Commit graph

84689 commits

Author SHA1 Message Date
elastic-renovate-prod[bot]
06d10090c1
Update docker.elastic.co/wolfi/chainguard-base:latest Docker digest to 3f6bcf4 (main) (#214502)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base | digest | `69a0542` ->
`3f6bcf4` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwicmVsZWFzZV9ub3RlOnNraXAiXX0=-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
2025-03-14 03:55:25 +00:00
elastic-renovate-prod[bot]
a8777749e7
Update dependency @hapi/hapi to ^21.4.0 (main) (#214209)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@hapi/hapi](https://hapi.dev)
([source](https://redirect.github.com/hapijs/hapi)) | dependencies |
minor | [`^21.3.12` ->
`^21.4.0`](https://renovatebot.com/diffs/npm/@hapi%2fhapi/21.3.12/21.4.0)
|

---

### Release Notes

<details>
<summary>hapijs/hapi (@&#8203;hapi/hapi)</summary>

###
[`v21.4.0`](https://redirect.github.com/hapijs/hapi/compare/v21.3.12...v21.4.0)

[Compare
Source](https://redirect.github.com/hapijs/hapi/compare/v21.3.12...v21.4.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOkNvcmUiLCJiYWNrcG9ydDpwcmV2LW1pbm9yIiwicmVsZWFzZV9ub3RlOnNraXAiXX0=-->

---------

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-14 00:45:59 +01:00
Shahzad
071838129c
[Synthetics] Unskip getMonitors api test !! (#214075)
## Summary

Fixes https://github.com/elastic/kibana/issues/204069 !!

Unskip getMonitors api test !!
2025-03-13 22:21:30 +01:00
Shahzad
ea40a0a38a
[SLOs Annotations] Fix rendering issue with annotations (#214157)
## Summary

fixes https://github.com/elastic/kibana/issues/210198

Fix rendering issue with annotations !!

This has been done because react suspense doesn't plays nicely with
elastic/chart rendering. And we have to render annotation with charts
dynamically.
2025-03-13 22:20:43 +01:00
Viduni Wickramarachchi
d66e0b2525
[Obs AI Assistant] Forward telemetryMetadata.pluginId to the EIS use case header (#214285)
## Summary

Closes https://github.com/elastic/obs-ai-assistant-team/issues/217

This PR forwards the Obs AI Assistant use case header for EIS through
the existing `telemetryData` property.

Relates to https://github.com/elastic/search-team/issues/9424
The header is implemented in this PR -
https://github.com/elastic/kibana/pull/214269

### Checklist

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-03-13 15:29:37 -04:00
Jan Monschke
edbc618321
[Threat Hunting Investigations] Fix timeline column width bug (#214178)
## Summary

Fixes: https://github.com/elastic/kibana/issues/213754

The issue above describes a bug in timeline that makes it impossible to
change the width of a timeline column. This PR fixes that issue and
makes sure that timeline column width settings are saved to
localStorage. This mimics the behaviour of the alerts table elsewhere in
security solution.


https://github.com/user-attachments/assets/8b9803a0-406d-4f2d-ada5-4c0b76cd6ab8

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-03-13 13:49:16 -05:00
christineweng
a6ceafc891
[Security Solution] Fix session view navigation when in alert preview and add preview banner (#213455)
## Summary

Before: when in an alert preview, clicking session preview header opens
session view in details panel, but the preview persists.

This PR addressed the bug by including `isPreviewMode` as an indicator
that the panel is opened in preview. Clicking a link in preview should
opens a new flyout and preview should not appear.


https://github.com/user-attachments/assets/484daa16-adb0-48f2-b14e-a971878817c0

Added banner to session viewer in flyout

<img width="1468" alt="image"
src="https://github.com/user-attachments/assets/e228b35f-938a-4ad1-a97f-818caf36a284"
/>


### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-03-13 13:43:18 -05:00
Bailey Cash
22e64dc868
[SLO]: Include spaceID in SLI documents (#214278)
## Summary

Resolves #213464 

## Release Notes

SpaceId can now be referenced in document-based access filters for roles
to restrict a user's access to SLI data for spaces where they do not
have access.
2025-03-13 18:39:38 +00:00
Maxim Palenov
aa3d5eb373
[Security Solution] UI copy for Upgrade rules confirmation modal (#213981)
## Summary

Updates texts according to the suggested UI copy ([source doc](https://docs.google.com/document/d/1qjSxs1aDHJ8AKj5xR4erPdNumLy9Jqu3AlL9oGXnfxo/edit?tab=t.0)).

## Screenshots

Update All rules:
<img width="1722" alt="image" src="https://github.com/user-attachments/assets/424d4812-6a29-4205-ab5d-df2b2024507a" />

Single rule with solvable conflicts:
<img width="1714" alt="image" src="https://github.com/user-attachments/assets/916a264f-44ba-45de-99cb-15e337ead2bd" />

Multiple rules with solvable conflicts:
<img width="1718" alt="image" src="https://github.com/user-attachments/assets/6b7684f6-978b-4511-9b8a-ccde049730b9" />

Mix of conflict-free rules and rules with solvable conflicts:
<img width="1716" alt="image" src="https://github.com/user-attachments/assets/cd2325a6-0dec-48b1-a2af-6185acf16b10" />
<img width="1714" alt="image" src="https://github.com/user-attachments/assets/ecb74497-ddbb-4407-8dfd-6902642dd9c3" />

Mix of conflict-free rules and rules with non-solvable conflicts:
<img width="1723" alt="image" src="https://github.com/user-attachments/assets/0b980dd4-4109-4b63-859f-c95cc31dd7b4" />

Only rules with conflicts:
<img width="1720" alt="image" src="https://github.com/user-attachments/assets/f66cee4e-e648-4eb5-902a-db0a4bd3a423" />
<img width="1718" alt="image" src="https://github.com/user-attachments/assets/9d42e5d9-6a62-4c60-8aea-bb5376b2d2c5" />

Mix of rules selected to update:
<img width="1717" alt="image" src="https://github.com/user-attachments/assets/e882cbd1-203d-499f-b51f-37691405a3a5" />
2025-03-13 19:36:35 +01:00
Robert Jaszczurek
482ac1ee76
[ML] Trained Models: Track model downloads and Deployment updates (#213699)
Part of https://github.com/elastic/kibana/issues/200725

This PR adds telemetry to track model downloads and deployment updates.
It also includes tracking for failed deployments, as the previous
implementation only tracked successful deployments.
2025-03-13 19:29:08 +01:00
Tiago Costa
69723619b8
skip flaky suite (#213461) 2025-03-13 18:04:43 +00:00
florent-leborgne
2e80cd19f5
[Docs] Simplify link to PRs in breaking changes and deprecation notices (#214444)
This PR simplifies the wording in breaking changes and deprecations docs
to feel less redundant, and re-adds a proper template for adding new
entries.
2025-03-13 13:50:58 -04:00
Julia Bardi
eb62a047bd
[Fleet] fix UI bug displaying default agent binary source (#214360)
## Summary

Fix UI bug when an agent policy uses the default download source
explicitly. The Agent binary download UI select was empty.

To verify:
- create a new agent binary download source
- create an agent policy with using the default download source
- check on Agent policy details UI that the Agent binary download UI
select is populated correctly

```
POST kbn:/api/fleet/agent_policies
{
  "name": "demo-policy-5",
  "description": "",
  "namespace": "default",
  "monitoring_enabled": [
    "logs",
    "metrics",
    "traces"
  ],
  "inactivity_timeout": 1209600,
  "is_protected": false,
  "download_source_id": "fleet-default-download-source"
}
```

Before:


![image](https://github.com/user-attachments/assets/6bde2652-bbf2-42af-8a2a-c893c5e80d27)

After:

<img width="1517" alt="image"
src="https://github.com/user-attachments/assets/f5d19520-317e-4df8-aaed-0e367a2e6d9b"
/>
2025-03-13 17:01:08 +00:00
Tre
1a9ad39aec
[MKI][FTR] Fixup reporting (#214392)
# Summary

Increase timeout.

Resolves: https://github.com/elastic/kibana/issues/214391
2025-03-13 16:05:11 +00:00
Nathan Reese
c886fb0f73
unskip Failing test: Chrome UI Functional Tests.test/functional/apps/dashboard/group6/view_edit·ts (#211653)
Closes https://github.com/elastic/kibana/issues/200748

Flaky test runner
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8023

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-03-13 09:56:35 -06:00
Nathan Reese
165db29bdc
unskip Failing test: Chrome X-Pack UI Functional Tests.x-pack/test/functional/apps/maps/group4/file_upload/shapefile·js (#211310)
Closes https://github.com/elastic/kibana/issues/209228 and
https://github.com/elastic/kibana/issues/209848

Maps only fetch data for visible area. A smaller screen could result in
less documents getting returned. This PR resolves the flakyness by
setting the screen size before running to ensure the correct screen area
and consistent results.

Flaky test runner (25)
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/7887
Flaky test runner (100)
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8027

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-03-13 09:55:41 -06:00
Elena Shostak
5d9fd46b2a
[Authz] Added reason for authorization opt-out for logstash routes (#213891)
## Summary

Added reason for authorization opt-out for logstash routes.


### Checklist

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-03-13 15:55:22 +00:00
Steph Milovic
13906cbb76
[Stack connector] Forward telemetryMetadata.pluginId to EIS use case header (#214269) 2025-03-13 09:44:06 -06:00
jennypavlova
ebe7ef6da0
[APM][OTel] Fix: Pass telemetry.sdk* data when loading a dashboard (#214356)
Closes #214328 

## Summary

This PR fixes the issue with loading an otel native dashboard

## Testing
- Run ` node scripts/synthtrace otel_edot_simple_trace.ts`
- ⚠️ As our test data has only a java service there is a small manual
step needed (it will be listed below **^**)
- Open the metrics tab for the service (currently we don't have a
dashboard):


![image](https://github.com/user-attachments/assets/e5f1461c-be6f-4d18-9185-7cb25698764b)


- **^** Go to the `dashboard_catalog.ts` and add mapping for otel native
java case:
  - first: `'otel_native-edot-java',`


![image](https://github.com/user-attachments/assets/a3463f5b-6db9-466e-95fc-3ccd44a4a016)
  - second: 
      ```js   
     case 'otel_native-edot-java': {
      return import(
        /* webpackChunkName: "lazyJavaOtelNativeDashboard" */
        './opentelemetry_java.json'
      );
    }
   ``

-
![image](https://github.com/user-attachments/assets/34c12147-db1e-4494-8ea6-95dffc5975d4)

- Check the same page after refresh

![image](https://github.com/user-attachments/assets/e12b7046-9868-421b-9f9e-df004f82ddfc)
2025-03-13 16:20:17 +01:00
Ying Mao
811d7cb4d4
[Response Ops][Connectors] Adding allowPartialTrustChain for connector usage reporting task (#214193)
## Summary

We need to pass this option to allow the CA certificate to be used for
pushing to the usage API.
2025-03-13 11:17:19 -04:00
Janki Salvi
14871c31aa
[ResponseOps][Rules] Allow users to create a snooze schedule for rule via API (#210584)
## Summary

Resolves first part of https://github.com/elastic/kibana/issues/198783
(snooze API)
Creates a public API for adding snooze schedule to rules.
For this purpose we created new schedule schema which will be used as
standard schedule schema across rules and alerting framework.

**Note** 
The code to be reviewed for public API is under `common/routes/schedule`
and inside `external` folders.
Rest of the code is just moving existing internal API route and its code
to `/internal` folders.


### Checklist

- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### How to test
- Create a rule in kibana
- Snooze that rule via new public API
```typescript
Path: https://localhost:5601/api/alerting/rule/<rule_id>/snooze_schedule
Method: POST
Body: 
{
    "schedule": { 
       "custom": {
         "start": "2025-02-25T18:00:00.000Z",
         "duration": "15m",
         "recurring": {
            "every": "1w",
            "onWeekDay": ["TU", "FR"],
            "occurrences": 10
         }
       }
    }
}
``` 
- Verify various snooze schedule scenarios are generated correctly

#### Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8009

### Release note
Allow users to create a snooze schedule for rule via API

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: lcawl <lcawley@elastic.co>
2025-03-13 15:03:11 +00:00
Joey F. Poon
448fda4111
[Security Solution] remove group from AV workflow insight value (#214327)
## Summary

Removes group from the incompatible antivirus workflow insight type
value.

Resolves:
- https://github.com/elastic/kibana/issues/213681


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-03-13 23:56:14 +09:00
Nikita Indik
9f2e07f2de
[Security Solution] Hide conflict badges when rule customization is not enabled (#214365)
**Resolves: https://github.com/elastic/kibana/issues/214301**

## Summary

This PR removes conflict badges from the Rule Updates table for users
with license that is insufficient for prebuilt rule customization.

**Before (on Basic license)**
<img width="1014" alt="Scherm­afbeelding 2025-03-13 om 13 44 07"
src="https://github.com/user-attachments/assets/fd830253-80d0-4250-861c-88b0a11d6786"
/>


**After (on Basic license)**
<img width="1014" alt="Scherm­afbeelding 2025-03-13 om 13 39 01"
src="https://github.com/user-attachments/assets/f8b00964-72bf-4d0a-9f03-9e47231c5227"
/>

Since users on Basic license can't customize rules, it doesn't make
sense to show these badges - they are not actionable anyways.

Users will still see a callout mentioning that their modifications will
be erased if they open a flyout for a customized rule.

<img width="953" alt="Scherm­afbeelding 2025-03-13 om 13 41 21"
src="https://github.com/user-attachments/assets/b2a2514e-2b19-4653-9076-d742130b30b6"
/>
2025-03-13 14:52:48 +00:00
Clint Andrew Hall
dfdda2c22f
[assistant] Call to Action components (#213797)
## Summary

This PR contains new Call to Action components for the AI Assistant, as
part of the unification effort.

### `@kbn/ai-assistant-cta`

The Call to Action component, as well as common use case components,
(e.g. install knowledge base, license upgrade, etc). This package
contains both pure components and "connected" components, (see
`@kbn/ai-assistant-component-services`, below.

## Preview


[Storybook](https://ci-artifacts.kibana.dev/storybooks/pr-213797/ai_assistant/index.html?path=/story/layout-call-to-action--call-to-action)

### In the Assistant

> This is just a preview, this PR does not include integration into the
assistants.

<img width="1488" alt="Screenshot 2025-03-10 at 1 27 39 PM"
src="https://github.com/user-attachments/assets/62976e51-e429-4f76-8496-28db2e2d2845"
/>
<img width="1488" alt="Screenshot 2025-03-10 at 12 50 04 PM"
src="https://github.com/user-attachments/assets/161cf40a-48b4-4188-aa2c-633369c50a37"
/>

### Storybook

<img width="1312" alt="Screenshot 2025-03-12 at 10 53 19 PM"
src="https://github.com/user-attachments/assets/01bd1ac8-15f6-4abe-8600-d3544fb9b8a1"
/>
<img width="1312" alt="Screenshot 2025-03-12 at 10 53 23 PM"
src="https://github.com/user-attachments/assets/94161551-27ba-4d56-9709-06f1a1433b49"
/>
<img width="1312" alt="Screenshot 2025-03-12 at 10 53 25 PM"
src="https://github.com/user-attachments/assets/aa4afdb7-1804-4503-a28e-f90468463acd"
/>
<img width="1312" alt="Screenshot 2025-03-12 at 10 53 27 PM"
src="https://github.com/user-attachments/assets/1c17f372-52e6-473e-8fd8-1ac1e7605304"
/>
<img width="1312" alt="Screenshot 2025-03-12 at 10 53 30 PM"
src="https://github.com/user-attachments/assets/b7474888-c1e1-4a9d-b0d2-bf1c33e8d1d7"
/>
<img width="1312" alt="Screenshot 2025-03-12 at 10 53 32 PM"
src="https://github.com/user-attachments/assets/4b35289d-92d0-4ec9-82b1-e64f11c70a19"
/>
<img width="1312" alt="Screenshot 2025-03-12 at 10 53 34 PM"
src="https://github.com/user-attachments/assets/42fc8ba8-072d-4592-a6e5-57e4b1aa46d1"
/>


![Mar-10-2025
13-29-51](https://github.com/user-attachments/assets/58967dde-90bc-4a1a-937e-f8048f696ab8)

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-13 14:47:09 +00:00
Clint Andrew Hall
9cddd5dcdd
[storybook] Fix theme switcher (#214306)
## Summary

Both Storybook and the theme switcher addon use Amsterdam by default.
This PR adds Borealis to the theme switcher and defaults it to Borealis.

## NOTE

This PR may conflict with #195148 ... it should likely be merged into
that PR, or into `main` if the conflict is minor. I leave it to @Ikuni17
to determine the best path forward.
2025-03-13 10:38:14 -04:00
Efe Gürkan YALAMAN
c42d763ce4
[Search] [Synonyms] Synonym Rule flyout update (#213433)
## Summary

Updates Synonym Rule Flyout to match the designs. 


https://github.com/user-attachments/assets/8c034c2a-0b12-4a98-a627-fbef3a2542c7

Flyout tries to handle invalid cases which would throw from the endpoint
call

<img width="497" alt="Screenshot 2025-03-07 at 17 11 51"
src="https://github.com/user-attachments/assets/6e610177-ec56-4420-bcee-4c72935cdbb9"
/>
<img width="495" alt="Screenshot 2025-03-07 at 17 12 07"
src="https://github.com/user-attachments/assets/3fed1ed1-4be4-449e-a30c-c8c13e7d7968"
/>
<img width="509" alt="Screenshot 2025-03-07 at 17 12 33"
src="https://github.com/user-attachments/assets/117dbac5-dfbe-4160-a9d4-a92bcb3bcf89"
/>
<img width="472" alt="Screenshot 2025-03-07 at 17 12 44"
src="https://github.com/user-attachments/assets/70d50693-b2bf-4af4-b363-65f92d6812fd"
/>
<img width="484" alt="Screenshot 2025-03-07 at 17 12 53"
src="https://github.com/user-attachments/assets/ebb8f401-4dd6-4180-9028-396680091a4c"
/>
<img width="458" alt="Screenshot 2025-03-07 at 17 13 27"
src="https://github.com/user-attachments/assets/a7c1244b-3334-44d3-bd4c-e26b463e1b68"
/>

The text added needs a quick check as well cc: @leemthompo 


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-03-13 14:35:11 +00:00
Shahzad
005124a9ed
[Synthetics] Fix broken tests !! (#214357)
## Summary

Fix broken tests !!

These got broken due to changes on alerts overview page, i am also
expanding the scope to run on all observability plugin changes !!
2025-03-13 15:11:32 +01:00
Steph Milovic
cf73559e2d
[Security solution] Bedrock region fix (#214251) 2025-03-13 08:01:03 -06:00
Liam Thompson
53e568ebf8
[DOCS] Comment out broken link (#214371)
Chicken and egg breaking
3870802753

Will circle back and uncomment once that's merged
2025-03-13 14:00:46 +00:00
Maxim Palenov
d782b71637
[Security Solution] Avoid showing rules update confirmation modal on basic license (#214340)
**Resolves:** https://github.com/elastic/kibana/issues/214302

## Summary

This PR prevents showing rule upgrade confirmation modal on lower licenses where prebuilt rules customization is not allowed.

## Details

Users may see a rules upgrade confirmation modal when trying to upgrade prebuilt rules even if prebuilt rules customization is disabled due to insufficient license. It happens due to improper response from `upgrade/_perform` which doesn't respect `pick_version`. It's expected rule upgrade goes smoothly when `pick_version` is one of `BASE`, `CURRENT` or `TARGET`.

The fix makes sure dry run request isn't fired and a prebuilt rules upgrade confirmation modal isn't shown when running with insufficient for prebuilt rules customization license.

There is a [ticket](https://github.com/elastic/kibana/issues/214338) to address this issue in the API endpoint.
2025-03-13 14:47:30 +01:00
Joe Reuter
4681b6c562
🌊 Streams: Prepare API for publishing (#213127)
Add streams API to documentation as an experimental feature

<img width="2555" alt="Screenshot 2025-03-07 at 11 44 54"
src="https://github.com/user-attachments/assets/f54e5e6e-0c20-4bad-9cff-27747d0f76e2"
/>

There are a couple of changes in here:
* Split streams API in internal and public and mark the public parts as
experimental
* Add the public parts to the Kibana documentation
* Add description and summary
* Adjust the server repository wrapper to pass through summary and
description

# To test

* Generate OAS bundle: `node scripts/capture_oas_snapshot --include-path
/api/streams --update`
* Apply overlays `cd oas_docs && make api-docs`
* Make sure bump.sh is installed (`npm install -g bump-cli`)
* Run for preview: `cd oas_docs && bump preview output/kibana.yaml`

# Open questions

* Does the split into public and internal make sense?
* Is it a problem if this is visible in the user-facing documentation
page before we actually release streams? Or would it be OK if the API is
marked as experimental? (mostly a question for @LucaWintergerst )

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-13 13:41:05 +00:00
Saarika Bhasi
d0aecedbb3
[Onboarding]Replace GuideSelectorTiles card description with EuiTextColor (#214286)
## Summary
Replace card description EuiText component with EuiTextColor in
GuideSelectorTiles.

By default [EuiCard description
](https://eui.elastic.co/#/display/card#basic-card) places within small
EuiText in a`<p>` tag , adding another
[EuiText](https://eui.elastic.co/#/display/text) by default places its
child component with `<div> `. So the warning was shown.

Fixed in Create index code view & details page in stateful & stateless 

### Screenshot of problem
<img width="965" alt="Screenshot 2025-03-12 at 5 19 24 PM"
src="https://github.com/user-attachments/assets/850d7b6b-3405-42bb-806e-551f7a3988f8"
/>
2025-03-13 09:18:29 -04:00
Paul Tavares
2b9d2cff6c
[Security Solution][Endpoint] Disable Artifact card menu under space awareness conditions where user is not allowed to edit item under active space (#213820)
## Summary

The following changes are being done to Artifact Card's Menu (which
displays the option to Delete or Update the artifact) in support of
space awareness feature (currently behind Feature Flag:
`endpointManagementSpaceAwarenessEnabled`):

- Global Artifacts: If displaying a global artifact and user does not
have the new Global Artifact Management privilege - disable the Edit
menu icon and display a tooltip on hover
- Per-Policy Artifacts: if displaying a per-policy artifact in a space
other than one of the `ownerSpaceId` spaces that the artifact is
associated with and the user does not have the new Global Artifact
Management privilege - disable the Edit menu icon and display a tooltip
when the user hover over that button


> [!NOTE]
> Changes were **NOT** done to Endpoint Exceptions with this PR.
2025-03-13 08:52:33 -04:00
Julia Rechkunova
535a853133
[Discover Tabs] Responsive tab size and scroll actions (#213739)
- Closes https://github.com/elastic/kibana/issues/210514

## Summary

This PR:
- updates style of tab name overflow
- automatically recalculates what the max tab size can be used
- if tabs don't fit the available width, arrow buttons will appear to
help with scrolling left and right
- adds max tab limit and hides "+" button if it's reached
- introduces `unifiedTabs` page object for creating functional tests

![Mar-07-2025
17-47-12](https://github.com/user-attachments/assets/f1547086-1c8e-4e47-9d2e-35954403ec24)

## Testing

Two options are possible:

1. start Storybook with `yarn storybook unified_tabs` and navigate to
`http://localhost:9001`.
2. start Kibana with `yarn start --run-examples`. Then navigate to the
Unified Tabs example plugin
`http://localhost:5601/app/unifiedTabsExamples`.

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-03-13 12:42:13 +00:00
Vitalii Dmyterko
ee8f9676c7
[Security Solution][Detection Engine] fixes ES|QL cypress tests (#213553)
## Summary

 - addresses:
 - https://github.com/elastic/kibana/issues/184558
 - https://github.com/elastic/kibana/issues/184557
 - https://github.com/elastic/kibana/issues/184556

bfetch was disabled for Kibana, so I removed spying for this request for
ES|QL Cypress tests


 [Security Solution Detection Engine -
Cypress](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/7999):
100/100 tests passed.


 [[Serverless] Security Solution Detection Engine -
Cypress](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8000):
100/100 tests passed.
2025-03-13 12:40:38 +00:00
Carlos Crespo
9ea6de27cc
[APM] Fix service map showing duplicate nodes (#214184)
fixes [214167](https://github.com/elastic/kibana/issues/214167)
## Summary

Fixes a problem affecting the new service map api, causing the service
map to show duplicate exit span nodes



<img width="1476" alt="image"
src="https://github.com/user-attachments/assets/f7bf6035-17f5-4265-9950-5c764f1e7f0b"
/>

### how to test

- Enable the new service map api by adding
`xpack.apm.ui.serviceMapApiV2Enabled: true` to `kibana.dev.yml`
- Run the `service_map` synthtrace scenario
- Navigate to APM and view the service map for the `frontend-rum`
service

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-03-13 12:20:04 +00:00
Felix Stürmer
535b015271
[Dataset Quality] Wrap Discover data view checks in retries (#214172)
## 📝 Summary

This wraps the checks for the correct data view after navigation to
Discover into retries in the dataset quality functional tests, because
these checks recently failed because loading was not yet finished.

🏁 closes https://github.com/elastic/kibana/issues/213751
🏁 closes https://github.com/elastic/kibana/issues/214029
🏁 closes https://github.com/elastic/kibana/issues/214183
2025-03-13 12:29:44 +01:00
Thom Heymann
37c88f9618
Include additional fields for summary column (#213687)
Resolves #196513

## Summary

Updates fields in Discover summary column.

## Logic

remove

```
cloud.instance.id 
orchestrator.namespace
```

In addition we need to implement some logic to have a fallback,
selecting the first field with a value in descending order:

Add fallback mechanism to container.name
```
kubernetes.container.name => k8s.container.name => container.name 
```

Add fallback mechanism to host.name
```
kubernetes.node.name => k8s.node.name => host.name
```
  
Add fallback mechanism to cluster.name
```
orchestrator.cluster.name => k8s.cluster.name
```

Add new fields with fallbacks

```
kubernetes.namespace => (k8s.namespace.name)
kubernetes.pod.name => (k8s.pod.name)

// only one of these will be present in a single doc:
kubernetes.deployment.name => (k8s.deployment.name)
kubernetes.replicaset.name => (k8s.replicaset.name)
kubernetes.statefulset.name => (k8s.statefulset.name)
kubernetes.daemonset.name => (k8s.daemonset.name)
kubernetes.job.name => (k8s.job.name)
kubernetes.cronjob.name => (k8s.cronjob.name)
```
2025-03-13 11:25:56 +00:00
Vitalii Dmyterko
686a4cb64f
[Security Solution][Detection Engine] adds support of MV_EXPAND for ES|QL rule type (#212675)
## Summary

 - addresses https://github.com/elastic/kibana/issues/197130
- allows deduplication of alerts for non-aggregating ES|QL queries, when
`mv_expand` used
- when `mv_expand` command used, id of alerts is constructed with
additional value from expanded field
- if expanded field(column) is not present in ES|QL response, we hash
the whole source object when generate alert id. Field can be absent,
because it was renamed or dropped. When field was renamed, it still
allow us to create unique alert id. When field is dropped, expanded
results would be identical. In this case, duplicated alerts won't be
created (refer to FTR tests)
2025-03-13 11:24:13 +00:00
elastic-vault-github-plugin-prod[bot]
5a65e799ef
[main] Sync bundled packages with Package Storage (#214246)
Automated by
https://buildkite.com/elastic/package-storage-infra-kibana-discover-release-branches/builds/2436

Co-authored-by: elasticmachine <elasticmachine@elastic.co>
Co-authored-by: Julia Bardi <90178898+juliaElastic@users.noreply.github.com>
2025-03-13 11:31:02 +01:00
Dzmitry Lemechko
1b30686181
[scout] use project deps as global hooks for parallel tests (#211409)
## Summary

Currently we are using `globalSetup` [script in configuration
file](https://playwright.dev/docs/test-global-setup-teardown#option-2-configure-globalsetup-and-globalteardown)
to ingest Elasticsearch data before running the tests in parallel
against the same ES/Kibana instances.

This approach doesn't work well when you need to adjust `globalSetup`
logic based on specific condition, e.g. configuration file defining
where servers are hosted, its credentials, etc.

Not only global hook, but `ScoutConfig` fixture expects an argument to
define where servers configuration is defined:


cd502acea1/packages/kbn-scout/src/playwright/fixtures/worker/core_fixtures.ts (L65-L75)

`testInfo` is how Playwright exposes currently running configuration in
a form of `project` interface:
[projects](https://playwright.dev/docs/test-projects) can be used to
group tests, e.g. for specific envs or browsers.

Unfortunately `testInfo` is not exposed in global scripts, because in
Playwright project design `globalSetup` scripts are run before multiple
projects and projects can have its own `setup` hooks via
[dependencies](https://playwright.dev/docs/test-global-setup-teardown#option-1-project-dependencies):

```
    {
      name: 'setup',
      testMatch: /global.setup\.ts/,
    },
    {
      name: 'local',
      use: { ...devices['Desktop Chrome'], configName: 'local' },
      dependencies: 'setup',
    },
``` 

We already use project API to get `serversConfigDir` path, where we plan
to store local and cloud server configurations. This PR proposes to
define projects as `local` and `cloud` (maybe even separate `cloud-mki`,
`cloud-ech`) as a way to provide playwright information about servers
configuration.

Advantages:
1. we can re-use existing fixtures as-is, without adding custom exported
helper functions for ES data ingestion
2. project dependency is displayed as `setup` in Playwright report
3. way better and simpler design for consumers:
```
import { globalSetupHook } from '@kbn/scout';

globalSetupHook('Ingest data to Elasticsearch', async ({ esArchiver, log }) => {
  // add archives to load, if needed
  const archives = [
    testData.ES_ARCHIVES.LOGSTASH,
  ];

  log.debug('[setup] loading test data (only if indexes do not exist)...');
  for (const archive of archives) {
    await esArchiver.loadIfNeeded(archive);
  }
});
```
4. it is supported by VSCode Playwright plugin
<img width="1271" alt="Screenshot 2025-02-17 at 11 26 12"
src="https://github.com/user-attachments/assets/ba7eeb38-d39d-4785-9c11-18647599ec4a"
/>

I find it extremely useful because you don't need to change env var when
you want to switch b/w local or cloud run, all the configurations are
loaded automatically and you just tick the checkbox!

Disadvantages:
1. it is important to run `playwright test` with `--project` flag to use
the proper configuration
2. we have to define how `projects` are used for local and cloud
configuration, and make sure it meets requirements of multiple teams. We
can expose a way to pass custom project definitions in
`createPlaywrightConfig` function, but it might complicate the support
effort when every Team has too many custom projects.
3. `project` term is something we can't change and might be confusing
4. Since it is a Playwright feature, we might not have consistency with
API tests runner under Scout

For reviewers: 

Playing with it locally might give a better understanding about the
pros/cons, especially with IDE playwright plugin installed.

Running servers with tests:
```
node scripts/scout.js run-tests --serverless=oblt --testTarget=local --config x-pack/platform/plugins/private/discover_enhanced/ui_tests/playwright.config.ts

node scripts/scout.js run-tests --serverless=oblt --config x-pack/platform/plugins/private/discover_enhanced/ui_tests/playwright.config.ts
```

Running test only requires passing `project` argument:

```
npx playwright test --project=local --config x-pack/platform/plugins/private/discover_enhanced/ui_tests/playwright.config.ts

npx playwright test --project=local --config x-pack/platform/plugins/private/discover_enhanced/ui_tests/parallel.playwright.config.ts
```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: jennypavlova <jennypavlova94@gmail.com>
2025-03-13 10:06:26 +01:00
Miriam
9fb25a155c
[ObsUX][APM] Add tooltip for exit spans missing destination (#213714)
Closes https://github.com/elastic/kibana/issues/212638

### Summary

In order to help users, support agents and engineers to spot eventual
problems on the Service Map, we want to display a warning on the exit
spans that lack the span.destination.service.resource on the trace
waterfall.


![image](https://github.com/user-attachments/assets/eee3f962-a91c-49bb-9f06-c989ed8500c5)
2025-03-13 09:45:56 +01:00
Brad White
806789c8c0
Fixes i18n check (#214311)
## Summary


https://buildkite.com/elastic/kibana-on-merge/builds/64021#01958c89-b4da-4e7b-83e0-99f2bf9b15a8/7594

Related #214135
2025-03-12 23:37:43 -07:00
elastic-renovate-prod[bot]
c0e6024331
Update dependency chromedriver to v134 (main) (#214217)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [chromedriver](https://redirect.github.com/giggio/node-chromedriver) |
devDependencies | major | [`^133.0.2` ->
`^134.0.0`](https://renovatebot.com/diffs/npm/chromedriver/133.0.3/134.0.0)
| `134.0.2` (+1) |

---

### Release Notes

<details>
<summary>giggio/node-chromedriver (chromedriver)</summary>

###
[`v134.0.0`](https://redirect.github.com/giggio/node-chromedriver/compare/133.0.3...134.0.0)

[Compare
Source](https://redirect.github.com/giggio/node-chromedriver/compare/133.0.3...134.0.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwicmVsZWFzZV9ub3RlOnNraXAiXX0=-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
2025-03-12 19:51:51 -07:00
Devin W. Hurley
95068042b1
[Security Solution] [Detections] skip individual EQL shard failure test instead of entire suite (#214283)
skips individual failing test instead of entire test suite
2025-03-12 17:16:45 -07:00
Alejandro Fernández Haro
98986a86a1
[Feature Flags] ECS-compliant logger (#214231)
## Summary

The OpenFeature clients receive a logger, but it logs errors like
`log('something went wrong', error)`. Our core logger then removes the
`error.message` as it prefers the message provided as the first
argument.

This PR wraps the logger to make sure that we handle this type of usage.

cc @pmuellr as he found out about this bug


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-13 00:24:40 +01:00
Ahmad Bamieh
29a8ac5210
[i18n] Integrate 8.18.0 Translations (#214135)
Integrating latest translations extracted from main branch.
Skipping backports from main to target branches since the `i18n_check`
might trim unused translations that are still used in different
branches. Integration script is ran against each target branch
separately.
2025-03-12 23:44:17 +01:00
Valentin Crettaz
c218f4239a
[Stack Monitoring] New FTR for "view logs" link (#208351)
## Summary

Closes https://github.com/elastic/kibana/issues/202675

A [recent bug](https://github.com/elastic/kibana/issues/199902) broke
the Stack Monitoring UI only if/when logs were present. Functional test
coverage was lacking to detect such a situation.

This PR adds some functional test coverage to make sure that the "View
logs" link in Stack Monitoring works whenever logs are available,
wherever logs can be visible, i.e. in the cluster overview page, the
node details page and the index details page.

### Checklist

- [X] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-12 23:35:28 +01:00
elastic-renovate-prod[bot]
6a3becf296
Update docker.elastic.co/wolfi/chainguard-base:latest Docker digest to 69a0542 (main) (#214059)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base | digest | `a37e513` ->
`69a0542` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwicmVsZWFzZV9ub3RlOnNraXAiXX0=-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
2025-03-12 17:09:26 -05:00
Alejandro Fernández Haro
1337c11ac3
[Feature Flags] Retry provider setup (#214200)
## Summary

We identified that on some occasions, the Feature Flags provider times
out when setting up, and, since we don't restart the Kibana server, it
never sets it up.

This PR adds a retry logic to try to set the provider in case there's an
error.

cc @pmuellr as he found out about this bug

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-03-12 22:45:38 +01:00