed the problem until now...\n\nIn the
PR linked above, the name of the property responsible to render\ncustom
components in the group stats section of the alerts table\ngrouping was
changed from `renderer` to `component` but there was (at\nleast) one
usage that had not been updated. Because that usage wasn't\ncorrectly
typed and there was no unit tests to verify the behavior, the\nissue
went unnoticed...\n\n### Notes\n\nThis whole code should be refactored
eventually. This is not the purpose\nof this PR. This only focuses on
fixing the issue, adding proper types\nand unit tests.\n\n| Before |
After |\n| ------------- | ------------- |\n| ![Screenshot 2025-04-01 at
5
00\n16 PM](https://github.com/user-attachments/assets/c64b8140-4c16-4618-b8b0-0c295e9e35d5)\n|
![Screenshot 2025-04-01 at 5
05\n48 PM](https://github.com/user-attachments/assets/5b06ee16-b6eb-4d33-9510-75a80c569718)\n|\n\n###
Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"c1939bb6478bc1f64046680bf77346549517921f"}},"sourceBranch":"main","suggestedTargetBranches":["8.x","8.18","9.0","8.17","8.16"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216738","number":216738,"mergeCommit":{"message":"[Security
Solution] Fix alerts table grouping severity stats not showing badge
(#216738)\n\n## Summary\n\nThis PR fixes an issue introduced by
[this\nPR](https://github.com/elastic/kibana/pull/184635) back in
`8.16`. I\ndon't think anyone noticed the problem until now...\n\nIn the
PR linked above, the name of the property responsible to render\ncustom
components in the group stats section of the alerts table\ngrouping was
changed from `renderer` to `component` but there was (at\nleast) one
usage that had not been updated. Because that usage wasn't\ncorrectly
typed and there was no unit tests to verify the behavior, the\nissue
went unnoticed...\n\n### Notes\n\nThis whole code should be refactored
eventually. This is not the purpose\nof this PR. This only focuses on
fixing the issue, adding proper types\nand unit tests.\n\n| Before |
After |\n| ------------- | ------------- |\n| ![Screenshot 2025-04-01 at
5
00\n16 PM](https://github.com/user-attachments/assets/c64b8140-4c16-4618-b8b0-0c295e9e35d5)\n|
![Screenshot 2025-04-01 at 5
05\n48 PM](https://github.com/user-attachments/assets/5b06ee16-b6eb-4d33-9510-75a80c569718)\n|\n\n###
Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"c1939bb6478bc1f64046680bf77346549517921f"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.0","label":"v9.0.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.7","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Philippe Oberti <philippe.oberti@elastic.co>
2025-04-02 16:53:45 +01:00
Cauê Marcondes
2aacdd66eb
[8.16] [APM] Fix query for transaction marks (#215819) (#216684)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM] Fix query for transaction marks
(#215819)](https://github.com/elastic/kibana/pull/215819)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Sunghyun
Kim","email":"cqbqdd11519@gmail.com"},"sourceCommit":{"committedDate":"2025-04-01T15:05:42Z","message":"[APM]
Fix query for transaction marks (#215819)\n\n## Summary\n\nThere is a
bug in kibana 8.17, where no transaction marks are shown in\nthe APM's
transaction waterfall ui.\nThe marks are stored in the field
`transaction.marks.agent` of\ndocuments, but kibana apm server is
querying `transaction.agent.marks`.\n\nThis PR fixes the field
name.\n\n\nI also added `span.id` in the query source to include the
marks in the\nresponse, even if there is no `span.links` in the
transaction info.\n(I found the case from RUM data with
`transaction.marks.agent` but\nwithout `span.links`, so that the
response does not include marks\nbecause there is no `source` field in
the query result)\n\nI am not sure if it's the right way to fix it, as i
have no\nunderstanding about the relationsip between
`transaction.marks.agent`\nand `span.links`, so this PR is more like a
bug report.\n\n\n\n### Checklist\n\nCheck the PR satisfies following
conditions. \n\nReviewers should verify this PR satisfies this list as
well.\n\n- [ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [ ] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [ ] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ]
...\nNone","sha":"d4d1c2b6ddf98859e5d36654eab0ca71cefc8808","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","💝community","backport:all-open","ci:project-deploy-observability","Team:obs-ux-infra_services","v9.1.0"],"title":"[APM]
Fix query for transaction
marks","number":215819,"url":"https://github.com/elastic/kibana/pull/215819","mergeCommit":{"message":"[APM]
Fix query for transaction marks (#215819)\n\n## Summary\n\nThere is a
bug in kibana 8.17, where no transaction marks are shown in\nthe APM's
transaction waterfall ui.\nThe marks are stored in the field
`transaction.marks.agent` of\ndocuments, but kibana apm server is
querying `transaction.agent.marks`.\n\nThis PR fixes the field
name.\n\n\nI also added `span.id` in the query source to include the
marks in the\nresponse, even if there is no `span.links` in the
transaction info.\n(I found the case from RUM data with
`transaction.marks.agent` but\nwithout `span.links`, so that the
response does not include marks\nbecause there is no `source` field in
the query result)\n\nI am not sure if it's the right way to fix it, as i
have no\nunderstanding about the relationsip between
`transaction.marks.agent`\nand `span.links`, so this PR is more like a
bug report.\n\n\n\n### Checklist\n\nCheck the PR satisfies following
conditions. \n\nReviewers should verify this PR satisfies this list as
well.\n\n- [ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [ ] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [ ] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ]
...\nNone","sha":"d4d1c2b6ddf98859e5d36654eab0ca71cefc8808"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215819","number":215819,"mergeCommit":{"message":"[APM]
Fix query for transaction marks (#215819)\n\n## Summary\n\nThere is a
bug in kibana 8.17, where no transaction marks are shown in\nthe APM's
transaction waterfall ui.\nThe marks are stored in the field
`transaction.marks.agent` of\ndocuments, but kibana apm server is
querying `transaction.agent.marks`.\n\nThis PR fixes the field
name.\n\n\nI also added `span.id` in the query source to include the
marks in the\nresponse, even if there is no `span.links` in the
transaction info.\n(I found the case from RUM data with
`transaction.marks.agent` but\nwithout `span.links`, so that the
response does not include marks\nbecause there is no `source` field in
the query result)\n\nI am not sure if it's the right way to fix it, as i
have no\nunderstanding about the relationsip between
`transaction.marks.agent`\nand `span.links`, so this PR is more like a
bug report.\n\n\n\n### Checklist\n\nCheck the PR satisfies following
conditions. \n\nReviewers should verify this PR satisfies this list as
well.\n\n- [ ] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [ ] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [ ] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\nNone","sha":"d4d1c2b6ddf98859e5d36654eab0ca71cefc8808"}}]}]
BACKPORT-->

---------

Co-authored-by: Sunghyun Kim <cqbqdd11519@gmail.com>
2025-04-02 14:25:55 +01:00
jennypavlova
65824b56a0
[8.16] [APM][OTel] Add url.full fallback (#215397) (#216648)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM][OTel] Add url.full fallback
(#215397)](https://github.com/elastic/kibana/pull/215397)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"jennypavlova","email":"dzheni.pavlova@elastic.co"},"sourceCommit":{"committedDate":"2025-04-01T09:50:28Z","message":"[APM][OTel]
Add url.full fallback (#215397)\n\n## Summary\n\nThis PR fixes the
missing URL in the transaction summary \n\n## Testing [_UPDATED_]\n-
[SOLVED  ⬇️ ] ~~This is tricky to test ( I am trying to create
a\nserverless instance from this PR and it should make it easier)~~\n-
Testing on serverless (the env linked in the PR) \n - EDOT service (I
run locally in Docker and connect to the env): \n<img width=\"1904\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/c3a7ab56-5b8f-42a5-8033-55ccbb915b40\"\n/>\n\n
- Other generated service (from the
env):\n\n![image](https://github.com/user-attachments/assets/e76f2901-050a-4ee3-b536-a057d45454e2)\n
\n- In the meantime \n - using synthtrace: Case to run/expectation\n-
`node scripts/synthtrace otel_edot_simple_trace.ts` / The trace\nsummary
should be visible\n
\n\n![image](https://github.com/user-attachments/assets/b9ad8a8b-f89a-449c-a053-a5628c2fa620)\n\n-
`node scripts/synthtrace simple_trace.ts` / The trace summary
should\nstill be visible (using `url.full` in this case)\n
\n\n![image](https://github.com/user-attachments/assets/93ffac41-9f79-4d09-ab69-ae5c8e782750)","sha":"a987209d3fc6c10153181781bdf1c8c829ceba04","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:prev-minor","backport:prev-major","ci:build-serverless-image","ci:project-deploy-observability","Team:obs-ux-infra_services","ci:project-redeploy","v9.1.0"],"title":"[APM][OTel]
Add url.full
fallback","number":215397,"url":"https://github.com/elastic/kibana/pull/215397","mergeCommit":{"message":"[APM][OTel]
Add url.full fallback (#215397)\n\n## Summary\n\nThis PR fixes the
missing URL in the transaction summary \n\n## Testing [_UPDATED_]\n-
[SOLVED  ⬇️ ] ~~This is tricky to test ( I am trying to create
a\nserverless instance from this PR and it should make it easier)~~\n-
Testing on serverless (the env linked in the PR) \n - EDOT service (I
run locally in Docker and connect to the env): \n<img width=\"1904\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/c3a7ab56-5b8f-42a5-8033-55ccbb915b40\"\n/>\n\n
- Other generated service (from the
env):\n\n![image](https://github.com/user-attachments/assets/e76f2901-050a-4ee3-b536-a057d45454e2)\n
\n- In the meantime \n - using synthtrace: Case to run/expectation\n-
`node scripts/synthtrace otel_edot_simple_trace.ts` / The trace\nsummary
should be visible\n
\n\n![image](https://github.com/user-attachments/assets/b9ad8a8b-f89a-449c-a053-a5628c2fa620)\n\n-
`node scripts/synthtrace simple_trace.ts` / The trace summary
should\nstill be visible (using `url.full` in this case)\n
\n\n![image](https://github.com/user-attachments/assets/93ffac41-9f79-4d09-ab69-ae5c8e782750)","sha":"a987209d3fc6c10153181781bdf1c8c829ceba04"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215397","number":215397,"mergeCommit":{"message":"[APM][OTel]
Add url.full fallback (#215397)\n\n## Summary\n\nThis PR fixes the
missing URL in the transaction summary \n\n## Testing [_UPDATED_]\n-
[SOLVED  ⬇️ ] ~~This is tricky to test ( I am trying to create
a\nserverless instance from this PR and it should make it easier)~~\n-
Testing on serverless (the env linked in the PR) \n - EDOT service (I
run locally in Docker and connect to the env): \n<img width=\"1904\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/c3a7ab56-5b8f-42a5-8033-55ccbb915b40\"\n/>\n\n
- Other generated service (from the
env):\n\n![image](https://github.com/user-attachments/assets/e76f2901-050a-4ee3-b536-a057d45454e2)\n
\n- In the meantime \n - using synthtrace: Case to run/expectation\n-
`node scripts/synthtrace otel_edot_simple_trace.ts` / The trace\nsummary
should be visible\n
\n\n![image](https://github.com/user-attachments/assets/b9ad8a8b-f89a-449c-a053-a5628c2fa620)\n\n-
`node scripts/synthtrace simple_trace.ts` / The trace summary
should\nstill be visible (using `url.full` in this case)\n
\n\n![image](https://github.com/user-attachments/assets/93ffac41-9f79-4d09-ab69-ae5c8e782750)","sha":"a987209d3fc6c10153181781bdf1c8c829ceba04"}}]}]
BACKPORT-->
2025-04-02 12:10:55 +01:00
Kibana Machine
dd540f146c
[8.16] [Vega] Fix update vega spec in functional tests (#216620) (#216670)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Vega] Fix update vega spec in functional tests
(#216620)](https://github.com/elastic/kibana/pull/216620)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Marco
Vettorello","email":"marco.vettorello@elastic.co"},"sourceCommit":{"committedDate":"2025-04-01T15:26:17Z","message":"[Vega]
Fix update vega spec in functional tests (#216620)\n\n## Summary\n\nThis
PR fixes a flaky test practice that was causing issues in
7.17\nbranch.\nThe flakiness was introduced long ago when the choosen
method to\nupdate/add more content to the Vega Spec was done by manually
clicking\nin the Vega spec editor the left border (where the editor
shows the line\nnumbers) to select all the text in the editor and go to
the last line\nbut a char before the end of the text (right before the
closing\nbracket).\n\nThe failure highlighted
by\nhttps://github.com/elastic/kibana/issues/213646 where caused the
added\n`config` text positioned in the wrong line/column due to the
Konami Code\nlike type of functional test operation.\n\n\nThe fix
instead provides a more robust method: it takes the written text\nin the
editor, parse it to JSON, update the JSON and write it back again\nto
the editor.\n\nWill fix the issue
https://github.com/elastic/kibana/issues/213646 when\nbackported to
7.17.","sha":"200ec10593480edc3ef7b0d0ea77b29c787d1382","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","Team:Visualizations","release_note:skip","backport:all-open","v9.1.0"],"title":"[Vega]
Fix update vega spec in functional
tests","number":216620,"url":"https://github.com/elastic/kibana/pull/216620","mergeCommit":{"message":"[Vega]
Fix update vega spec in functional tests (#216620)\n\n## Summary\n\nThis
PR fixes a flaky test practice that was causing issues in
7.17\nbranch.\nThe flakiness was introduced long ago when the choosen
method to\nupdate/add more content to the Vega Spec was done by manually
clicking\nin the Vega spec editor the left border (where the editor
shows the line\nnumbers) to select all the text in the editor and go to
the last line\nbut a char before the end of the text (right before the
closing\nbracket).\n\nThe failure highlighted
by\nhttps://github.com/elastic/kibana/issues/213646 where caused the
added\n`config` text positioned in the wrong line/column due to the
Konami Code\nlike type of functional test operation.\n\n\nThe fix
instead provides a more robust method: it takes the written text\nin the
editor, parse it to JSON, update the JSON and write it back again\nto
the editor.\n\nWill fix the issue
https://github.com/elastic/kibana/issues/213646 when\nbackported to
7.17.","sha":"200ec10593480edc3ef7b0d0ea77b29c787d1382"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216620","number":216620,"mergeCommit":{"message":"[Vega]
Fix update vega spec in functional tests (#216620)\n\n## Summary\n\nThis
PR fixes a flaky test practice that was causing issues in
7.17\nbranch.\nThe flakiness was introduced long ago when the choosen
method to\nupdate/add more content to the Vega Spec was done by manually
clicking\nin the Vega spec editor the left border (where the editor
shows the line\nnumbers) to select all the text in the editor and go to
the last line\nbut a char before the end of the text (right before the
closing\nbracket).\n\nThe failure highlighted
by\nhttps://github.com/elastic/kibana/issues/213646 where caused the
added\n`config` text positioned in the wrong line/column due to the
Konami Code\nlike type of functional test operation.\n\n\nThe fix
instead provides a more robust method: it takes the written text\nin the
editor, parse it to JSON, update the JSON and write it back again\nto
the editor.\n\nWill fix the issue
https://github.com/elastic/kibana/issues/213646 when\nbackported to
7.17.","sha":"200ec10593480edc3ef7b0d0ea77b29c787d1382"}}]}] BACKPORT-->

Co-authored-by: Marco Vettorello <marco.vettorello@elastic.co>
2025-04-02 10:10:50 +01:00
Julia Bardi
747cdd98cc
[8.16][Fleet] Update inputs_with_standalone_docker_agent.ts (#216641)
Related to https://github.com/elastic/kibana/issues/184681
Add try-catch as in main and other backports

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-01 16:37:52 +01:00
Kibana Machine
22e2d62674
[8.16] [Fleet] enable flaky test (#216460) (#216588)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Fleet] enable flaky test
(#216460)](https://github.com/elastic/kibana/pull/216460)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julia
Bardi","email":"90178898+juliaElastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-01T08:29:23Z","message":"[Fleet]
enable flaky test (#216460)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/184681\n\n\n### Checklist\n\n-
[x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests
changed","sha":"69a7108313fab9520fb1f5f7281b5a17e76e3f92","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Fleet","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Fleet]
enable flaky
test","number":216460,"url":"https://github.com/elastic/kibana/pull/216460","mergeCommit":{"message":"[Fleet]
enable flaky test (#216460)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/184681\n\n\n### Checklist\n\n-
[x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests
changed","sha":"69a7108313fab9520fb1f5f7281b5a17e76e3f92"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216460","number":216460,"mergeCommit":{"message":"[Fleet]
enable flaky test (#216460)\n\n## Summary\n\nCloses
https://github.com/elastic/kibana/issues/184681\n\n\n### Checklist\n\n-
[x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests
changed","sha":"69a7108313fab9520fb1f5f7281b5a17e76e3f92"}}]}]
BACKPORT-->

---------

Co-authored-by: Julia Bardi <90178898+juliaElastic@users.noreply.github.com>
2025-04-01 13:37:16 +01:00
Kibana Machine
2a762a4304
[8.16] Fix unenroll inactive agent tasks if first set of agents returned is equal to UNENROLLMENT_BATCH_SIZE (#216283) (#216478)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Fix unenroll inactive agent tasks if first set of agents returned is
equal to UNENROLLMENT_BATCH_SIZE
(#216283)](https://github.com/elastic/kibana/pull/216283)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Mario Rodriguez
Molins","email":"mario.rodriguez@elastic.co"},"sourceCommit":{"committedDate":"2025-03-31T13:55:14Z","message":"Fix
unenroll inactive agent tasks if first set of agents returned is equal
to UNENROLLMENT_BATCH_SIZE (#216283)\n\n## Summary\n\nFix the
unenrollment inactive agent task to be able to unenroll some\nagents
when the number of agents returned by the first\n`getAgentsByKuery`
trigger is equal to the limit of\n`UNENROLLMENT_BATCH_SIZE`.\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [ ] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [ ] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"8728a2328217408e0a377f037486abbc459acd2d","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Fleet","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"Fix
unenroll inactive agent tasks if first set of agents returned is equal
to
UNENROLLMENT_BATCH_SIZE","number":216283,"url":"https://github.com/elastic/kibana/pull/216283","mergeCommit":{"message":"Fix
unenroll inactive agent tasks if first set of agents returned is equal
to UNENROLLMENT_BATCH_SIZE (#216283)\n\n## Summary\n\nFix the
unenrollment inactive agent task to be able to unenroll some\nagents
when the number of agents returned by the first\n`getAgentsByKuery`
trigger is equal to the limit of\n`UNENROLLMENT_BATCH_SIZE`.\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [ ] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [ ] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"8728a2328217408e0a377f037486abbc459acd2d"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216283","number":216283,"mergeCommit":{"message":"Fix
unenroll inactive agent tasks if first set of agents returned is equal
to UNENROLLMENT_BATCH_SIZE (#216283)\n\n## Summary\n\nFix the
unenrollment inactive agent task to be able to unenroll some\nagents
when the number of agents returned by the first\n`getAgentsByKuery`
trigger is equal to the limit of\n`UNENROLLMENT_BATCH_SIZE`.\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [ ] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[
]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[ ] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [ ] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"8728a2328217408e0a377f037486abbc459acd2d"}}]}]
BACKPORT-->

Co-authored-by: Mario Rodriguez Molins <mario.rodriguez@elastic.co>
2025-03-31 17:27:08 +01:00
Kibana Machine
4deefffb00
[8.16] [APM][OTel] Service inventory icons should be visible if the agentName is returned (#216220) (#216464)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM][OTel] Service inventory icons should be visible if the
`agentName` is returned
(#216220)](https://github.com/elastic/kibana/pull/216220)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"jennypavlova","email":"dzheni.pavlova@elastic.co"},"sourceCommit":{"committedDate":"2025-03-31T13:07:17Z","message":"[APM][OTel]
Service inventory icons should be visible if the `agentName` is returned
(#216220)\n\nCloses #214562 \n\n## Summary\n\nThis PR fixes the issue
with the service icons overridden by the merge\nof the service
stats\n\n## Testing\nAs this is a bit tricky to test - it needs a bit of
refreshing /\nchanging the time range, etc. to reproduce\nThe way to
verify the fix is to check the service overview - every\nservice that
has an icon there should have an icon in the
service\ninventory:\n\n\nhttps://github.com/user-attachments/assets/e401554b-6a39-440b-a52b-a126e42eacd5","sha":"cd8f18eed82722bfee3c27829ba233b381aea0cc","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:prev-minor","backport:prev-major","Team:obs-ux-infra_services","v9.1.0"],"title":"[APM][OTel]
Service inventory icons should be visible if the `agentName` is
returned","number":216220,"url":"https://github.com/elastic/kibana/pull/216220","mergeCommit":{"message":"[APM][OTel]
Service inventory icons should be visible if the `agentName` is returned
(#216220)\n\nCloses #214562 \n\n## Summary\n\nThis PR fixes the issue
with the service icons overridden by the merge\nof the service
stats\n\n## Testing\nAs this is a bit tricky to test - it needs a bit of
refreshing /\nchanging the time range, etc. to reproduce\nThe way to
verify the fix is to check the service overview - every\nservice that
has an icon there should have an icon in the
service\ninventory:\n\n\nhttps://github.com/user-attachments/assets/e401554b-6a39-440b-a52b-a126e42eacd5","sha":"cd8f18eed82722bfee3c27829ba233b381aea0cc"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216220","number":216220,"mergeCommit":{"message":"[APM][OTel]
Service inventory icons should be visible if the `agentName` is returned
(#216220)\n\nCloses #214562 \n\n## Summary\n\nThis PR fixes the issue
with the service icons overridden by the merge\nof the service
stats\n\n## Testing\nAs this is a bit tricky to test - it needs a bit of
refreshing /\nchanging the time range, etc. to reproduce\nThe way to
verify the fix is to check the service overview - every\nservice that
has an icon there should have an icon in the
service\ninventory:\n\n\nhttps://github.com/user-attachments/assets/e401554b-6a39-440b-a52b-a126e42eacd5","sha":"cd8f18eed82722bfee3c27829ba233b381aea0cc"}}]}]
BACKPORT-->

Co-authored-by: jennypavlova <dzheni.pavlova@elastic.co>
2025-03-31 16:11:49 +01:00
Kibana Machine
91f571069c
[8.16] Fixes Failing test: X-Pack Alerting API Integration Tests - Alerting - group3.x-pack/test/alerting_api_integration/spaces_only/tests/alerting/group3/builtin_alert_types/es_query/rule·ts - Alerting builtin alertTypes es_query rule runs correctly: threshold on ungrouped hit count < > for esQuery search type (#215604) (#216368)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Fixes Failing test: X-Pack Alerting API Integration Tests - Alerting
-
group3.x-pack/test/alerting_api_integration/spaces_only/tests/alerting/group3/builtin_alert_types/es_query/rule·ts
- Alerting builtin alertTypes es_query rule runs correctly: threshold on
ungrouped hit count < > for esQuery search type
(#215604)](https://github.com/elastic/kibana/pull/215604)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Ying
Mao","email":"ying.mao@elastic.co"},"sourceCommit":{"committedDate":"2025-03-28T18:40:18Z","message":"Fixes
Failing test: X-Pack Alerting API Integration Tests - Alerting -
group3.x-pack/test/alerting_api_integration/spaces_only/tests/alerting/group3/builtin_alert_types/es_query/rule·ts
- Alerting builtin alertTypes es_query rule runs correctly: threshold on
ungrouped hit count < > for esQuery search type (#215604)\n\nResolves
https://github.com/elastic/kibana/issues/194701\n\n## Summary\n\nThe
rule conditions are testing that the doc count > -1 but we're\ntesting
that the evaluated value is > 0. Because an evaluated value of 0\nwill
also match the rule condition, occasionally this expect would
fail.\nUpdated the test to match what is allowed by the rule
condition.\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"df728ab823e2fb007a816d98f99faf1fef558b4c","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Alerting","release_note:skip","Team:ResponseOps","v8.16.0","backport:version","v9.1.0","v8.19.0"],"title":"Fixes
Failing test: X-Pack Alerting API Integration Tests - Alerting -
group3.x-pack/test/alerting_api_integration/spaces_only/tests/alerting/group3/builtin_alert_types/es_query/rule·ts
- Alerting builtin alertTypes es_query rule runs correctly: threshold on
ungrouped hit count < > for esQuery search
type","number":215604,"url":"https://github.com/elastic/kibana/pull/215604","mergeCommit":{"message":"Fixes
Failing test: X-Pack Alerting API Integration Tests - Alerting -
group3.x-pack/test/alerting_api_integration/spaces_only/tests/alerting/group3/builtin_alert_types/es_query/rule·ts
- Alerting builtin alertTypes es_query rule runs correctly: threshold on
ungrouped hit count < > for esQuery search type (#215604)\n\nResolves
https://github.com/elastic/kibana/issues/194701\n\n## Summary\n\nThe
rule conditions are testing that the doc count > -1 but we're\ntesting
that the evaluated value is > 0. Because an evaluated value of 0\nwill
also match the rule condition, occasionally this expect would
fail.\nUpdated the test to match what is allowed by the rule
condition.\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"df728ab823e2fb007a816d98f99faf1fef558b4c"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.x"],"targetPullRequestStates":[{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215604","number":215604,"mergeCommit":{"message":"Fixes
Failing test: X-Pack Alerting API Integration Tests - Alerting -
group3.x-pack/test/alerting_api_integration/spaces_only/tests/alerting/group3/builtin_alert_types/es_query/rule·ts
- Alerting builtin alertTypes es_query rule runs correctly: threshold on
ungrouped hit count < > for esQuery search type (#215604)\n\nResolves
https://github.com/elastic/kibana/issues/194701\n\n## Summary\n\nThe
rule conditions are testing that the doc count > -1 but we're\ntesting
that the evaluated value is > 0. Because an evaluated value of 0\nwill
also match the rule condition, occasionally this expect would
fail.\nUpdated the test to match what is allowed by the rule
condition.\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"df728ab823e2fb007a816d98f99faf1fef558b4c"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Ying Mao <ying.mao@elastic.co>
2025-03-28 21:37:19 +01:00
Kibana Machine
a96987c38c
[8.16] [Fleet] disable unenroll action on agentless agents (#216299) (#216331)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Fleet] disable unenroll action on agentless agents
(#216299)](https://github.com/elastic/kibana/pull/216299)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julia
Bardi","email":"90178898+juliaElastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-28T15:51:02Z","message":"[Fleet]
disable unenroll action on agentless agents (#216299)\n\n##
Summary\n\nCloses
https://github.com/elastic/kibana/issues/209173\n\nDisable Unenroll
agent action on agentless agents\n\n<img width=\"1124\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/6603bac5-b0b1-4a20-8b16-f121bd69e969\"\n/>\n<img
width=\"1126\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/e41bca5b-f73d-44bc-b095-9970a25f6322\"\n/>","sha":"6914495033b75d80af64a247768223547f501234","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Fleet","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Fleet]
disable unenroll action on agentless
agents","number":216299,"url":"https://github.com/elastic/kibana/pull/216299","mergeCommit":{"message":"[Fleet]
disable unenroll action on agentless agents (#216299)\n\n##
Summary\n\nCloses
https://github.com/elastic/kibana/issues/209173\n\nDisable Unenroll
agent action on agentless agents\n\n<img width=\"1124\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/6603bac5-b0b1-4a20-8b16-f121bd69e969\"\n/>\n<img
width=\"1126\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/e41bca5b-f73d-44bc-b095-9970a25f6322\"\n/>","sha":"6914495033b75d80af64a247768223547f501234"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/216299","number":216299,"mergeCommit":{"message":"[Fleet]
disable unenroll action on agentless agents (#216299)\n\n##
Summary\n\nCloses
https://github.com/elastic/kibana/issues/209173\n\nDisable Unenroll
agent action on agentless agents\n\n<img width=\"1124\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/6603bac5-b0b1-4a20-8b16-f121bd69e969\"\n/>\n<img
width=\"1126\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/e41bca5b-f73d-44bc-b095-9970a25f6322\"\n/>","sha":"6914495033b75d80af64a247768223547f501234"}}]}]
BACKPORT-->

Co-authored-by: Julia Bardi <90178898+juliaElastic@users.noreply.github.com>
2025-03-28 18:49:57 +01:00
Kibana Machine
89257878bd
[8.16] fix: [Analytics:Maps page]Duplication of elements announcement (#215684) (#216182)
# Backport

This will backport the following commits from `main` to `8.16`:
- [fix: [Analytics:Maps page]Duplication of elements announcement
(#215684)](https://github.com/elastic/kibana/pull/215684)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alexey
Antonov","email":"alexwizp@gmail.com"},"sourceCommit":{"committedDate":"2025-03-27T14:13:56Z","message":"fix:
[Analytics:Maps page]Duplication of elements announcement
(#215684)\n\nPart of: #215647\n\n## Summary\n\nIt is enough for user to
hear the same information once upon reaching\nelement.\nEspecially for
the users using assistive technology.\n\n### Changes made: \n\n1.
Partially fix #215647. Only list page related part! Text
for\n'aria-label' attribute were updated\n\n### Screen:\n\n<img
width=\"1408\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/be4f6166-238e-484e-bbc2-cbb6bf5de162\"\n/>\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ef5a2c9adba43f849eda3a3134371461fee7c846","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Project:Accessibility","release_note:skip","backport:prev-major","v9.1.0"],"title":"fix:
[Analytics:Maps page]Duplication of elements
announcement","number":215684,"url":"https://github.com/elastic/kibana/pull/215684","mergeCommit":{"message":"fix:
[Analytics:Maps page]Duplication of elements announcement
(#215684)\n\nPart of: #215647\n\n## Summary\n\nIt is enough for user to
hear the same information once upon reaching\nelement.\nEspecially for
the users using assistive technology.\n\n### Changes made: \n\n1.
Partially fix #215647. Only list page related part! Text
for\n'aria-label' attribute were updated\n\n### Screen:\n\n<img
width=\"1408\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/be4f6166-238e-484e-bbc2-cbb6bf5de162\"\n/>\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ef5a2c9adba43f849eda3a3134371461fee7c846"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215684","number":215684,"mergeCommit":{"message":"fix:
[Analytics:Maps page]Duplication of elements announcement
(#215684)\n\nPart of: #215647\n\n## Summary\n\nIt is enough for user to
hear the same information once upon reaching\nelement.\nEspecially for
the users using assistive technology.\n\n### Changes made: \n\n1.
Partially fix #215647. Only list page related part! Text
for\n'aria-label' attribute were updated\n\n### Screen:\n\n<img
width=\"1408\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/be4f6166-238e-484e-bbc2-cbb6bf5de162\"\n/>\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"ef5a2c9adba43f849eda3a3134371461fee7c846"}}]}]
BACKPORT-->

Co-authored-by: Alexey Antonov <alexwizp@gmail.com>
2025-03-27 18:44:28 +02:00
Tiago Costa
f0e2691a1b
chore(NA): bump version to 8.16.7 (#215927)
Usually bump from 8.16.6 to 8.16.7
2025-03-25 21:00:08 +00:00
Kibana Machine
2dbf8e2a2d
[8.16] Fix text overflow and alignment in agent details integration input status (#215807) (#215936)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Fix text overflow and alignment in agent details integration input
status (#215807)](https://github.com/elastic/kibana/pull/215807)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Michel
Losier","email":"mikelosier@gmail.com"},"sourceCommit":{"committedDate":"2025-03-25T15:51:26Z","message":"Fix
text overflow and alignment in agent details integration input status
(#215807)\n\n## Summary\n\nAddresses:
https://github.com/elastic/kibana/issues/176271\n\n* Allows text
overflow in the Agent details integration input statuses\nto flow to the
next lines\n* Applies left alignment as well, which makes it consistent
with the\nstyling in error callouts and content in the policy response
tree
view.","sha":"31ea22e207cae78a597581dd78106ef8d6bfc526","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Fleet","backport:prev-major","v9.1.0"],"title":"Fix
text overflow and alignment in agent details integration input
status","number":215807,"url":"https://github.com/elastic/kibana/pull/215807","mergeCommit":{"message":"Fix
text overflow and alignment in agent details integration input status
(#215807)\n\n## Summary\n\nAddresses:
https://github.com/elastic/kibana/issues/176271\n\n* Allows text
overflow in the Agent details integration input statuses\nto flow to the
next lines\n* Applies left alignment as well, which makes it consistent
with the\nstyling in error callouts and content in the policy response
tree
view.","sha":"31ea22e207cae78a597581dd78106ef8d6bfc526"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215807","number":215807,"mergeCommit":{"message":"Fix
text overflow and alignment in agent details integration input status
(#215807)\n\n## Summary\n\nAddresses:
https://github.com/elastic/kibana/issues/176271\n\n* Allows text
overflow in the Agent details integration input statuses\nto flow to the
next lines\n* Applies left alignment as well, which makes it consistent
with the\nstyling in error callouts and content in the policy response
tree view.","sha":"31ea22e207cae78a597581dd78106ef8d6bfc526"}}]}]
BACKPORT-->

Co-authored-by: Michel Losier <mikelosier@gmail.com>
2025-03-25 22:43:10 +02:00
Kibana Machine
a8b89ce376
[8.16] Disable allowAbsoluteUrls for axios (#215138) (#215826)
# Backport

This will backport the following commits from `main` to `8.16`:
- [Disable `allowAbsoluteUrls` for axios
(#215138)](https://github.com/elastic/kibana/pull/215138)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alex
Szabo","email":"alex.szabo@elastic.co"},"sourceCommit":{"committedDate":"2025-03-25T08:52:36Z","message":"Disable
`allowAbsoluteUrls` for axios (#215138)\n\n## Summary\nAfter
https://github.com/elastic/kibana/pull/214843, `axios` client\nusages
need to set a flag to prevent the vulnerable behavior.\n\nTo reviewers:
if you think it's a mistake, and you created a client to\nrequest for
absolute URLs, consider unsetting the `baseURL` to\ncommunicate
intent.","sha":"e40b17aa22ec1a2fbc56ae8651e12f658099ec14","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Operations","Team:QA","Team:Security","release_note:skip","backport:all-open","Team:obs-ux-logs","Team:obs-ux-infra_services","v9.1.0"],"title":"Disable
`allowAbsoluteUrls` for
axios","number":215138,"url":"https://github.com/elastic/kibana/pull/215138","mergeCommit":{"message":"Disable
`allowAbsoluteUrls` for axios (#215138)\n\n## Summary\nAfter
https://github.com/elastic/kibana/pull/214843, `axios` client\nusages
need to set a flag to prevent the vulnerable behavior.\n\nTo reviewers:
if you think it's a mistake, and you created a client to\nrequest for
absolute URLs, consider unsetting the `baseURL` to\ncommunicate
intent.","sha":"e40b17aa22ec1a2fbc56ae8651e12f658099ec14"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215138","number":215138,"mergeCommit":{"message":"Disable
`allowAbsoluteUrls` for axios (#215138)\n\n## Summary\nAfter
https://github.com/elastic/kibana/pull/214843, `axios` client\nusages
need to set a flag to prevent the vulnerable behavior.\n\nTo reviewers:
if you think it's a mistake, and you created a client to\nrequest for
absolute URLs, consider unsetting the `baseURL` to\ncommunicate
intent.","sha":"e40b17aa22ec1a2fbc56ae8651e12f658099ec14"}}]}]
BACKPORT-->

---------

Co-authored-by: Alex Szabo <alex.szabo@elastic.co>
2025-03-25 18:23:12 +02:00
Kibana Machine
5fae0523ef
[8.16] [Visualize] Unskip smoke test (#214960) (#215835)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Visualize] Unskip smoke test
(#214960)](https://github.com/elastic/kibana/pull/214960)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Marco
Vettorello","email":"marco.vettorello@elastic.co"},"sourceCommit":{"committedDate":"2025-03-25T09:30:07Z","message":"[Visualize]
Unskip smoke test (#214960)\n\n## Summary\n\nUnskipping and fixing
skipped test\n\nThe reported issue was referring to an issue with a TSVB
chart that was\ntrying to load a missing data view.\nIf not explicitly
configured in the configuration, TSVB can load the\ndefault data view
configured in the Advanced Settings.\nThere is no mention of the missing
dataview ID in the the dashboard nor\nin the TSVB panel
configuration.\nThe TSVB configuration uses at this point the default
index coming from\nthe Advanced Settings, so that ID seems to be
configured as the default\nID but there is no loaded dataview with that
name.\nThe data view ID appearing in the error was referencing the
ecommerce\ndashboard, that was not used and not loaded in this test (all
charts\nrefers to the logs* data
view).\n\n\n![image](https://github.com/user-attachments/assets/d79c4945-11b5-4ee4-88a2-5b13ee9bc2f2)\n\nI
believe this issues was caused by other tests in the same
suite/config\nthat configured the `defaultIndex` setting without
unsetting
it.","sha":"12aa3fc6ca8124db8cf5e940baec121482fd1a4b","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","Team:Visualizations","skipped-test","release_note:skip","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Visualize]
Unskip smoke
test","number":214960,"url":"https://github.com/elastic/kibana/pull/214960","mergeCommit":{"message":"[Visualize]
Unskip smoke test (#214960)\n\n## Summary\n\nUnskipping and fixing
skipped test\n\nThe reported issue was referring to an issue with a TSVB
chart that was\ntrying to load a missing data view.\nIf not explicitly
configured in the configuration, TSVB can load the\ndefault data view
configured in the Advanced Settings.\nThere is no mention of the missing
dataview ID in the the dashboard nor\nin the TSVB panel
configuration.\nThe TSVB configuration uses at this point the default
index coming from\nthe Advanced Settings, so that ID seems to be
configured as the default\nID but there is no loaded dataview with that
name.\nThe data view ID appearing in the error was referencing the
ecommerce\ndashboard, that was not used and not loaded in this test (all
charts\nrefers to the logs* data
view).\n\n\n![image](https://github.com/user-attachments/assets/d79c4945-11b5-4ee4-88a2-5b13ee9bc2f2)\n\nI
believe this issues was caused by other tests in the same
suite/config\nthat configured the `defaultIndex` setting without
unsetting
it.","sha":"12aa3fc6ca8124db8cf5e940baec121482fd1a4b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214960","number":214960,"mergeCommit":{"message":"[Visualize]
Unskip smoke test (#214960)\n\n## Summary\n\nUnskipping and fixing
skipped test\n\nThe reported issue was referring to an issue with a TSVB
chart that was\ntrying to load a missing data view.\nIf not explicitly
configured in the configuration, TSVB can load the\ndefault data view
configured in the Advanced Settings.\nThere is no mention of the missing
dataview ID in the the dashboard nor\nin the TSVB panel
configuration.\nThe TSVB configuration uses at this point the default
index coming from\nthe Advanced Settings, so that ID seems to be
configured as the default\nID but there is no loaded dataview with that
name.\nThe data view ID appearing in the error was referencing the
ecommerce\ndashboard, that was not used and not loaded in this test (all
charts\nrefers to the logs* data
view).\n\n\n![image](https://github.com/user-attachments/assets/d79c4945-11b5-4ee4-88a2-5b13ee9bc2f2)\n\nI
believe this issues was caused by other tests in the same
suite/config\nthat configured the `defaultIndex` setting without
unsetting it.","sha":"12aa3fc6ca8124db8cf5e940baec121482fd1a4b"}}]}]
BACKPORT-->

Co-authored-by: Marco Vettorello <marco.vettorello@elastic.co>
2025-03-25 13:49:20 +02:00
Julia Bardi
6272be63eb
[8.16][Fleet] fix schema validation when updating package policy (#214770)
Backport https://github.com/elastic/kibana/pull/214571

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-25 08:39:55 +01:00
Kibana Machine
b0bb198524
[8.16] [Oblt Onboarding][K8S OTel] Use helm upgrade --install (#215160) (#215679)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Oblt Onboarding][K8S OTel] Use helm upgrade --install
(#215160)](https://github.com/elastic/kibana/pull/215160)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Mykola
Harmash","email":"mykola.harmash@gmail.com"},"sourceCommit":{"committedDate":"2025-03-24T12:20:45Z","message":"[Oblt
Onboarding][K8S OTel] Use helm upgrade --install (#215160)\n\nCloses
#215134\n\nUsing `helm upgrade --install` lets the user run the helm
command\nmultiple times to, for example, upgrade to the new version
after a stack\nrelease.\n\n![CleanShot 2025-03-19 at 13
48\n39@2x](https://github.com/user-attachments/assets/196c8d6d-1046-44d3-8d44-c300fa0418af)\n\n##
How to test\n\n1. Run Kibana and navigate to the K8S OTel onboarding
flow\n2. Execute snippets provided by the flow\n3. Copy only the `helm
upgrade --install ...` part of the second snippet\nand execute it
again\n4. Make sure the command succeeds\n\nCo-authored-by: Joe Reuter
<johannes.reuter@elastic.co>","sha":"007caa1b55b6bf47dc852aa2c38cd77ff1753d0e","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:prev-major","ci:project-deploy-observability","Feature:
Observability Onboarding","v9.1.0"],"title":"[Oblt Onboarding][K8S OTel]
Use helm upgrade
--install","number":215160,"url":"https://github.com/elastic/kibana/pull/215160","mergeCommit":{"message":"[Oblt
Onboarding][K8S OTel] Use helm upgrade --install (#215160)\n\nCloses
#215134\n\nUsing `helm upgrade --install` lets the user run the helm
command\nmultiple times to, for example, upgrade to the new version
after a stack\nrelease.\n\n![CleanShot 2025-03-19 at 13
48\n39@2x](https://github.com/user-attachments/assets/196c8d6d-1046-44d3-8d44-c300fa0418af)\n\n##
How to test\n\n1. Run Kibana and navigate to the K8S OTel onboarding
flow\n2. Execute snippets provided by the flow\n3. Copy only the `helm
upgrade --install ...` part of the second snippet\nand execute it
again\n4. Make sure the command succeeds\n\nCo-authored-by: Joe Reuter
<johannes.reuter@elastic.co>","sha":"007caa1b55b6bf47dc852aa2c38cd77ff1753d0e"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215160","number":215160,"mergeCommit":{"message":"[Oblt
Onboarding][K8S OTel] Use helm upgrade --install (#215160)\n\nCloses
#215134\n\nUsing `helm upgrade --install` lets the user run the helm
command\nmultiple times to, for example, upgrade to the new version
after a stack\nrelease.\n\n![CleanShot 2025-03-19 at 13
48\n39@2x](https://github.com/user-attachments/assets/196c8d6d-1046-44d3-8d44-c300fa0418af)\n\n##
How to test\n\n1. Run Kibana and navigate to the K8S OTel onboarding
flow\n2. Execute snippets provided by the flow\n3. Copy only the `helm
upgrade --install ...` part of the second snippet\nand execute it
again\n4. Make sure the command succeeds\n\nCo-authored-by: Joe Reuter
<johannes.reuter@elastic.co>","sha":"007caa1b55b6bf47dc852aa2c38cd77ff1753d0e"}}]}]
BACKPORT-->

Co-authored-by: Mykola Harmash <mykola.harmash@gmail.com>
2025-03-24 16:20:38 +02:00
jennypavlova
6f81d4570c
[8.16] [APM] Fix: Add missing user_agent version field and show it on the trace summary (#215403) (#215556)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM] Fix: Add missing user_agent version field and show it on the
trace summary (#215403)](https://github.com/elastic/kibana/pull/215403)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"jennypavlova","email":"dzheni.pavlova@elastic.co"},"sourceCommit":{"committedDate":"2025-03-21T17:33:01Z","message":"[APM]
Fix: Add missing user_agent version field and show it on the trace
summary (#215403)\n\nCloses #215229 \n\n## Summary\n\nThis PR adds the
`USER_AGENT_VERSION` missing field to the\n`optionalFields` query
fields\n\n## Testing\n\n- Find a trace with user agent version (on the
edge oblt we have it for\n`elastic-co-frontend` for example)\n- Go to
the transaction tab (in case of `elastic-co-frontend` click
on\n`/blog/:id`)\nIf the user agent version is available it should be
visible in the trace\nsummary:\n\n<img width=\"1155\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/75b7e331-44d0-4d1c-8060-815c269e23c9\"\n/>","sha":"42a66131c529ff3f48a037abd40fef118a09d248","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:prev-minor","backport:prev-major","Team:obs-ux-infra_services","v9.1.0"],"title":"[APM]
Fix: Add missing user_agent version field and show it on the trace
summary","number":215403,"url":"https://github.com/elastic/kibana/pull/215403","mergeCommit":{"message":"[APM]
Fix: Add missing user_agent version field and show it on the trace
summary (#215403)\n\nCloses #215229 \n\n## Summary\n\nThis PR adds the
`USER_AGENT_VERSION` missing field to the\n`optionalFields` query
fields\n\n## Testing\n\n- Find a trace with user agent version (on the
edge oblt we have it for\n`elastic-co-frontend` for example)\n- Go to
the transaction tab (in case of `elastic-co-frontend` click
on\n`/blog/:id`)\nIf the user agent version is available it should be
visible in the trace\nsummary:\n\n<img width=\"1155\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/75b7e331-44d0-4d1c-8060-815c269e23c9\"\n/>","sha":"42a66131c529ff3f48a037abd40fef118a09d248"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215403","number":215403,"mergeCommit":{"message":"[APM]
Fix: Add missing user_agent version field and show it on the trace
summary (#215403)\n\nCloses #215229 \n\n## Summary\n\nThis PR adds the
`USER_AGENT_VERSION` missing field to the\n`optionalFields` query
fields\n\n## Testing\n\n- Find a trace with user agent version (on the
edge oblt we have it for\n`elastic-co-frontend` for example)\n- Go to
the transaction tab (in case of `elastic-co-frontend` click
on\n`/blog/:id`)\nIf the user agent version is available it should be
visible in the trace\nsummary:\n\n<img width=\"1155\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/75b7e331-44d0-4d1c-8060-815c269e23c9\"\n/>","sha":"42a66131c529ff3f48a037abd40fef118a09d248"}}]}]
BACKPORT-->
2025-03-24 14:20:57 +02:00
Kibana Machine
cbe918e295
[8.16] [Lens] fix drag and drop ghost after Chrome update to 134 (#213928) (#214123)
# Backport

This will backport the following commits from `main` to `8.16`:
 - https://github.com/elastic/kibana/pull/213928
 - https://github.com/elastic/kibana/pull/215439

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Marta
Bondyra","email":"4283304+mbondyra@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-12T11:30:51Z","message":"[Lens]
fix drag and drop ghost after Chrome update to 134 (#213928)\n\n##
Summary\nFixes https://github.com/elastic/kibana/issues/213708\n\nFixes
the ghost display. As @nickofthyme pointed
out\n[here](https://github.com/elastic/kibana/issues/213708#issuecomment-2712076212),\nthe
reason was using inset-inline-start: -10000px for the keyboard\nhandler
that is one of the children of the draggable component. The\nquick fix
is to just move it outside of the html element that is\ndragged.
@markov00 please assesswhere it should be merged
🙏🏼\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"84ae9c98c208957b3efc02c6b00bed8d567d4209","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Discover","release_note:fix","Team:Visualizations","Feature:Lens","backport:prev-minor","backport:prev-major","Feature:UnifiedFieldList","v9.1.0"],"title":"[Lens]
fix drag and drop ghost after Chrome update to
134","number":213928,"url":"https://github.com/elastic/kibana/pull/213928","mergeCommit":{"message":"[Lens]
fix drag and drop ghost after Chrome update to 134 (#213928)\n\n##
Summary\nFixes https://github.com/elastic/kibana/issues/213708\n\nFixes
the ghost display. As @nickofthyme pointed
out\n[here](https://github.com/elastic/kibana/issues/213708#issuecomment-2712076212),\nthe
reason was using inset-inline-start: -10000px for the keyboard\nhandler
that is one of the children of the draggable component. The\nquick fix
is to just move it outside of the html element that is\ndragged.
@markov00 please assesswhere it should be merged
🙏🏼\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"84ae9c98c208957b3efc02c6b00bed8d567d4209"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213928","number":213928,"mergeCommit":{"message":"[Lens]
fix drag and drop ghost after Chrome update to 134 (#213928)\n\n##
Summary\nFixes https://github.com/elastic/kibana/issues/213708\n\nFixes
the ghost display. As @nickofthyme pointed
out\n[here](https://github.com/elastic/kibana/issues/213708#issuecomment-2712076212),\nthe
reason was using inset-inline-start: -10000px for the keyboard\nhandler
that is one of the children of the draggable component. The\nquick fix
is to just move it outside of the html element that is\ndragged.
@markov00 please assesswhere it should be merged
🙏🏼\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"84ae9c98c208957b3efc02c6b00bed8d567d4209"}}]}]
BACKPORT-->

---------

Co-authored-by: Marta Bondyra <4283304+mbondyra@users.noreply.github.com>
Co-authored-by: Nick Partridge <nicholas.partridge@elastic.co>
2025-03-22 03:16:14 +02:00
Kibana Machine
2d13929ba9
[8.16] [Search Profiler] Index field no longer resets on query edit (#215420) (#215496)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Search Profiler] Index field no longer resets on query edit
(#215420)](https://github.com/elastic/kibana/pull/215420)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Matthew
Kime","email":"matt@mattki.me"},"sourceCommit":{"committedDate":"2025-03-21T13:29:33Z","message":"[Search
Profiler] Index field no longer resets on query edit (#215420)\n\n##
Summary\n\nPreviously, editing the query would reset the index field to
`_all`.\nThis was due to using `useState` instead of `useRef` to store
the query\nvalue.\n\nCloses
https://github.com/elastic/kibana/issues/214416\n\nHow to test\n1. Go to
search profiler\n2. Enter an index name, anything but `_all` - which is
already there\n3. Edit the query\n4. Did the index value remain
unchanged? Good! Its fixed!\n\nALSO - need to test to make sure this
works with content in the
url.","sha":"f77e29f5827c621d29959cbbf8514ce497565263","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Feature:Kibana
Management","Feature:Search
Profiler","backport:prev-major","v9.1.0"],"title":"[Search Profiler]
Index field no longer resets on query
edit","number":215420,"url":"https://github.com/elastic/kibana/pull/215420","mergeCommit":{"message":"[Search
Profiler] Index field no longer resets on query edit (#215420)\n\n##
Summary\n\nPreviously, editing the query would reset the index field to
`_all`.\nThis was due to using `useState` instead of `useRef` to store
the query\nvalue.\n\nCloses
https://github.com/elastic/kibana/issues/214416\n\nHow to test\n1. Go to
search profiler\n2. Enter an index name, anything but `_all` - which is
already there\n3. Edit the query\n4. Did the index value remain
unchanged? Good! Its fixed!\n\nALSO - need to test to make sure this
works with content in the
url.","sha":"f77e29f5827c621d29959cbbf8514ce497565263"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/215420","number":215420,"mergeCommit":{"message":"[Search
Profiler] Index field no longer resets on query edit (#215420)\n\n##
Summary\n\nPreviously, editing the query would reset the index field to
`_all`.\nThis was due to using `useState` instead of `useRef` to store
the query\nvalue.\n\nCloses
https://github.com/elastic/kibana/issues/214416\n\nHow to test\n1. Go to
search profiler\n2. Enter an index name, anything but `_all` - which is
already there\n3. Edit the query\n4. Did the index value remain
unchanged? Good! Its fixed!\n\nALSO - need to test to make sure this
works with content in the
url.","sha":"f77e29f5827c621d29959cbbf8514ce497565263"}}]}] BACKPORT-->

Co-authored-by: Matthew Kime <matt@mattki.me>
2025-03-21 17:48:56 +02:00
Kibana Machine
5c7faae742
[8.16] [ResponseOps] Snooze Scheduler UX for recurring snoozes shows incorrect summary (#214797) (#215463)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ResponseOps] Snooze Scheduler UX for recurring snoozes shows
incorrect summary
(#214797)](https://github.com/elastic/kibana/pull/214797)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"Julia","email":"iuliia.guskova@elastic.co"},"sourceCommit":{"committedDate":"2025-03-21T10:47:28Z","message":"[ResponseOps]
Snooze Scheduler UX for recurring snoozes shows incorrect summary
(#214797)\n\nSolves:
https://github.com/elastic/kibana/issues/210119\n\n## Summary\n\nHow to
test:\nReproduce bug from an issue. But create a rule in Stack
management.\nAction is not needed. You can test it on
main.\n![Screenshot 2025-03-19 at 20
43\n09](https://github.com/user-attachments/assets/2b311a28-c474-4883-8f75-34f9de87a493)\n\n![Screenshot
2025-03-19 at 20
46\n56](https://github.com/user-attachments/assets/894e26c6-b298-40c2-9d6a-c5fd460300d2)\n\nWhen
you add new schedule and save it, you should see proper date here\nas
well:\n\n![Screenshot 2025-03-19 at 20
59\n53](https://github.com/user-attachments/assets/28239de4-ee99-4e51-a88a-ca78e5248f5f)\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"fdd872ada18ce7255cfac396a26dab46d9282dcb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Alerting","release_note:skip","Team:ResponseOps","backport:version","v9.1.0","v8.19.0","v8.18.1","v8.16.6","v8.17.4"],"title":"[ResponseOps]
Snooze Scheduler UX for recurring snoozes shows incorrect summary
","number":214797,"url":"https://github.com/elastic/kibana/pull/214797","mergeCommit":{"message":"[ResponseOps]
Snooze Scheduler UX for recurring snoozes shows incorrect summary
(#214797)\n\nSolves:
https://github.com/elastic/kibana/issues/210119\n\n## Summary\n\nHow to
test:\nReproduce bug from an issue. But create a rule in Stack
management.\nAction is not needed. You can test it on
main.\n![Screenshot 2025-03-19 at 20
43\n09](https://github.com/user-attachments/assets/2b311a28-c474-4883-8f75-34f9de87a493)\n\n![Screenshot
2025-03-19 at 20
46\n56](https://github.com/user-attachments/assets/894e26c6-b298-40c2-9d6a-c5fd460300d2)\n\nWhen
you add new schedule and save it, you should see proper date here\nas
well:\n\n![Screenshot 2025-03-19 at 20
59\n53](https://github.com/user-attachments/assets/28239de4-ee99-4e51-a88a-ca78e5248f5f)\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"fdd872ada18ce7255cfac396a26dab46d9282dcb"}},"sourceBranch":"main","suggestedTargetBranches":["8.x","8.18","8.16","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214797","number":214797,"mergeCommit":{"message":"[ResponseOps]
Snooze Scheduler UX for recurring snoozes shows incorrect summary
(#214797)\n\nSolves:
https://github.com/elastic/kibana/issues/210119\n\n## Summary\n\nHow to
test:\nReproduce bug from an issue. But create a rule in Stack
management.\nAction is not needed. You can test it on
main.\n![Screenshot 2025-03-19 at 20
43\n09](https://github.com/user-attachments/assets/2b311a28-c474-4883-8f75-34f9de87a493)\n\n![Screenshot
2025-03-19 at 20
46\n56](https://github.com/user-attachments/assets/894e26c6-b298-40c2-9d6a-c5fd460300d2)\n\nWhen
you add new schedule and save it, you should see proper date here\nas
well:\n\n![Screenshot 2025-03-19 at 20
59\n53](https://github.com/user-attachments/assets/28239de4-ee99-4e51-a88a-ca78e5248f5f)\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"fdd872ada18ce7255cfac396a26dab46d9282dcb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.4","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Julia <iuliia.guskova@elastic.co>
2025-03-21 14:47:44 +02:00
Jan Monschke
99e99172e6
[8.16] [Security Solution] Add retrieve results to security solution search strategy (#207307) (#215275)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Security Solution] Add retrieve results to security solution search
strategy (#207307)](https://github.com/elastic/kibana/pull/207307)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Angela
Chuang","email":"6295984+angorayc@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-01-21T13:19:49Z","message":"[Security
Solution] Add retrieve results to security solution search strategy
(#207307)\n\n##
Summary\r\n\r\nhttps://github.com/elastic/kibana/pull/189031\r\n\r\nhttps://p.elstc.co/paste/pCGQy1nV#B7fBRtGiDq-QN14qT/eE8zPOPWgXP88672NIcbSblaD\r\nWithout
`options.retrieveResults = true`
parameter,\r\n`response.rawResponse.hits.hits` from search strategy can
be undefined\r\n\r\n### Checklist\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"91eefe437a0ef68de34cd6f50f2a1e9cb93f6fc2","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["backport","release_note:skip","v9.0.0","v8.18.0"],"title":"[Security
Solution] Add retrieve results to security solution search
strategy","number":207307,"url":"https://github.com/elastic/kibana/pull/207307","mergeCommit":{"message":"[Security
Solution] Add retrieve results to security solution search strategy
(#207307)\n\n##
Summary\r\n\r\nhttps://github.com/elastic/kibana/pull/189031\r\n\r\nhttps://p.elstc.co/paste/pCGQy1nV#B7fBRtGiDq-QN14qT/eE8zPOPWgXP88672NIcbSblaD\r\nWithout
`options.retrieveResults = true`
parameter,\r\n`response.rawResponse.hits.hits` from search strategy can
be undefined\r\n\r\n### Checklist\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"91eefe437a0ef68de34cd6f50f2a1e9cb93f6fc2"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/207307","number":207307,"mergeCommit":{"message":"[Security
Solution] Add retrieve results to security solution search strategy
(#207307)\n\n##
Summary\r\n\r\nhttps://github.com/elastic/kibana/pull/189031\r\n\r\nhttps://p.elstc.co/paste/pCGQy1nV#B7fBRtGiDq-QN14qT/eE8zPOPWgXP88672NIcbSblaD\r\nWithout
`options.retrieveResults = true`
parameter,\r\n`response.rawResponse.hits.hits` from search strategy can
be undefined\r\n\r\n### Checklist\r\n\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common
scenarios","sha":"91eefe437a0ef68de34cd6f50f2a1e9cb93f6fc2"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/207353","number":207353,"state":"MERGED","mergeCommit":{"sha":"ad38e9b0a80d5417e4d3d31fe96694677fe927c7","message":"[8.x]
[Security Solution] Add retrieve results to security solution search
strategy (#207307) (#207353)\n\n# Backport\n\nThis will backport the
following commits from `main` to `8.x`:\n- [[Security Solution] Add
retrieve results to security solution search\nstrategy
(#207307)](https://github.com/elastic/kibana/pull/207307)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n\n\nCo-authored-by:
Angela Chuang <6295984+angorayc@users.noreply.github.com>"}}]}]
BACKPORT-->

Co-authored-by: Angela Chuang <6295984+angorayc@users.noreply.github.com>
2025-03-20 16:42:51 -05:00
Shahzad
471d9b57af
[8.16] [Synthetics] Use range filter instead of timespan !! (#209281) (#215109)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Synthetics] Monitor status rule, show to which monitors rule applies
!! (#209281)](https://github.com/elastic/kibana/pull/209281)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"Shahzad","email":"shahzad31comp@gmail.com"},"sourceCommit":{"committedDate":"2025-02-06T16:07:22Z","message":"[Synthetics]
Monitor status rule, show to which monitors rule applies !!
(#209281)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/198688\r\n\r\nMonitor status
rule, show to which monitors rule applies !!\r\n\r\nWith filters shows
to which monitors the rule applies \r\n<img width=\"1728\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/5536ad12-d0ed-4394-a511-8dd826bf3b56\"\r\n/>\r\n\r\n\r\nAlso
showing an inspect flyout with query details\r\n\r\n<img width=\"1728\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/d441e4f9-8f0c-4fac-a2ca-5f214f8d2709\"\r\n/>","sha":"ac89e472a6156d44e098d06f3665d90f892dbdba","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:obs-ux-management","backport:version","v9.1.0","v8.19.0"],"title":"[Synthetics]
Monitor status rule, show to which monitors rule applies
!!","number":209281,"url":"https://github.com/elastic/kibana/pull/209281","mergeCommit":{"message":"[Synthetics]
Monitor status rule, show to which monitors rule applies !!
(#209281)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/198688\r\n\r\nMonitor status
rule, show to which monitors rule applies !!\r\n\r\nWith filters shows
to which monitors the rule applies \r\n<img width=\"1728\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/5536ad12-d0ed-4394-a511-8dd826bf3b56\"\r\n/>\r\n\r\n\r\nAlso
showing an inspect flyout with query details\r\n\r\n<img width=\"1728\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/d441e4f9-8f0c-4fac-a2ca-5f214f8d2709\"\r\n/>","sha":"ac89e472a6156d44e098d06f3665d90f892dbdba"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/210061","number":210061,"state":"MERGED","mergeCommit":{"sha":"67b17c8bbb945e918be2a44a9e44cbfe7f513815","message":"[9.0]
[Synthetics] Monitor status rule, show to which monitors rule applies !!
(#209281) (#210061)\n\n# Backport\n\nThis will backport the following
commits from `main` to `9.0`:\n- [[Synthetics] Monitor status rule, show
to which monitors rule applies\n!!
(#209281)](https://github.com/elastic/kibana/pull/209281)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n\n\nCo-authored-by:
Shahzad
<shahzad31comp@gmail.com>"}},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/209281","number":209281,"mergeCommit":{"message":"[Synthetics]
Monitor status rule, show to which monitors rule applies !!
(#209281)\n\n## Summary\r\n\r\nFixes
https://github.com/elastic/kibana/issues/198688\r\n\r\nMonitor status
rule, show to which monitors rule applies !!\r\n\r\nWith filters shows
to which monitors the rule applies \r\n<img width=\"1728\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/5536ad12-d0ed-4394-a511-8dd826bf3b56\"\r\n/>\r\n\r\n\r\nAlso
showing an inspect flyout with query details\r\n\r\n<img width=\"1728\"
alt=\"image\"\r\nsrc=\"https://github.com/user-attachments/assets/d441e4f9-8f0c-4fac-a2ca-5f214f8d2709\"\r\n/>","sha":"ac89e472a6156d44e098d06f3665d90f892dbdba"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/215097","number":215097,"state":"OPEN"}]}]
BACKPORT-->
2025-03-19 09:06:24 -04:00
Tiago Costa
86b8706a96
skip flaky suite (#194701) 2025-03-18 18:02:13 +00:00
Kibana Machine
7d2899b52a
[8.16] [Automatic Import] Fix chunking of samples in ecs mapping (#214702) (#214734)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Automatic Import] Fix chunking of samples in ecs mapping
(#214702)](https://github.com/elastic/kibana/pull/214702)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Bharat
Pasupula","email":"123897612+bhapas@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-17T12:52:37Z","message":"[Automatic
Import] Fix chunking of samples in ecs mapping
(#214702)","sha":"059e7e7c52076298537a4faf351ae77eb0563309","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:prev-minor","backport:prev-major","Team:Security-Scalability","Feature:AutomaticImport","v9.1.0"],"title":"[Automatic
Import] Fix chunking of samples in ecs
mapping","number":214702,"url":"https://github.com/elastic/kibana/pull/214702","mergeCommit":{"message":"[Automatic
Import] Fix chunking of samples in ecs mapping
(#214702)","sha":"059e7e7c52076298537a4faf351ae77eb0563309"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214702","number":214702,"mergeCommit":{"message":"[Automatic
Import] Fix chunking of samples in ecs mapping
(#214702)","sha":"059e7e7c52076298537a4faf351ae77eb0563309"}}]}]
BACKPORT-->

Co-authored-by: Bharat Pasupula <123897612+bhapas@users.noreply.github.com>
2025-03-17 15:03:05 +00:00
Jeramy Soucy
4772a30390
[8.16] [Automatic Import] Remove pipeline tests from the package (#211223) (#214622)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Automatic Import] Remove pipeline tests from the package
(#211223)](https://github.com/elastic/kibana/pull/211223)

<!--- Backport version: 8.9.8 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Bharat
Pasupula","email":"123897612+bhapas@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-17T09:28:57Z","message":"[Automatic
Import] Remove pipeline tests from the package (#211223)\n\n##
Summary\r\n\r\nThis PR removes unused pipeline tests from the packaging
of integration.\r\n\r\nThe pipeline tests are not run today when the
integration is built.\r\nHence removing them for
now.","sha":"54b6e65a2047cdcc727032e1734170e7c8307aff","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:prev-minor","backport:prev-major","ci:build-cloud-image","ci:cloud-deploy","Team:Security-Scalability","Feature:AutomaticImport","v8.18.0","v9.1.0","v8.19.0","v8.17.3"],"number":211223,"url":"https://github.com/elastic/kibana/pull/211223","mergeCommit":{"message":"[Automatic
Import] Remove pipeline tests from the package (#211223)\n\n##
Summary\r\n\r\nThis PR removes unused pipeline tests from the packaging
of integration.\r\n\r\nThe pipeline tests are not run today when the
integration is built.\r\nHence removing them for
now.","sha":"54b6e65a2047cdcc727032e1734170e7c8307aff"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/211385","number":211385,"state":"MERGED","mergeCommit":{"sha":"d6385326d0eca3c09ae13b73f674f5537d7f9aae","message":"[9.0]
[Automatic Import] Remove pipeline tests from the package (#211223)
(#211385)\n\n# Backport\n\nThis will backport the following commits from
`main` to `9.0`:\n- [[Automatic Import] Remove pipeline tests from the
package\n(#211223)](https://github.com/elastic/kibana/pull/211223)\n\n<!---
Backport version: 9.4.3 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sqren/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Bharat\nPasupula\",\"email\":\"123897612+bhapas@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2025-02-17T09:28:57Z\",\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\",\"branchLabelMapping\":{\"^v9.1.0$\":\"main\",\"^v8.19.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"backport:prev-minor\",\"backport:prev-major\",\"ci:build-cloud-image\",\"ci:cloud-deploy\",\"Team:Security-Scalability\",\"Feature:AutomaticImport\",\"v9.1.0\"],\"title\":\"[Automatic\nImport]
Remove pipeline tests from
the\npackage\",\"number\":211223,\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.1.0\",\"branchLabelMappingKey\":\"^v9.1.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"number\":211223,\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}}]}]
BACKPORT-->\n\nCo-authored-by: Bharat Pasupula
<123897612+bhapas@users.noreply.github.com>"}},{"branch":"8.18","label":"v8.18.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/211398","number":211398,"state":"MERGED","mergeCommit":{"sha":"158cfac027e31dd6ca46340a775c019d2228d0ce","message":"[8.18]
[Automatic Import] Remove pipeline tests from the package (#211223)
(#211398)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.18`:\n- [[Automatic Import] Remove pipeline tests from the
package\n(#211223)](https://github.com/elastic/kibana/pull/211223)\n\n<!---
Backport version: 9.6.4 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Bharat\nPasupula\",\"email\":\"123897612+bhapas@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2025-02-17T09:28:57Z\",\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\",\"branchLabelMapping\":{\"^v9.1.0$\":\"main\",\"^v8.19.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"backport:prev-minor\",\"backport:prev-major\",\"ci:build-cloud-image\",\"ci:cloud-deploy\",\"Team:Security-Scalability\",\"Feature:AutomaticImport\",\"v9.1.0\"],\"title\":\"[Automatic\nImport]
Remove pipeline tests from
the\npackage\",\"number\":211223,\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.1.0\",\"branchLabelMappingKey\":\"^v9.1.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"number\":211223,\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}}]}]
BACKPORT-->"}},{"branch":"main","label":"v9.1.0","labelRegex":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211223","number":211223,"mergeCommit":{"message":"[Automatic
Import] Remove pipeline tests from the package (#211223)\n\n##
Summary\r\n\r\nThis PR removes unused pipeline tests from the packaging
of integration.\r\n\r\nThe pipeline tests are not run today when the
integration is built.\r\nHence removing them for
now.","sha":"54b6e65a2047cdcc727032e1734170e7c8307aff"}},{"branch":"8.x","label":"v8.19.0","labelRegex":"^v8.19.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/211393","number":211393,"state":"MERGED","mergeCommit":{"sha":"7f23710f4afb022b15aa1e5a1f25fcdeef2f1b9c","message":"[8.x]
[Automatic Import] Remove pipeline tests from the package (#211223)
(#211393)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.x`:\n- [[Automatic Import] Remove pipeline tests from the
package\n(#211223)](https://github.com/elastic/kibana/pull/211223)\n\n<!---
Backport version: 9.6.4 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Bharat\nPasupula\",\"email\":\"123897612+bhapas@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2025-02-17T09:28:57Z\",\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\",\"branchLabelMapping\":{\"^v9.1.0$\":\"main\",\"^v8.19.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"backport:prev-minor\",\"backport:prev-major\",\"ci:build-cloud-image\",\"ci:cloud-deploy\",\"Team:Security-Scalability\",\"Feature:AutomaticImport\",\"v9.1.0\"],\"title\":\"[Automatic\nImport]
Remove pipeline tests from
the\npackage\",\"number\":211223,\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.1.0\",\"branchLabelMappingKey\":\"^v9.1.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"number\":211223,\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}}]}]
BACKPORT-->"}},{"branch":"8.17","label":"v8.17.3","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/211405","number":211405,"state":"MERGED","mergeCommit":{"sha":"6b2ed55f13b5e6a4a6feed75906716653d2aa6b2","message":"[8.17]
[Automatic Import] Remove pipeline tests from the package (#211223)
(#211405)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.17`:\n- [[Automatic Import] Remove pipeline tests from the
package\n(#211223)](https://github.com/elastic/kibana/pull/211223)\n\n<!---
Backport version: 9.6.4 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n<!--BACKPORT
[{\"author\":{\"name\":\"Bharat\nPasupula\",\"email\":\"123897612+bhapas@users.noreply.github.com\"},\"sourceCommit\":{\"committedDate\":\"2025-02-17T09:28:57Z\",\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\",\"branchLabelMapping\":{\"^v9.1.0$\":\"main\",\"^v8.19.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"backport:prev-minor\",\"backport:prev-major\",\"ci:build-cloud-image\",\"ci:cloud-deploy\",\"Team:Security-Scalability\",\"Feature:AutomaticImport\",\"v9.1.0\"],\"title\":\"[Automatic\nImport]
Remove pipeline tests from
the\npackage\",\"number\":211223,\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.1.0\",\"branchLabelMappingKey\":\"^v9.1.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/211223\",\"number\":211223,\"mergeCommit\":{\"message\":\"[Automatic\nImport]
Remove pipeline tests from the package
(#211223)\\n\\n##\nSummary\\r\\n\\r\\nThis PR removes unused pipeline
tests from the packaging\nof integration.\\r\\n\\r\\nThe pipeline tests
are not run today when the\nintegration is built.\\r\\nHence removing
them
for\nnow.\",\"sha\":\"54b6e65a2047cdcc727032e1734170e7c8307aff\"}}]}]
BACKPORT-->"}}]}] BACKPORT-->

---------

Co-authored-by: Bharat Pasupula <123897612+bhapas@users.noreply.github.com>
Co-authored-by: Kylie Meli <kylie.geller@elastic.co>
2025-03-14 16:33:07 -04:00
Jan Monschke
f219410251
[8.16] [Threat Hunting Investigations] Fix timeline column width bug (#214178) (#214520)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Threat Hunting Investigations] Fix timeline column width bug
(#214178)](https://github.com/elastic/kibana/pull/214178)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Jan
Monschke","email":"jan.monschke@elastic.co"},"sourceCommit":{"committedDate":"2025-03-13T18:49:16Z","message":"[Threat
Hunting Investigations] Fix timeline column width bug (#214178)\n\n##
Summary\n\nFixes: https://github.com/elastic/kibana/issues/213754\n\nThe
issue above describes a bug in timeline that makes it impossible
to\nchange the width of a timeline column. This PR fixes that issue
and\nmakes sure that timeline column width settings are saved
to\nlocalStorage. This mimics the behaviour of the alerts table
elsewhere in\nsecurity
solution.\n\n\nhttps://github.com/user-attachments/assets/8b9803a0-406d-4f2d-ada5-4c0b76cd6ab8\n\n---------\n\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"edbc618321930e358b2e0910f1c5cb5f7606e621","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:Threat
Hunting:Investigations","backport:all-open","v8.18.0","v9.1.0","v8.19.0"],"title":"[Threat
Hunting Investigations] Fix timeline column width
bug","number":214178,"url":"https://github.com/elastic/kibana/pull/214178","mergeCommit":{"message":"[Threat
Hunting Investigations] Fix timeline column width bug (#214178)\n\n##
Summary\n\nFixes: https://github.com/elastic/kibana/issues/213754\n\nThe
issue above describes a bug in timeline that makes it impossible
to\nchange the width of a timeline column. This PR fixes that issue
and\nmakes sure that timeline column width settings are saved
to\nlocalStorage. This mimics the behaviour of the alerts table
elsewhere in\nsecurity
solution.\n\n\nhttps://github.com/user-attachments/assets/8b9803a0-406d-4f2d-ada5-4c0b76cd6ab8\n\n---------\n\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"edbc618321930e358b2e0910f1c5cb5f7606e621"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/214473","number":214473,"state":"MERGED","mergeCommit":{"sha":"6c1aa0a4d9f5d605ad037ace4515c848af38f6f4","message":"[9.0]
[Threat Hunting Investigations] Fix timeline column width bug (#214178)
(#214473)\n\n# Backport\n\nThis will backport the following commits from
`main` to `9.0`:\n- [[Threat Hunting Investigations] Fix timeline column
width
bug\n(#214178)](https://github.com/elastic/kibana/pull/214178)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Jan Monschke
<jan.monschke@elastic.co>"}},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/214471","number":214471,"state":"MERGED","mergeCommit":{"sha":"f2c8c4c0ce81a88387e0eb400ae6166aceb751f0","message":"[8.18]
[Threat Hunting Investigations] Fix timeline column width bug (#214178)
(#214471)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.18`:\n- [[Threat Hunting Investigations] Fix timeline
column width
bug\n(#214178)](https://github.com/elastic/kibana/pull/214178)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Jan Monschke
<jan.monschke@elastic.co>"}},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214178","number":214178,"mergeCommit":{"message":"[Threat
Hunting Investigations] Fix timeline column width bug (#214178)\n\n##
Summary\n\nFixes: https://github.com/elastic/kibana/issues/213754\n\nThe
issue above describes a bug in timeline that makes it impossible
to\nchange the width of a timeline column. This PR fixes that issue
and\nmakes sure that timeline column width settings are saved
to\nlocalStorage. This mimics the behaviour of the alerts table
elsewhere in\nsecurity
solution.\n\n\nhttps://github.com/user-attachments/assets/8b9803a0-406d-4f2d-ada5-4c0b76cd6ab8\n\n---------\n\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"edbc618321930e358b2e0910f1c5cb5f7606e621"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/214472","number":214472,"state":"MERGED","mergeCommit":{"sha":"b578cc110edf15ae10f5a284a4bc110dbbbd5173","message":"[8.x]
[Threat Hunting Investigations] Fix timeline column width bug (#214178)
(#214472)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.x`:\n- [[Threat Hunting Investigations] Fix timeline column
width
bug\n(#214178)](https://github.com/elastic/kibana/pull/214178)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Jan Monschke <jan.monschke@elastic.co>"}}]}] BACKPORT-->
2025-03-14 17:47:01 +01:00
Jan Monschke
da72ed698e
[8.16] [Threat Hunting Investigations] Improve API docs for notes/timeline (#213584) (#214533)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Threat Hunting Investigations] Improve API docs for notes/timeline
(#213584)](https://github.com/elastic/kibana/pull/213584)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Jan
Monschke","email":"jan.monschke@elastic.co"},"sourceCommit":{"committedDate":"2025-03-12T17:55:54Z","message":"[Threat
Hunting Investigations] Improve API docs for notes/timeline
(#213584)\n\n##
Summary\n\n[META\nissue](https://github.com/elastic/security-docs-internal/issues/57)\n\nThis
PR improves the API documentation for timeline/notes/pinned events\nas
per the definition in the meta issue.\n\n### Notes\n#### Timeline API\n-
`eventType`:\n\t- is always set to `all`\n\t- looks like it's been
superseded by dataView?\n\t- I marked it as `deperecated` \n-
`eventIdToNoteIds`:\n- there's a type mismatch between what the frontend
expects and what is\nreturned\n\t- also it does not seem to be used
anymore?\n\t- it needs to be investigated further\n#### Notes API\n-
`GlobalNote`:\n\t- looks like it's not used anymore\n\t- I removed it,
nothing broke\n- `eventIngested`, `eventTimestamp`, `eventDataView` and
`overrideOwner`\nare all not used on the patch note endpoint, I removed
them. The\n`event*` ones I have never seen before to be
honest.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"e3311c516b45999e875b92ff14140a3197babfc6","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat
Hunting:Investigations","backport:all-open","v9.1.0"],"title":"[Threat
Hunting Investigations] Improve API docs for
notes/timeline","number":213584,"url":"https://github.com/elastic/kibana/pull/213584","mergeCommit":{"message":"[Threat
Hunting Investigations] Improve API docs for notes/timeline
(#213584)\n\n##
Summary\n\n[META\nissue](https://github.com/elastic/security-docs-internal/issues/57)\n\nThis
PR improves the API documentation for timeline/notes/pinned events\nas
per the definition in the meta issue.\n\n### Notes\n#### Timeline API\n-
`eventType`:\n\t- is always set to `all`\n\t- looks like it's been
superseded by dataView?\n\t- I marked it as `deperecated` \n-
`eventIdToNoteIds`:\n- there's a type mismatch between what the frontend
expects and what is\nreturned\n\t- also it does not seem to be used
anymore?\n\t- it needs to be investigated further\n#### Notes API\n-
`GlobalNote`:\n\t- looks like it's not used anymore\n\t- I removed it,
nothing broke\n- `eventIngested`, `eventTimestamp`, `eventDataView` and
`overrideOwner`\nare all not used on the patch note endpoint, I removed
them. The\n`event*` ones I have never seen before to be
honest.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"e3311c516b45999e875b92ff14140a3197babfc6"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/214261","number":214261,"state":"MERGED","mergeCommit":{"sha":"77caf7c24a7424c52e5b37107768ce3d4ff15bfb","message":"[9.0]
[Threat Hunting Investigations] Improve API docs for notes/timeline
(#213584) (#214261)\n\n# Backport\n\nThis will backport the following
commits from `main` to `9.0`:\n- [[Threat Hunting Investigations]
Improve API docs for
notes/timeline\n(#213584)](https://github.com/elastic/kibana/pull/213584)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Jan Monschke
<jan.monschke@elastic.co>"}},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213584","number":213584,"mergeCommit":{"message":"[Threat
Hunting Investigations] Improve API docs for notes/timeline
(#213584)\n\n##
Summary\n\n[META\nissue](https://github.com/elastic/security-docs-internal/issues/57)\n\nThis
PR improves the API documentation for timeline/notes/pinned events\nas
per the definition in the meta issue.\n\n### Notes\n#### Timeline API\n-
`eventType`:\n\t- is always set to `all`\n\t- looks like it's been
superseded by dataView?\n\t- I marked it as `deperecated` \n-
`eventIdToNoteIds`:\n- there's a type mismatch between what the frontend
expects and what is\nreturned\n\t- also it does not seem to be used
anymore?\n\t- it needs to be investigated further\n#### Notes API\n-
`GlobalNote`:\n\t- looks like it's not used anymore\n\t- I removed it,
nothing broke\n- `eventIngested`, `eventTimestamp`, `eventDataView` and
`overrideOwner`\nare all not used on the patch note endpoint, I removed
them. The\n`event*` ones I have never seen before to be
honest.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"e3311c516b45999e875b92ff14140a3197babfc6"}}]}]
BACKPORT-->
2025-03-14 10:39:54 -05:00
Antonio
6645f27122
[8.16] [ResponseOps][MW] Use date format from settings in MW UI (#211576) (#214545)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ResponseOps][MW] Use date format from settings in MW UI
(#211576)](https://github.com/elastic/kibana/pull/211576)

<!--- Backport version: 9.6.4 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"Antonio","email":"antonio.coelho@elastic.co"},"sourceCommit":{"committedDate":"2025-03-07T12:45:48Z","message":"[ResponseOps][MW]
Use date format from settings in MW UI (#211576)\n\nCloses #199315\n\n##
Summary\n\nThis PR changes the Maintenance Window UI to respect the date
format\nconfigured in Kibana's advanced settings.\n\n3 places needed
changing:\n- Maintenance window list.\n- Maintenance window creation
page.\n- Event popover in the maintenance window list(for recurring
MWs).","sha":"2ead636ebd3d8dc911dd870111c8e016035169c1","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:ResponseOps","backport:version","v9.1.0","v8.19.0"],"title":"[ResponseOps][MW]
Use date format from settings in MW
UI","number":211576,"url":"https://github.com/elastic/kibana/pull/211576","mergeCommit":{"message":"[ResponseOps][MW]
Use date format from settings in MW UI (#211576)\n\nCloses #199315\n\n##
Summary\n\nThis PR changes the Maintenance Window UI to respect the date
format\nconfigured in Kibana's advanced settings.\n\n3 places needed
changing:\n- Maintenance window list.\n- Maintenance window creation
page.\n- Event popover in the maintenance window list(for recurring
MWs).","sha":"2ead636ebd3d8dc911dd870111c8e016035169c1"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211576","number":211576,"mergeCommit":{"message":"[ResponseOps][MW]
Use date format from settings in MW UI (#211576)\n\nCloses #199315\n\n##
Summary\n\nThis PR changes the Maintenance Window UI to respect the date
format\nconfigured in Kibana's advanced settings.\n\n3 places needed
changing:\n- Maintenance window list.\n- Maintenance window creation
page.\n- Event popover in the maintenance window list(for recurring
MWs).","sha":"2ead636ebd3d8dc911dd870111c8e016035169c1"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/214438","number":214438,"state":"MERGED","mergeCommit":{"sha":"e74dfe03009087cf65fce16bf43c4053120aff46","message":"[8.x]
[ResponseOps][MW] Use date format from settings in MW UI (#211576)
(#214438)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.x`:\n- [[ResponseOps][MW] Use date format from settings in
MW
UI\n(#211576)](https://github.com/elastic/kibana/pull/211576)\n\n<!---
Backport version: 9.6.6 -->\n\n### Questions ?\nPlease refer to the
[Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n<!--BACKPORT\n[{\"author\":{\"name\":\"Antonio\",\"email\":\"antonio.coelho@elastic.co\"},\"sourceCommit\":{\"committedDate\":\"2025-03-07T12:45:48Z\",\"message\":\"[ResponseOps][MW]\nUse
date format from settings in MW UI (#211576)\\n\\nCloses
#199315\\n\\n##\nSummary\\n\\nThis PR changes the Maintenance Window UI
to respect the date\nformat\\nconfigured in Kibana's advanced
settings.\\n\\n3 places needed\nchanging:\\n- Maintenance window
list.\\n- Maintenance window creation\npage.\\n- Event popover in the
maintenance window list(for
recurring\nMWs).\",\"sha\":\"2ead636ebd3d8dc911dd870111c8e016035169c1\",\"branchLabelMapping\":{\"^v9.1.0$\":\"main\",\"^v8.19.0$\":\"8.x\",\"^v(\\\\d+).(\\\\d+).\\\\d+$\":\"$1.$2\"}},\"sourcePullRequest\":{\"labels\":[\"release_note:skip\",\"Team:ResponseOps\",\"backport\nmissing\",\"backport:version\",\"v9.1.0\",\"v8.19.0\"],\"title\":\"[ResponseOps][MW]\nUse
date format from settings in
MW\nUI\",\"number\":211576,\"url\":\"https://github.com/elastic/kibana/pull/211576\",\"mergeCommit\":{\"message\":\"[ResponseOps][MW]\nUse
date format from settings in MW UI (#211576)\\n\\nCloses
#199315\\n\\n##\nSummary\\n\\nThis PR changes the Maintenance Window UI
to respect the date\nformat\\nconfigured in Kibana's advanced
settings.\\n\\n3 places needed\nchanging:\\n- Maintenance window
list.\\n- Maintenance window creation\npage.\\n- Event popover in the
maintenance window list(for
recurring\nMWs).\",\"sha\":\"2ead636ebd3d8dc911dd870111c8e016035169c1\"}},\"sourceBranch\":\"main\",\"suggestedTargetBranches\":[\"8.x\"],\"targetPullRequestStates\":[{\"branch\":\"main\",\"label\":\"v9.1.0\",\"branchLabelMappingKey\":\"^v9.1.0$\",\"isSourceBranch\":true,\"state\":\"MERGED\",\"url\":\"https://github.com/elastic/kibana/pull/211576\",\"number\":211576,\"mergeCommit\":{\"message\":\"[ResponseOps][MW]\nUse
date format from settings in MW UI (#211576)\\n\\nCloses
#199315\\n\\n##\nSummary\\n\\nThis PR changes the Maintenance Window UI
to respect the date\nformat\\nconfigured in Kibana's advanced
settings.\\n\\n3 places needed\nchanging:\\n- Maintenance window
list.\\n- Maintenance window creation\npage.\\n- Event popover in the
maintenance window list(for
recurring\nMWs).\",\"sha\":\"2ead636ebd3d8dc911dd870111c8e016035169c1\"}},{\"branch\":\"8.x\",\"label\":\"v8.19.0\",\"branchLabelMappingKey\":\"^v8.19.0$\",\"isSourceBranch\":false,\"state\":\"NOT_CREATED\"}]}]\nBACKPORT-->\n\n---------\n\nCo-authored-by:
kibanamachine <42973632+kibanamachine@users.noreply.github.com>"}}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-14 15:10:06 +02:00
Kibana Machine
0230153476
[8.16] [EDR Workflows] Rename enforce_registry_filters advanced option (#214106) (#214546)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[EDR Workflows] Rename `enforce_registry_filters` advanced option
(#214106)](https://github.com/elastic/kibana/pull/214106)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Gergő
Ábrahám","email":"gergo.abraham@elastic.co"},"sourceCommit":{"committedDate":"2025-03-14T10:55:16Z","message":"[EDR
Workflows] Rename `enforce_registry_filters` advanced option
(#214106)\n\n## Summary\n\nThis PR renames the path for the following
advanced option
from\n`windows.advanced.events.registry.enforce_registry_filters`
to\n`windows.advanced.events.enforce_registry_filters` in order to
harmonize\nwith Endpoint.\n\nmigration is not added, see this comment
for
rationale:\nhttps://github.com/elastic/kibana/issues/212526#issuecomment-2724023199\n\n###
Release note\n\nElastic Defend package policy's ineffective advanced
option\n`enforce_registry_filters` is replaced with a new field which
now\nprovides the expected effect.\nManual act is needed from users to
fill the new field, while the old\nfield is still visible in policy
response.\n\n\n### Checklist\n\nCheck the PR satisfies following
conditions. \n\nReviewers should verify this PR satisfies this list as
well.\n\n- [x] The PR description includes the appropriate Release Notes
section,\nand the correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"b9a258723d06bcf29392f19e3a80c544e6550fa2","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[EDR
Workflows] Rename `enforce_registry_filters` advanced
option","number":214106,"url":"https://github.com/elastic/kibana/pull/214106","mergeCommit":{"message":"[EDR
Workflows] Rename `enforce_registry_filters` advanced option
(#214106)\n\n## Summary\n\nThis PR renames the path for the following
advanced option
from\n`windows.advanced.events.registry.enforce_registry_filters`
to\n`windows.advanced.events.enforce_registry_filters` in order to
harmonize\nwith Endpoint.\n\nmigration is not added, see this comment
for
rationale:\nhttps://github.com/elastic/kibana/issues/212526#issuecomment-2724023199\n\n###
Release note\n\nElastic Defend package policy's ineffective advanced
option\n`enforce_registry_filters` is replaced with a new field which
now\nprovides the expected effect.\nManual act is needed from users to
fill the new field, while the old\nfield is still visible in policy
response.\n\n\n### Checklist\n\nCheck the PR satisfies following
conditions. \n\nReviewers should verify this PR satisfies this list as
well.\n\n- [x] The PR description includes the appropriate Release Notes
section,\nand the correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"b9a258723d06bcf29392f19e3a80c544e6550fa2"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214106","number":214106,"mergeCommit":{"message":"[EDR
Workflows] Rename `enforce_registry_filters` advanced option
(#214106)\n\n## Summary\n\nThis PR renames the path for the following
advanced option
from\n`windows.advanced.events.registry.enforce_registry_filters`
to\n`windows.advanced.events.enforce_registry_filters` in order to
harmonize\nwith Endpoint.\n\nmigration is not added, see this comment
for
rationale:\nhttps://github.com/elastic/kibana/issues/212526#issuecomment-2724023199\n\n###
Release note\n\nElastic Defend package policy's ineffective advanced
option\n`enforce_registry_filters` is replaced with a new field which
now\nprovides the expected effect.\nManual act is needed from users to
fill the new field, while the old\nfield is still visible in policy
response.\n\n\n### Checklist\n\nCheck the PR satisfies following
conditions. \n\nReviewers should verify this PR satisfies this list as
well.\n\n- [x] The PR description includes the appropriate Release Notes
section,\nand the correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"b9a258723d06bcf29392f19e3a80c544e6550fa2"}}]}]
BACKPORT-->

Co-authored-by: Gergő Ábrahám <gergo.abraham@elastic.co>
2025-03-14 12:54:40 +00:00
Kibana Machine
323ec9c7ca
[8.16] [Fleet] fix UI bug displaying default agent binary source (#214360) (#214449)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Fleet] fix UI bug displaying default agent binary source
(#214360)](https://github.com/elastic/kibana/pull/214360)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julia
Bardi","email":"90178898+juliaElastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-13T17:01:08Z","message":"[Fleet]
fix UI bug displaying default agent binary source (#214360)\n\n##
Summary\n\nFix UI bug when an agent policy uses the default download
source\nexplicitly. The Agent binary download UI select was empty.\n\nTo
verify:\n- create a new agent binary download source\n- create an agent
policy with using the default download source\n- check on Agent policy
details UI that the Agent binary download UI\nselect is populated
correctly\n\n```\nPOST kbn:/api/fleet/agent_policies\n{\n \"name\":
\"demo-policy-5\",\n \"description\": \"\",\n \"namespace\":
\"default\",\n \"monitoring_enabled\": [\n \"logs\",\n \"metrics\",\n
\"traces\"\n ],\n \"inactivity_timeout\": 1209600,\n \"is_protected\":
false,\n \"download_source_id\":
\"fleet-default-download-source\"\n}\n```\n\nBefore:\n\n\n![image](https://github.com/user-attachments/assets/6bde2652-bbf2-42af-8a2a-c893c5e80d27)\n\nAfter:\n\n<img
width=\"1517\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f5d19520-317e-4df8-aaed-0e367a2e6d9b\"\n/>","sha":"eb62a047bd06ebb70c6119bf3c19145df901fdda","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:Fleet","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Fleet]
fix UI bug displaying default agent binary
source","number":214360,"url":"https://github.com/elastic/kibana/pull/214360","mergeCommit":{"message":"[Fleet]
fix UI bug displaying default agent binary source (#214360)\n\n##
Summary\n\nFix UI bug when an agent policy uses the default download
source\nexplicitly. The Agent binary download UI select was empty.\n\nTo
verify:\n- create a new agent binary download source\n- create an agent
policy with using the default download source\n- check on Agent policy
details UI that the Agent binary download UI\nselect is populated
correctly\n\n```\nPOST kbn:/api/fleet/agent_policies\n{\n \"name\":
\"demo-policy-5\",\n \"description\": \"\",\n \"namespace\":
\"default\",\n \"monitoring_enabled\": [\n \"logs\",\n \"metrics\",\n
\"traces\"\n ],\n \"inactivity_timeout\": 1209600,\n \"is_protected\":
false,\n \"download_source_id\":
\"fleet-default-download-source\"\n}\n```\n\nBefore:\n\n\n![image](https://github.com/user-attachments/assets/6bde2652-bbf2-42af-8a2a-c893c5e80d27)\n\nAfter:\n\n<img
width=\"1517\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f5d19520-317e-4df8-aaed-0e367a2e6d9b\"\n/>","sha":"eb62a047bd06ebb70c6119bf3c19145df901fdda"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214360","number":214360,"mergeCommit":{"message":"[Fleet]
fix UI bug displaying default agent binary source (#214360)\n\n##
Summary\n\nFix UI bug when an agent policy uses the default download
source\nexplicitly. The Agent binary download UI select was empty.\n\nTo
verify:\n- create a new agent binary download source\n- create an agent
policy with using the default download source\n- check on Agent policy
details UI that the Agent binary download UI\nselect is populated
correctly\n\n```\nPOST kbn:/api/fleet/agent_policies\n{\n \"name\":
\"demo-policy-5\",\n \"description\": \"\",\n \"namespace\":
\"default\",\n \"monitoring_enabled\": [\n \"logs\",\n \"metrics\",\n
\"traces\"\n ],\n \"inactivity_timeout\": 1209600,\n \"is_protected\":
false,\n \"download_source_id\":
\"fleet-default-download-source\"\n}\n```\n\nBefore:\n\n\n![image](https://github.com/user-attachments/assets/6bde2652-bbf2-42af-8a2a-c893c5e80d27)\n\nAfter:\n\n<img
width=\"1517\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f5d19520-317e-4df8-aaed-0e367a2e6d9b\"\n/>","sha":"eb62a047bd06ebb70c6119bf3c19145df901fdda"}}]}]
BACKPORT-->

Co-authored-by: Julia Bardi <90178898+juliaElastic@users.noreply.github.com>
2025-03-13 18:56:56 +00:00
Kibana Machine
a92a3848fc
[8.16] [APM][OTel] Fix: Pass telemetry.sdk* data when loading a dashboard (#214356) (#214417)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[APM][OTel] Fix: Pass telemetry.sdk* data when loading a dashboard
(#214356)](https://github.com/elastic/kibana/pull/214356)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"jennypavlova","email":"dzheni.pavlova@elastic.co"},"sourceCommit":{"committedDate":"2025-03-13T15:20:17Z","message":"[APM][OTel]
Fix: Pass telemetry.sdk* data when loading a dashboard
(#214356)\n\nCloses #214328 \n\n## Summary\n\nThis PR fixes the issue
with loading an otel native dashboard\n\n## Testing\n- Run ` node
scripts/synthtrace otel_edot_simple_trace.ts`\n- ⚠️ As our test data has
only a java service there is a small manual\nstep needed (it will be
listed below **^**)\n- Open the metrics tab for the service (currently
we don't have
a\ndashboard):\n\n\n![image](https://github.com/user-attachments/assets/e5f1461c-be6f-4d18-9185-7cb25698764b)\n\n\n-
**^** Go to the `dashboard_catalog.ts` and add mapping for otel
native\njava case:\n - first:
`'otel_native-edot-java',`\n\n\n![image](https://github.com/user-attachments/assets/a3463f5b-6db9-466e-95fc-3ccd44a4a016)\n
- second: \n ```js \n case 'otel_native-edot-java': {\n return import(\n
/* webpackChunkName: \"lazyJavaOtelNativeDashboard\" */\n
'./opentelemetry_java.json'\n );\n }\n
``\n\n-\n![image](https://github.com/user-attachments/assets/34c12147-db1e-4494-8ea6-95dffc5975d4)\n\n-
Check the same page after
refresh\n\n![image](https://github.com/user-attachments/assets/e12b7046-9868-421b-9f9e-df004f82ddfc)","sha":"ebe7ef6da0f25b09e1d576e7d8975d7b0b2a95b1","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:prev-minor","backport:prev-major","Team:obs-ux-infra_services","v9.1.0"],"title":"[APM][OTel]
Fix: Pass telemetry.sdk* data when loading a
dashboard","number":214356,"url":"https://github.com/elastic/kibana/pull/214356","mergeCommit":{"message":"[APM][OTel]
Fix: Pass telemetry.sdk* data when loading a dashboard
(#214356)\n\nCloses #214328 \n\n## Summary\n\nThis PR fixes the issue
with loading an otel native dashboard\n\n## Testing\n- Run ` node
scripts/synthtrace otel_edot_simple_trace.ts`\n- ⚠️ As our test data has
only a java service there is a small manual\nstep needed (it will be
listed below **^**)\n- Open the metrics tab for the service (currently
we don't have
a\ndashboard):\n\n\n![image](https://github.com/user-attachments/assets/e5f1461c-be6f-4d18-9185-7cb25698764b)\n\n\n-
**^** Go to the `dashboard_catalog.ts` and add mapping for otel
native\njava case:\n - first:
`'otel_native-edot-java',`\n\n\n![image](https://github.com/user-attachments/assets/a3463f5b-6db9-466e-95fc-3ccd44a4a016)\n
- second: \n ```js \n case 'otel_native-edot-java': {\n return import(\n
/* webpackChunkName: \"lazyJavaOtelNativeDashboard\" */\n
'./opentelemetry_java.json'\n );\n }\n
``\n\n-\n![image](https://github.com/user-attachments/assets/34c12147-db1e-4494-8ea6-95dffc5975d4)\n\n-
Check the same page after
refresh\n\n![image](https://github.com/user-attachments/assets/e12b7046-9868-421b-9f9e-df004f82ddfc)","sha":"ebe7ef6da0f25b09e1d576e7d8975d7b0b2a95b1"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/214356","number":214356,"mergeCommit":{"message":"[APM][OTel]
Fix: Pass telemetry.sdk* data when loading a dashboard
(#214356)\n\nCloses #214328 \n\n## Summary\n\nThis PR fixes the issue
with loading an otel native dashboard\n\n## Testing\n- Run ` node
scripts/synthtrace otel_edot_simple_trace.ts`\n- ⚠️ As our test data has
only a java service there is a small manual\nstep needed (it will be
listed below **^**)\n- Open the metrics tab for the service (currently
we don't have
a\ndashboard):\n\n\n![image](https://github.com/user-attachments/assets/e5f1461c-be6f-4d18-9185-7cb25698764b)\n\n\n-
**^** Go to the `dashboard_catalog.ts` and add mapping for otel
native\njava case:\n - first:
`'otel_native-edot-java',`\n\n\n![image](https://github.com/user-attachments/assets/a3463f5b-6db9-466e-95fc-3ccd44a4a016)\n
- second: \n ```js \n case 'otel_native-edot-java': {\n return import(\n
/* webpackChunkName: \"lazyJavaOtelNativeDashboard\" */\n
'./opentelemetry_java.json'\n );\n }\n
``\n\n-\n![image](https://github.com/user-attachments/assets/34c12147-db1e-4494-8ea6-95dffc5975d4)\n\n-
Check the same page after
refresh\n\n![image](https://github.com/user-attachments/assets/e12b7046-9868-421b-9f9e-df004f82ddfc)","sha":"ebe7ef6da0f25b09e1d576e7d8975d7b0b2a95b1"}}]}]
BACKPORT-->

Co-authored-by: jennypavlova <dzheni.pavlova@elastic.co>
2025-03-13 17:22:35 +00:00
Gergő Ábrahám
d648da2ded
[8.16] [EDR Workflows] Update description on data reduction advanced options (#213970) (#214228)
# Backport

> [!IMPORTANT]
> This is only a partial backport: only description refinements are
backported for 15 advanced options:
> - `(win|mac|linux).advanced.events.hash.(md5|sha1|sha256)`
> *Compute and include (MD5|SHA-1|SHA-256) hashes for processes and
libraries in events? This will increase CPU usage and event sizes. If
any user event filter or trustlists reference this hash type, Endpoint
will ignore this setting and automatically enable this hash type.*
> - `(win|mac|linux).advanced.alerts.hash.(md5|sha1)`
> *Compute and include (MD5|SHA-1) hashes for processes and libraries in
alerts? This will increase CPU usage and alert sizes. If any user
exceptionlist, trustlist, or blocklists reference this hash type,
Endpoint will ignore this setting and automatically enable this hash
type.*

This will backport the following commits from `main` to `8.16`:
- [[EDR Workflows] Update description on data reduction advanced options
(#213970)](https://github.com/elastic/kibana/pull/213970)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Gergő
Ábrahám","email":"gergo.abraham@elastic.co"},"sourceCommit":{"committedDate":"2025-03-12T15:42:27Z","message":"[EDR
Workflows] Update description on data reduction advanced options
(#213970)\n\n## Summary\n\n- refines description for\n- 9
`(win|mac|linux).advanced.events.hash.(md5|sha1|sha256)`:\n9e7bbcf767a47795ef1e791ba4f88045526ac90d\n>
Compute and include (MD5|SHA-1|SHA-256) hashes for processes
and\nlibraries in events? This will increase CPU usage and event sizes.
If\nany user event filter or trustlists reference this hash type,
Endpoint\nwill ignore this setting and automatically enable this hash
type.\n- 6
`(win|mac|linux).advanced.alerts.hash.(md5|sha1)`:\n8fc0f51ab45ffc2430683f0b05773a91e0a63717\n>
Compute and include (MD5|SHA-1) hashes for processes and libraries
in\nalerts? This will increase CPU usage and alert sizes. If any
user\nexceptionlist, trustlist, or blocklists reference this hash
type,\nEndpoint will ignore this setting and automatically enable this
hash\ntype.\n- provides a 'history' for default behavior changes (e.g.
`<=8.17\ndefault: true, >=8.18 default: false`) for\n- 12
`(win|mac|linux).advanced.(events|alerts).hash.(md5|sha1)`:\n05b0ebe8eab1a5f010f8a995454ffb05dfd502d8\n
(note that events sha256 is not changed)\n > <=8.17 default: true,
>=8.18 default: false\n- 3
`(win|mac|linux).advanced.events.aggregate_process`:\n5984d8e90a43127c93c367286d727c489612c90e\n
> <=8.17 default: false, >=8.18 default: true\n- 3
`(win|mac|linux).advanced.events.set_extended_host_information`:\n5da25a3592409b5bfbc7b7256312f2b3f67fe1b5\n
> <=8.17 default: true, >=8.18 default: false\n\n> [!IMPORTANT]\n> The
plan is to backport this PR to all open branches:\n> -
`8.18`/`8.x`/`9.0`/`main` will contain all modifications,\n> - but
`8.16`/`8.17` manual backports will only contain the
description\nrefinement\n\n### Checklist\n\nCheck the PR satisfies
following conditions. \n\nReviewers should verify this PR satisfies this
list as well.\n\n- [x] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)","sha":"ad3b7fce112d8dc0e28c847937458bf2d455fba2","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[EDR
Workflows] Update description on data reduction advanced
options","number":213970,"url":"https://github.com/elastic/kibana/pull/213970","mergeCommit":{"message":"[EDR
Workflows] Update description on data reduction advanced options
(#213970)\n\n## Summary\n\n- refines description for\n- 9
`(win|mac|linux).advanced.events.hash.(md5|sha1|sha256)`:\n9e7bbcf767a47795ef1e791ba4f88045526ac90d\n>
Compute and include (MD5|SHA-1|SHA-256) hashes for processes
and\nlibraries in events? This will increase CPU usage and event sizes.
If\nany user event filter or trustlists reference this hash type,
Endpoint\nwill ignore this setting and automatically enable this hash
type.\n- 6
`(win|mac|linux).advanced.alerts.hash.(md5|sha1)`:\n8fc0f51ab45ffc2430683f0b05773a91e0a63717\n>
Compute and include (MD5|SHA-1) hashes for processes and libraries
in\nalerts? This will increase CPU usage and alert sizes. If any
user\nexceptionlist, trustlist, or blocklists reference this hash
type,\nEndpoint will ignore this setting and automatically enable this
hash\ntype.\n- provides a 'history' for default behavior changes (e.g.
`<=8.17\ndefault: true, >=8.18 default: false`) for\n- 12
`(win|mac|linux).advanced.(events|alerts).hash.(md5|sha1)`:\n05b0ebe8eab1a5f010f8a995454ffb05dfd502d8\n
(note that events sha256 is not changed)\n > <=8.17 default: true,
>=8.18 default: false\n- 3
`(win|mac|linux).advanced.events.aggregate_process`:\n5984d8e90a43127c93c367286d727c489612c90e\n
> <=8.17 default: false, >=8.18 default: true\n- 3
`(win|mac|linux).advanced.events.set_extended_host_information`:\n5da25a3592409b5bfbc7b7256312f2b3f67fe1b5\n
> <=8.17 default: true, >=8.18 default: false\n\n> [!IMPORTANT]\n> The
plan is to backport this PR to all open branches:\n> -
`8.18`/`8.x`/`9.0`/`main` will contain all modifications,\n> - but
`8.16`/`8.17` manual backports will only contain the
description\nrefinement\n\n### Checklist\n\nCheck the PR satisfies
following conditions. \n\nReviewers should verify this PR satisfies this
list as well.\n\n- [x] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)","sha":"ad3b7fce112d8dc0e28c847937458bf2d455fba2"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213970","number":213970,"mergeCommit":{"message":"[EDR
Workflows] Update description on data reduction advanced options
(#213970)\n\n## Summary\n\n- refines description for\n- 9
`(win|mac|linux).advanced.events.hash.(md5|sha1|sha256)`:\n9e7bbcf767a47795ef1e791ba4f88045526ac90d\n>
Compute and include (MD5|SHA-1|SHA-256) hashes for processes
and\nlibraries in events? This will increase CPU usage and event sizes.
If\nany user event filter or trustlists reference this hash type,
Endpoint\nwill ignore this setting and automatically enable this hash
type.\n- 6
`(win|mac|linux).advanced.alerts.hash.(md5|sha1)`:\n8fc0f51ab45ffc2430683f0b05773a91e0a63717\n>
Compute and include (MD5|SHA-1) hashes for processes and libraries
in\nalerts? This will increase CPU usage and alert sizes. If any
user\nexceptionlist, trustlist, or blocklists reference this hash
type,\nEndpoint will ignore this setting and automatically enable this
hash\ntype.\n- provides a 'history' for default behavior changes (e.g.
`<=8.17\ndefault: true, >=8.18 default: false`) for\n- 12
`(win|mac|linux).advanced.(events|alerts).hash.(md5|sha1)`:\n05b0ebe8eab1a5f010f8a995454ffb05dfd502d8\n
(note that events sha256 is not changed)\n > <=8.17 default: true,
>=8.18 default: false\n- 3
`(win|mac|linux).advanced.events.aggregate_process`:\n5984d8e90a43127c93c367286d727c489612c90e\n
> <=8.17 default: false, >=8.18 default: true\n- 3
`(win|mac|linux).advanced.events.set_extended_host_information`:\n5da25a3592409b5bfbc7b7256312f2b3f67fe1b5\n
> <=8.17 default: true, >=8.18 default: false\n\n> [!IMPORTANT]\n> The
plan is to backport this PR to all open branches:\n> -
`8.18`/`8.x`/`9.0`/`main` will contain all modifications,\n> - but
`8.16`/`8.17` manual backports will only contain the
description\nrefinement\n\n### Checklist\n\nCheck the PR satisfies
following conditions. \n\nReviewers should verify this PR satisfies this
list as well.\n\n- [x] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)","sha":"ad3b7fce112d8dc0e28c847937458bf2d455fba2"}},{"url":"https://github.com/elastic/kibana/pull/214206","number":214206,"branch":"8.18","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/214207","number":214207,"branch":"8.x","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/214208","number":214208,"branch":"9.0","state":"OPEN"}]}]
BACKPORT-->
2025-03-13 17:42:30 +09:00
Kibana Machine
8e08117cf3
[8.16] [Logs UI] Make logs ui categories page tests more robust (#213834) (#214218)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Logs UI] Make logs ui categories page tests more robust
(#213834)](https://github.com/elastic/kibana/pull/213834)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Felix
Stürmer","email":"weltenwort@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-12T16:08:11Z","message":"[Logs
UI] Make logs ui categories page tests more robust
(#213834)","sha":"3338092efcc707ef7fa80c0ef34d1b23d257193e","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Logs
UI","release_note:skip","backport:all-open","Team:obs-ux-logs","v9.1.0"],"title":"[Logs
UI] Make logs ui categories page tests more
robust","number":213834,"url":"https://github.com/elastic/kibana/pull/213834","mergeCommit":{"message":"[Logs
UI] Make logs ui categories page tests more robust
(#213834)","sha":"3338092efcc707ef7fa80c0ef34d1b23d257193e"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213834","number":213834,"mergeCommit":{"message":"[Logs
UI] Make logs ui categories page tests more robust
(#213834)","sha":"3338092efcc707ef7fa80c0ef34d1b23d257193e"}}]}]
BACKPORT-->

Co-authored-by: Felix Stürmer <weltenwort@users.noreply.github.com>
2025-03-12 19:27:06 +01:00
Gergő Ábrahám
be4834b4b9
[8.16] [EDR Workflows] Fix event filters cannot be saved bug (#213805) (#214201)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[EDR Workflows] Fix event filters cannot be saved bug
(#213805)](https://github.com/elastic/kibana/pull/213805)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Gergő
Ábrahám","email":"gergo.abraham@elastic.co"},"sourceCommit":{"committedDate":"2025-03-11T18:49:42Z","message":"[EDR
Workflows] Fix event filters cannot be saved bug (#213805)\n\n##
Summary\n\nThis PR fixes the bug when the Save button on the flyout of
the edited\nEvent Filter won't turn into enabled state, when the user
edits the\ninput fields.\n\n\n## Screen recordings\nAdded some screen
recordings to help the reviews.\n\n### Editing\nThis had the original
issue, here how it
works:\n\n\nhttps://github.com/user-attachments/assets/ff270cad-ca9b-431c-a789-d24cffe2f526\n\n###
Adding new event filter\nJust
regression.\n\n\nhttps://github.com/user-attachments/assets/7d0c0722-6e8e-4518-8505-c137a50c8cb7\n\n###
Adding from Security / Explore\nJust to see that it still works, as I
needed to modify its unit
tests.\n\n\nhttps://github.com/user-attachments/assets/ec204b34-d528-4937-aabc-1aa808a3b3d8\n\n\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"91e8ac4f87c458b2f27b28f1842298985586b5ca","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v8.18.0","v9.1.0"],"title":"[EDR
Workflows] Fix event filters cannot be saved
bug","number":213805,"url":"https://github.com/elastic/kibana/pull/213805","mergeCommit":{"message":"[EDR
Workflows] Fix event filters cannot be saved bug (#213805)\n\n##
Summary\n\nThis PR fixes the bug when the Save button on the flyout of
the edited\nEvent Filter won't turn into enabled state, when the user
edits the\ninput fields.\n\n\n## Screen recordings\nAdded some screen
recordings to help the reviews.\n\n### Editing\nThis had the original
issue, here how it
works:\n\n\nhttps://github.com/user-attachments/assets/ff270cad-ca9b-431c-a789-d24cffe2f526\n\n###
Adding new event filter\nJust
regression.\n\n\nhttps://github.com/user-attachments/assets/7d0c0722-6e8e-4518-8505-c137a50c8cb7\n\n###
Adding from Security / Explore\nJust to see that it still works, as I
needed to modify its unit
tests.\n\n\nhttps://github.com/user-attachments/assets/ec204b34-d528-4937-aabc-1aa808a3b3d8\n\n\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"91e8ac4f87c458b2f27b28f1842298985586b5ca"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/213994","number":213994,"state":"MERGED","mergeCommit":{"sha":"b5f13960d069eb4d88ce0f34ae2a3162d1b157a6","message":"[9.0]
[EDR Workflows] Fix event filters cannot be saved bug (#213805)
(#213994)\n\n# Backport\n\nThis will backport the following commits from
`main` to `9.0`:\n- [[EDR Workflows] Fix event filters cannot be saved
bug\n(#213805)](https://github.com/elastic/kibana/pull/213805)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Gergő Ábrahám
<gergo.abraham@elastic.co>"}},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/214014","number":214014,"state":"MERGED","mergeCommit":{"sha":"46d0e155519f2b233efb6facebbfc156f0570918","message":"[8.18]
[EDR Workflows] Fix event filters cannot be saved bug (#213805)
(#214014)\n\n# Backport\n\nThis will backport the following commits from
`main` to `8.18`:\n- [[EDR Workflows] Fix event filters cannot be saved
bug\n(#213805)](https://github.com/elastic/kibana/pull/213805)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n"}},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213805","number":213805,"mergeCommit":{"message":"[EDR
Workflows] Fix event filters cannot be saved bug (#213805)\n\n##
Summary\n\nThis PR fixes the bug when the Save button on the flyout of
the edited\nEvent Filter won't turn into enabled state, when the user
edits the\ninput fields.\n\n\n## Screen recordings\nAdded some screen
recordings to help the reviews.\n\n### Editing\nThis had the original
issue, here how it
works:\n\n\nhttps://github.com/user-attachments/assets/ff270cad-ca9b-431c-a789-d24cffe2f526\n\n###
Adding new event filter\nJust
regression.\n\n\nhttps://github.com/user-attachments/assets/7d0c0722-6e8e-4518-8505-c137a50c8cb7\n\n###
Adding from Security / Explore\nJust to see that it still works, as I
needed to modify its unit
tests.\n\n\nhttps://github.com/user-attachments/assets/ec204b34-d528-4937-aabc-1aa808a3b3d8\n\n\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios","sha":"91e8ac4f87c458b2f27b28f1842298985586b5ca"}}]}]
BACKPORT-->
2025-03-12 18:45:10 +01:00
jennypavlova
44073ae34a
[8.16] [ObsUX] [APM] [OTel] Runtime metrics show dashboards with different ingest path (#211822) (#213545)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[ObsUX] [APM] [OTel] Runtime metrics show dashboards with different
ingest path (#211822)](https://github.com/elastic/kibana/pull/211822)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)
2025-03-12 13:29:22 +01:00
Kibana Machine
b09d0fca86
[8.16] [Attack discovery] Fix error handling in LM studio (#213855) (#214039)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Attack discovery] Fix error handling in LM studio
(#213855)](https://github.com/elastic/kibana/pull/213855)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Patryk
Kopyciński","email":"contact@patrykkopycinski.com"},"sourceCommit":{"committedDate":"2025-03-12T02:06:48Z","message":"[Attack
discovery] Fix error handling in LM studio (#213855)\n\n##
Summary\n\nError were not properly propagated to the user and instead of
meaningful\nmessage we were displaying just `API Error`.\n\n<img
width=\"1813\" alt=\"Zrzut ekranu 2025-03-11 o 03 47
59\"\nsrc=\"https://github.com/user-attachments/assets/8d059159-f020-4944-a463-b10799e7fa46\"\n/>\n
\n \n \n\nSteps to reproduce, Thank you @andrew-goldstein 🙇 \n\n**Desk
testing**\n\nTo reproduce:\n\n1. In LM Studio, download the `MLX`
variant (optimized for Mac)
of\n`Llama-3.2-3B-Instruct-4bit`:\n\n```\nmlx-community/Llama-3.2-3B-Instruct-4bit\n```\n\n2.
Configure the model to have a context length of `131072` tokens,
as\nillustrated by the screenshot
below:\n\n\n![context_length](https://github.com/user-attachments/assets/505f64af-6d03-4f66-a485-7b25ebc4cae2)\n\n3.
Serve ONLY the model above in LM Studio. (Ensure no other models
are\nrunning in LM Studio), as illustrated by the screenshot
below:\n\n\n![one_model_running](https://github.com/user-attachments/assets/af29bea5-4cc3-401c-87d8-4b5778acdfe6)\n\n4.
Configure a connector via the details
in\n<https://www.elastic.co/guide/en/security/current/connect-to-byo-llm.html>\n\nbut
change:\n\n```\nlocal-model\n```\n\nto the name of the model when
configuring the connector:\n\n```\nllama-3.2-3b-instruct\n```\n\nas
illustrated by the screenshot
below:\n\n\n![connector](https://github.com/user-attachments/assets/5c2bcba3-6cc0-4066-833b-fe68d4c64569)\n\n5.
Generate Attack discoveries\n\n**Expected results**\n\n- Generation does
NOT fail with the error described in the later steps\nbelow.\n- Progress
on generating discoveries is visible in Langsmith, as\nillustrated by
the screenshot
below:\n\n\n![langsmith](https://github.com/user-attachments/assets/ac2f36f4-35de-4cc9-b9aa-8b9e09d32569)\n\nNote:
`Llama-3.2-3B-Instruct-4bit` may not reliably generate
Attack\ndiscoveries, so generation may still fail after `10` generation
/\nrefinement steps.\n\n6. In LM studio, serve a _second_ model, as
illustrated by the\nscreenshot
below:\n\n\n![llm_studio_2nd_model](https://github.com/user-attachments/assets/93eda24c-c016-4f81-919c-0cbf5ffb63b0)\n\n7.
Once again, generate Attack discoveries\n\n**Expected results**\n\n-
Generation does NOT fail with the errors below\n- Progress on generating
discoveries is visible in Langsmith, though as\nnoted above, generation
may still fail after `10` attempts if the model\ndoes not produce output
that conforms to the expected schema\n\n**Actual results**\n\n-
Generation fails with an error similar to:\n\n```\ngenerate node is
unable to parse (openai) response from attempt 0; (this may be an
incomplete response from the model): Status code: 400. Message: API
Error:\nBad Request: ActionsClientLlm: action result status is error: an
error occurred while running the action - Status code: 400. Message: API
Error: Bad Request,\n```\n\nor\n\n```\ngenerate node is unable to parse
(openai) response from attempt 0; (this may be an incomplete response
from the model): Status code: 404. Message: API Error: Not Found - Model
\"llama-3.2-3b-instruct\" not found. Please specify a valid
model.\n```\n\nas illustrated by the following
screenshot:\n\n\n![error](https://github.com/user-attachments/assets/8d059159-f020-4944-a463-b10799e7fa46)","sha":"0b9cceb57413ee84c2b951a65d1c8b66523fbd87","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","backport:prev-major","Team:Security
Generative AI","Feature:Attack
Discovery","backport:current-major","v9.1.0"],"title":"[Attack
discovery] Fix error handling in LM
studio","number":213855,"url":"https://github.com/elastic/kibana/pull/213855","mergeCommit":{"message":"[Attack
discovery] Fix error handling in LM studio (#213855)\n\n##
Summary\n\nError were not properly propagated to the user and instead of
meaningful\nmessage we were displaying just `API Error`.\n\n<img
width=\"1813\" alt=\"Zrzut ekranu 2025-03-11 o 03 47
59\"\nsrc=\"https://github.com/user-attachments/assets/8d059159-f020-4944-a463-b10799e7fa46\"\n/>\n
\n \n \n\nSteps to reproduce, Thank you @andrew-goldstein 🙇 \n\n**Desk
testing**\n\nTo reproduce:\n\n1. In LM Studio, download the `MLX`
variant (optimized for Mac)
of\n`Llama-3.2-3B-Instruct-4bit`:\n\n```\nmlx-community/Llama-3.2-3B-Instruct-4bit\n```\n\n2.
Configure the model to have a context length of `131072` tokens,
as\nillustrated by the screenshot
below:\n\n\n![context_length](https://github.com/user-attachments/assets/505f64af-6d03-4f66-a485-7b25ebc4cae2)\n\n3.
Serve ONLY the model above in LM Studio. (Ensure no other models
are\nrunning in LM Studio), as illustrated by the screenshot
below:\n\n\n![one_model_running](https://github.com/user-attachments/assets/af29bea5-4cc3-401c-87d8-4b5778acdfe6)\n\n4.
Configure a connector via the details
in\n<https://www.elastic.co/guide/en/security/current/connect-to-byo-llm.html>\n\nbut
change:\n\n```\nlocal-model\n```\n\nto the name of the model when
configuring the connector:\n\n```\nllama-3.2-3b-instruct\n```\n\nas
illustrated by the screenshot
below:\n\n\n![connector](https://github.com/user-attachments/assets/5c2bcba3-6cc0-4066-833b-fe68d4c64569)\n\n5.
Generate Attack discoveries\n\n**Expected results**\n\n- Generation does
NOT fail with the error described in the later steps\nbelow.\n- Progress
on generating discoveries is visible in Langsmith, as\nillustrated by
the screenshot
below:\n\n\n![langsmith](https://github.com/user-attachments/assets/ac2f36f4-35de-4cc9-b9aa-8b9e09d32569)\n\nNote:
`Llama-3.2-3B-Instruct-4bit` may not reliably generate
Attack\ndiscoveries, so generation may still fail after `10` generation
/\nrefinement steps.\n\n6. In LM studio, serve a _second_ model, as
illustrated by the\nscreenshot
below:\n\n\n![llm_studio_2nd_model](https://github.com/user-attachments/assets/93eda24c-c016-4f81-919c-0cbf5ffb63b0)\n\n7.
Once again, generate Attack discoveries\n\n**Expected results**\n\n-
Generation does NOT fail with the errors below\n- Progress on generating
discoveries is visible in Langsmith, though as\nnoted above, generation
may still fail after `10` attempts if the model\ndoes not produce output
that conforms to the expected schema\n\n**Actual results**\n\n-
Generation fails with an error similar to:\n\n```\ngenerate node is
unable to parse (openai) response from attempt 0; (this may be an
incomplete response from the model): Status code: 400. Message: API
Error:\nBad Request: ActionsClientLlm: action result status is error: an
error occurred while running the action - Status code: 400. Message: API
Error: Bad Request,\n```\n\nor\n\n```\ngenerate node is unable to parse
(openai) response from attempt 0; (this may be an incomplete response
from the model): Status code: 404. Message: API Error: Not Found - Model
\"llama-3.2-3b-instruct\" not found. Please specify a valid
model.\n```\n\nas illustrated by the following
screenshot:\n\n\n![error](https://github.com/user-attachments/assets/8d059159-f020-4944-a463-b10799e7fa46)","sha":"0b9cceb57413ee84c2b951a65d1c8b66523fbd87"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213855","number":213855,"mergeCommit":{"message":"[Attack
discovery] Fix error handling in LM studio (#213855)\n\n##
Summary\n\nError were not properly propagated to the user and instead of
meaningful\nmessage we were displaying just `API Error`.\n\n<img
width=\"1813\" alt=\"Zrzut ekranu 2025-03-11 o 03 47
59\"\nsrc=\"https://github.com/user-attachments/assets/8d059159-f020-4944-a463-b10799e7fa46\"\n/>\n
\n \n \n\nSteps to reproduce, Thank you @andrew-goldstein 🙇 \n\n**Desk
testing**\n\nTo reproduce:\n\n1. In LM Studio, download the `MLX`
variant (optimized for Mac)
of\n`Llama-3.2-3B-Instruct-4bit`:\n\n```\nmlx-community/Llama-3.2-3B-Instruct-4bit\n```\n\n2.
Configure the model to have a context length of `131072` tokens,
as\nillustrated by the screenshot
below:\n\n\n![context_length](https://github.com/user-attachments/assets/505f64af-6d03-4f66-a485-7b25ebc4cae2)\n\n3.
Serve ONLY the model above in LM Studio. (Ensure no other models
are\nrunning in LM Studio), as illustrated by the screenshot
below:\n\n\n![one_model_running](https://github.com/user-attachments/assets/af29bea5-4cc3-401c-87d8-4b5778acdfe6)\n\n4.
Configure a connector via the details
in\n<https://www.elastic.co/guide/en/security/current/connect-to-byo-llm.html>\n\nbut
change:\n\n```\nlocal-model\n```\n\nto the name of the model when
configuring the connector:\n\n```\nllama-3.2-3b-instruct\n```\n\nas
illustrated by the screenshot
below:\n\n\n![connector](https://github.com/user-attachments/assets/5c2bcba3-6cc0-4066-833b-fe68d4c64569)\n\n5.
Generate Attack discoveries\n\n**Expected results**\n\n- Generation does
NOT fail with the error described in the later steps\nbelow.\n- Progress
on generating discoveries is visible in Langsmith, as\nillustrated by
the screenshot
below:\n\n\n![langsmith](https://github.com/user-attachments/assets/ac2f36f4-35de-4cc9-b9aa-8b9e09d32569)\n\nNote:
`Llama-3.2-3B-Instruct-4bit` may not reliably generate
Attack\ndiscoveries, so generation may still fail after `10` generation
/\nrefinement steps.\n\n6. In LM studio, serve a _second_ model, as
illustrated by the\nscreenshot
below:\n\n\n![llm_studio_2nd_model](https://github.com/user-attachments/assets/93eda24c-c016-4f81-919c-0cbf5ffb63b0)\n\n7.
Once again, generate Attack discoveries\n\n**Expected results**\n\n-
Generation does NOT fail with the errors below\n- Progress on generating
discoveries is visible in Langsmith, though as\nnoted above, generation
may still fail after `10` attempts if the model\ndoes not produce output
that conforms to the expected schema\n\n**Actual results**\n\n-
Generation fails with an error similar to:\n\n```\ngenerate node is
unable to parse (openai) response from attempt 0; (this may be an
incomplete response from the model): Status code: 400. Message: API
Error:\nBad Request: ActionsClientLlm: action result status is error: an
error occurred while running the action - Status code: 400. Message: API
Error: Bad Request,\n```\n\nor\n\n```\ngenerate node is unable to parse
(openai) response from attempt 0; (this may be an incomplete response
from the model): Status code: 404. Message: API Error: Not Found - Model
\"llama-3.2-3b-instruct\" not found. Please specify a valid
model.\n```\n\nas illustrated by the following
screenshot:\n\n\n![error](https://github.com/user-attachments/assets/8d059159-f020-4944-a463-b10799e7fa46)","sha":"0b9cceb57413ee84c2b951a65d1c8b66523fbd87"}}]}]
BACKPORT-->

Co-authored-by: Patryk Kopyciński <contact@patrykkopycinski.com>
2025-03-12 05:02:06 +01:00