Commit graph

46297 commits

Author SHA1 Message Date
Tim Sullivan
145d295a75
[Solution nav] Use flyout for Stack management Security Solution (#210471)
This reverts commit 949d5d1762 from
https://github.com/elastic/kibana/pull/208632#issuecomment-2644086780.

## Summary

Closes https://github.com/elastic/kibana/issues/208636
Part of https://github.com/elastic/kibana-team/issues/1439

</details>
<details><summary>Security / Serverless (no longer in this PR)</summary>

![optimized-serverless-security 4 48
01 PM](https://github.com/user-attachments/assets/33df6104-8de7-405e-8fd6-3082fc2dadb6)

</details>
<details><summary>Security / Stateful (no longer in this PR)</summary>

![optimized-stateful-security 4 48
01 PM](https://github.com/user-attachments/assets/4e654a8f-e802-4484-850e-f7b67a4fefa8)

</details>

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] New lists of Stack Management navigation items were added for
flyout menus in serverless projects using static declarations. There is
a risk that these lists have missing items, which could hurt user
experience by making the pages harder to navigate to.
2025-02-11 23:04:25 +01:00
Philippe Oberti
161ce34cf7
[Security Solution][THI] remove usages of EUI json tokens (#210482)
## Summary

This PR is probably the final PR that makes the changes to support EUI
Borealis. It focuses on removing all the usage of EUI Json tokens.

You will notice different approaches while removing the tokens:
- for some cases, the changes were done using `css from
'@emotions/react'` as the components using the tokens were already using
`euiTheme` or adding it was straightforward and required the minimal
amount of changes
- for some cases, where the css changes were pretty involved, a hook was
created to be able to import the styles and apply them in the components
- finally for other cases, esepcially if the styled components were
extracted in a different file and were used within many others, I
decided to create reusable components. This allowed to not change all
the files impacted and limit the number of files modified in this PR.

Feel free to comment on any of the approaches and suggest better
options!

https://github.com/elastic/kibana/issues/201889

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-11 22:11:55 +01:00
Kyle Pollich
6df81592ea
[Fleet] Fix elastic-agent docker image path (#210008)
## Summary

Starting in 9.1-SNAPSHOT, the Elastic Agent image has moved from the
`beats` namespace to its own `elastic-agent` namespace in
docker.elastic.co. This PR updates a few places where the old path is in
use.

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] This was done with a generic find/replace across the Kibana
codebase. I did not test the changes extensively and made a few changes
outside of the Fleet codebase. Codeowners please be aware.
2025-02-11 22:04:03 +01:00
Alberto Blázquez
00388ed2e1
Implement Asset Inventory filters (#207094)
## Summary

Closes https://github.com/elastic/kibana/issues/201710.

Implements filters section for Asset Inventory reusing `FilterGroup`
component from `@kbn/alerts-ui-shared` package.

### Screenshot

<img width="1740" alt="Screenshot 2025-01-17 at 16 21 55"
src="https://github.com/user-attachments/assets/bf83d9e8-4919-498d-a0ab-fdc3df711d4e"
/>

### Definition of done

- [x] Add multiple dropdown filters labelled:
  - Type - filter by `asset.category`
  - Criticality - filter by `asset.criticality`
  - Tags -  filter by `asset.tags.name`
  - Name - filter TBD
- [x] Ensure each dropdown allows users to select multiple options to
filter the inventory data.
- [x] Add a button or dropdown labeled "More filters" that exposes
advanced filtering options, including "Reset control" and "Edit
control".
- [x] Verify if the `FilterGroup` component from
`packages/kbn-alerts-ui-shared` can be reused to wrap the required
functionalities.
- It can be reused, but the detection engine uses `AlertFilterControls`
instead, which is a higher-level alternative. And that's what I did in
Asset Inventory too
- [x] Ensure the filters are functional on the front-end and can
interact with placeholder data.

### Out of scope

- Backend data filtering logic
- Implementation of the actual data fetching based on filters

### How to test

Follow the "how to test" instructions written on this PR:
- https://github.com/elastic/kibana/pull/206115

### Checklist

- [x] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Risks

No risks at all.
2025-02-11 12:36:15 -08:00
Nicolas Chaulet
73536e3378
[Fleet] Fix retrieving agent policies accross space to validate outputs (#210474) 2025-02-11 21:18:43 +01:00
Samiul Monir
dc0ccc4b7d
[Search]: Fix Number type field to have correct property (#210462)
## Summary

This PR includes the following updates:  
- Converted `readOnly` fields to `disabled` to ensure consistency across
all view-only fields.
- Added an `isPreconfigured` check to disable the `num_allocations`
field. While `num_allocations` is the only updatable field for
`Elasticsearch` services, it cannot be modified if the endpoint is
preconfigured.

### Not preconfigured
![Screenshot 2025-02-10 at 3 54
32 PM](https://github.com/user-attachments/assets/a70aa6a4-69b5-4f75-95ba-f3793b6992d2)

### Preconfigured
![Screenshot 2025-02-10 at 3 54
19 PM](https://github.com/user-attachments/assets/4e174b33-307a-4707-974e-a91e1ca56649)

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.


- [X] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-02-11 14:47:13 -05:00
Khristinin Nikita
0007203278
Change filter for rule monitoring gaps (#209983)
## Change filter for rule monitoring gaps

Keep only 1 button, and make selection more clear





https://github.com/user-attachments/assets/f720ce03-fc38-42ef-87aa-99e22accc646

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 19:30:48 +01:00
Davis McPhee
056eba2937
Update Logs Explorer deprecation messages (#201307)
## Summary

It was pointed out in
https://github.com/elastic/kibana/pull/199255#discussion_r1842800664
that the Logs Explorer deprecation messages may no longer be accurate
now that contextual logs features are only available in Discover in the
Observability solution view for 8.x:

![image](https://github.com/user-attachments/assets/d0a63b52-5f6c-44b0-af77-867897e26abb)

I'm not really sure what they should updated to instead, so hopefully
@elastic/obs-ux-logs-team can offer some suggestions.

### Checklist

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-11 14:26:33 -04:00
Sergi Romeu
46cd29e60b
[APM] Remove error.id in getErrorGroupMainStatistics query as it's not used (#210613)
## Summary

Closes #210610

This PR removes `error.id` field from being queried at
`getErrorGroupMainStatistics`, as it was not being used, as it was
required. If we didn't have this field, the endpoint call would crash.
2025-02-11 19:13:51 +01:00
Hannah Mudge
3716441c38
[Embeddable] Fix presentation panel styles (#210113)
## Summary

When https://github.com/elastic/kibana/pull/207275 merged, some Security
Cypress tests started failing because the embeddables were no longer
taking up any width in their containers. This was caused by us switching
over to using the CSS container type `inline-size` on the hover anchor
wrapper, which makes it so that it can no longer be sized to its
contents (see [this
comment](https://stackoverflow.com/a/73980194/28754956) for a really
good explanation). Instead, the width of the `PresentationPanel` needs
to be set **by the parent** - so, by applying the `min-width` to the
Metric wrapper rather than the Lens embeddable, the metric now takes up
the expected width:

| Before | After |
|--------|--------|
|
![image](https://github.com/user-attachments/assets/0aa1d563-e50f-4a3d-a91e-3555b7e0d48d)
|
![image](https://github.com/user-attachments/assets/1fa9d728-b84e-4c1a-958f-76734ff6c95f)
|

When doing this work, I noticed that, because we added a delay to hiding
the hover actions, there was a slightly jarring transition when hovering
over panels without `border` enabled. So, I fixed this by adding a
transition to the border on the panel as well, so that it matches the
animation on the hover actions:

| Before | After |
|--------|--------|
| ![Feb-07-2025
11-09-33](https://github.com/user-attachments/assets/9b2a0c67-47fe-46a5-81e8-42231ed7b0a3)
| ![Feb-07-2025
11-08-26](https://github.com/user-attachments/assets/35d50475-174c-4cba-8c42-76521f79f235)
|



### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-11 11:11:18 -07:00
Efe Gürkan YALAMAN
cce32a9474
[Fix][Synonyms UI]Add navigation link to the Detail breadcrumb. (#209574)
## Summary

<img width="1332" alt="Screenshot 2025-02-04 at 18 18 12"
src="https://github.com/user-attachments/assets/5bab6b16-ccf8-4ae5-ae70-8db81360db84"
/>

Adds navigation link to move back to synonyms set list.
Fixes missing invalidation when a synonym rule is set.


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-11 18:57:11 +01:00
Dzmitry Lemechko
bd13e82949
[scout] adding test helper @kbn/scout-oblt package and uptate onboarding tests (#209761)
## Summary

`@kbn/scout-oblt` is a test library that extends `@kbn/scout` with test
helpers specifically designed to test `Observability` applications in
Kibana. All Oblt plugins should only import from `@kbn/scout-oblt`

Its primary goal is to simplify the test development experience for
teams working on `Observability` plugins by providing custom Playwright
fixtures, page objects, and utilities tailored for Observability-related
testing scenarios.

Contributing:
- when Fixture/Page Object is sharable across all Solutions and Platform
(`fleetApi` fixture), it should be added in `@kbn/scout`
- when Fixture/Page Object is Oblt-specific but is shared across tests
under the multiple plugins (`OnboardingHome` page), it should be added
in `@kbn/scout-oblt`
- when Fixture/Page Object is only used in a single plugin (`onboarding`
internal APIs ?), it should be added in this plugin.

I also re-worked existing tests with few ideas in mind:
- Scout is **e2e testing tool** and should target primary e2e test
scenarios; We have _API integration tests_ to test multiple short
scenarios for APIs behavior (response, status code) and _jest/React
testing library_ to test components in isolation (elements rendering,
fields validation). Doing all the testing with e2e tool like Playwright
will dramatically affect cost efficiency and stability of tests, but
also slows overall CI execution and PRs delivery. The goal is to follow
testing pyramid and keep in mind its principles.
- We on purpose spin up new browser context for each `test` block to
make sure our **tests are independent**. Having too many short `test`
blocks in the file significantly slows down the execution: every block
triggers browser context, saml authentication, adding/removing Fleet
integrations (each call up to 2 seconds) and other beforeEach/afterEach
hooks. Real browser-based testing is expensive. It is not about putting
every step into 1 `test` block, but also not a Jest unit-test-style
design. When it is possible to group similar actions on the same page
and if it is a part of the same user flow - we should do it. It also
doesn't bring the testing value repeating the same UI steps multiple
times in different scenarios. _Our CI costs are critical to cut when it
is possible_
- Avoid **nesting describe** blocks: it complicates test readability and
also complicates for CI bot to properly skip the failing block (it will
skip the top level one). We encourage **Scout parallel test execution**
based on running test spec files in multiple workers, not the `test`
blocks within the same file. Having too many `test` blocks in the same
file will be slowly run in the single thread and in case of flakiness,
it means Team lose more test coverage than they probably expect.

Before (**59** test blocks - **8-8.5 min** per distro):
<img width="1709" alt="Screenshot 2025-02-08 at 18 01 40"
src="https://github.com/user-attachments/assets/5fd65a1c-85f9-4594-9dae-3f8e99a005ab"
/>

After (**15** test blocks - **3.5-4 min** per distro):
<img width="1578" alt="Screenshot 2025-02-10 at 18 14 42"
src="https://github.com/user-attachments/assets/6846898f-7dd2-4f6b-8bc5-d06741b0b120"
/>

For reviewers: updated tests are possible to run in 2 parallel workers
against the same Kibana/ES instance and run time is dropping to **2.5-3
min** 🚀 . It is up to UX-Logs team to decide if you want to keep
parallel run (new tests can be added either to parallel or sequential
run)
<img width="1578" alt="Screenshot 2025-02-11 at 12 14 30"
src="https://github.com/user-attachments/assets/e94113f2-d7f1-470e-a6d5-cb5154d99c41"
/>

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-11 18:38:41 +01:00
Jordan
000e913e7a
[Cloud Security] Asset Inventory table flyout controls (#208452) 2025-02-11 18:30:28 +01:00
James Gowdy
06801d82fe
[ML] Fix model deployment check in file uploader (#209585)
Adding an additional check to see if the selected model has been
deployed before continuing with the upload.
The `num_allocations` count can occasionally be incorrect, so this also
checks to see if the initial call to the inference api has returned with
no error. If it has, the model must be deployed.

To test:
Manually deploy both `.elser_model_2` and `.multilingual-e5-small` in
ML's trained models page.

In dev tools call:
```
POST /_inference/.multilingual-e5-small-elasticsearch
{
"input": ""
}
```
then call:
```
POST /_inference/.elser-2-elasticsearch
{
"input": ""
}
```
Once both models have been deployed, check the `num_allocations` of
`.elser-2-elasticsearch`
```
GET /_inference/.elser-2-elasticsearch
```

It should be `0` even though the model has been deployed.
If it isn't `0`. wait around 15mins for both models to scale down then
repeat the dev tools commands.
Call this to check `num_allocations ` in both models.
```
GET /_inference/_all
```
2025-02-11 18:14:31 +01:00
Dmitrii Shevchenko
c5557f3321
[Security Solution] Added concurrency limits and request throttling to prebuilt rule routes (#209551)
**Resolves: https://github.com/elastic/kibana/issues/208357**
**Resolves: https://github.com/elastic/kibana/issues/208355**

## Summary  

To prevent possible OOM errors, we need to limit concurrent requests to
prebuilt rule routes (see attached tickets for more details).

- `installation/_perform` and `upgrade/_perform` endpoints
- Concurrency is limited to one parallel call. If another call is made
simultaneously, the server responds with 429 Too Many Requests.
- On the front end, all rule install and upgrade operations are retried
in case of a 429 response. This ensures proper handling when a user
clicks multiple times an update or install rule buttons

- `prebuilt_rules/_bootstrap` endpoint
- Install prebuilt rules and endpoint packages sequentially instead of
in parallel to prevent from having them both downloaded into memory
simultaneously.
- Added a 30-minute socket timeout to prevent the proxy from closing the
connection while rule installation is in progress.
- Introduced a `throttleRequests` wrapper, ensuring the endpoint handler
is called only once when multiple concurrent requests are received.
- The first request triggers the handler, while subsequent requests wait
for the first one to complete and reuse its result.
- This prevents costly prebuilt rule package installation from running
in parallel.
- Reusing the response ensures the frontend correctly invalidates cached
prebuilt rule queries. Since concurrent frontend requests should receive
the same installed package information, responding with 421 and using
the retry logic as in cases above is not an option here because the
second request would receive a package installation skipped response
leading to no cache invalidation.

- `installation/_review` and `upgrade/_review` endpoints
- Concurrency is limited to one parallel call. If another call is made
simultaneously, the server responds with 429 Too Many Requests.
- On the front end, all rule install and upgrade operations are retried
in case of a 429 response. This ensures proper handling when a user
clicks multiple times an update or install rule buttons
2025-02-11 18:12:03 +01:00
Yan Savitski
ed19705b5d
[Search] [Onboarding] Update search api to use EventEmitter instead of Provider (#209784)
## Summary

Summarize your PR. If it involves visual changes include a screenshot or
gif.


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...
2025-02-11 18:11:35 +01:00
Nathan Reese
8a30b862cc
[maps] lazy load map actions (#210252)
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 09:37:34 -07:00
Jordan
c1aaf6f38c
[Cloud Security] Adding telemetry collection condition based on render condition (#208758) 2025-02-11 10:33:02 -06:00
Tim Sullivan
f16446486c
[Solution nav] Use flyout for Stack Management in Search and Observability solutions (#208632)
## Summary

Closes https://github.com/elastic/kibana/issues/208636
Part of https://github.com/elastic/kibana-team/issues/1439

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] New lists of Stack Management navigation items were added for
flyout menus in serverless projects using static declarations. There is
a risk that these lists have missing items, which could hurt user
experience by making the pages harder to navigate to.

### Screenshots
<details><summary>Observability / Serverless</summary>

![optimized-serverless-observability 4 48
01 PM](https://github.com/user-attachments/assets/03d40840-385c-4a89-a181-a9b5ba82f820)

</details>
<details><summary>Observability / Stateful</summary>

![optimized-stateful-observability 4 48
01 PM](https://github.com/user-attachments/assets/e267e87a-584c-406d-8fea-99788fb2c0dd)

</details>
<details><summary>Search / Serverless</summary>

![optimized-serverless-search 4 48
01 PM](https://github.com/user-attachments/assets/258da8ec-5144-4439-b29f-b894b28963ad)

</details>
<details><summary>Search / Stateful</summary>

![optimized-stateful-search 4 48
01 PM](https://github.com/user-attachments/assets/fd6db7bb-536b-4804-950b-00f6716663ac)
2025-02-11 09:14:32 -07:00
Samiul Monir
2e29a504a7
[Search] Fix Add Inference Endpoint API call (#210243)
## Summary

This PR includes
- Remove `task_settings` from API call
- Remove `Service_providers` definition from the plugin to use the
global definition.

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [X] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [X] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 11:04:58 -05:00
Jedr Blaszyk
0edba3919b
[Agentless Connectors] Integration overview panel (#210222)
## Summary

Add links to relevant areas for agentless connector:
- link integration owning this connector
- if policy related to this connector exist:
   -  add link to view policy
   - otherwise display `No policy found`
- if agent related to this policy exists 
  - display agent status (e.g. is it offline, or any other state)
  - link to fleet agent host overview
- create discover app link to show logs related to agent/connector for
the past 6 hrs (select relevant columns :) )
  - otherwise, handle this 

Changed isWaitingOnAgentlessDeployment to just check whether `last_seen`
(connector heartbeat field) was populated, this is to address this
reported [issue](https://github.com/elastic/search-team/issues/9165).

### Happy path


https://github.com/user-attachments/assets/76db0b66-dda3-43a7-a74b-79348c7e7989

### Handling edge cases

#### No agent / inactive agent


https://github.com/user-attachments/assets/eae9b8da-de24-4d77-bc9e-b7cfad75b426

similarly we handle edge cases with policy not existing yet


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ x [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [x] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: José Luis González <joseluisgj@gmail.com>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-11 16:26:04 +01:00
Marco Liberati
abba6675e2
[Lens] Restore dynamic colouring by value for Last value agg (#209110)
## Summary

Fixes #208924

This PR improves the numeric check for the Last value agg within the
Metric chart type avoiding completely to access the active data and
rather rely on the datasource configuration.
The new utility function in fact won't rely any more on active data
rather on the Lens configuration itself, which is more robust, faster
and flexible.

<img width="2552" alt="Screenshot 2025-01-31 at 14 30 12"
src="https://github.com/user-attachments/assets/5f8792db-40ff-497b-8e2f-0737c2932f92"
/>


### Notes for testing

I've created a testing dashboard with all the possible combinations of
colouring for metric and tables.


[last_value_dashboard.ndjson.txt](https://github.com/user-attachments/files/18618905/last_value_dashboard.ndjson.txt)


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

## Release note

This fixes an issue where dynamic colouring has been disabled from Last
value aggregation types.
2025-02-11 15:55:35 +01:00
Jacek Kolezynski
4ccc909191
[Security Solution] Remember page index in Rule Updates table (#209537)
**Resolves: #207245**

## Summary

Pagination mechanism in Rule Updates table was incomplete. When a rule
was edited or upgraded, the table was reset to the first page. I am
adding a mechanism to preserve the page index.

# BEFORE
## Scenario 1 (Edit and Save)


https://github.com/user-attachments/assets/05927104-28c0-446a-8c14-1a8236854cc0

## Scenario 2 (Update Rule)


https://github.com/user-attachments/assets/9e54c3f9-9823-4a06-af9e-38b8ddc7d887

## Scenario 3 (Update Rule with prebuiltRulesCustomizationEnabled flag
disabled)


https://github.com/user-attachments/assets/5dd7929a-1b79-4f7f-b825-23c96fb63131


# AFTER 
## Scenario 1 (Edit and Save)


https://github.com/user-attachments/assets/9d270994-846b-44d0-822d-2dcfba042d9d

## Scenario 2 (Update Rule)


https://github.com/user-attachments/assets/7cf61d8b-55a9-4b5a-ae79-65f95de84fc4

## Scenario 3 (Update Rule with prebuiltRulesCustomizationEnabled flag
disabled)


https://github.com/user-attachments/assets/678bb077-b9af-4830-b6cf-0bf5c43648af
2025-02-11 15:55:22 +01:00
Jacek Kolezynski
5c5bdf8296
[Security Solution] Fix filtering in Rule Updates table (#208923)
**Resolves: #206132**

## Summary

The logic of filtering by Modifications and Tags was incorrect. The
condition for filtering by these two things should be combined. I am
fixing this in this PR.

## BEFORE

https://github.com/user-attachments/assets/7938dfc9-583a-4a54-9444-291a87e90ddf

## AFTER


https://github.com/user-attachments/assets/5db46670-ab4a-42da-b78f-ca8a8daafbdc


https://github.com/user-attachments/assets/ae001738-a937-4d7d-9305-3b0f296ff81a
2025-02-11 15:45:31 +01:00
Elena Shostak
ad0e1d9d9d
[Authz] Migrated routes with access tags to security config (#209756)
## Summary

This PR migrates the last routes with `access:<privilege>` tags used in
route definitions to new security configuration.
Please refer to the documentation for more information: [Authorization
API](https://docs.elastic.dev/kibana-dev-docs/key-concepts/security-api-authorization)

### **Before Migration:**
Access control tags were defined in the `options` object of the route:

```ts
router.get({
  path: '/api/path',
  options: {
    tags: ['access:<privilege_1>', 'access:<privilege_2>'],
  },
  ...
}, handler);
```

### **After Migration:**
Tags have been replaced with the more robust
`security.authz.requiredPrivileges` field under `security`:

```ts
router.get({
  path: '/api/path',
  security: {
    authz: {
      requiredPrivileges: ['<privilege_1>', '<privilege_2>'],
    },
  },
  ...
}, handler);
```

### Checklist

- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 21:36:38 +07:00
jennypavlova
9bdee77409
[ObsUX] [Infra] Add processes table and summary component tests (#210431)
closes [#210427](https://github.com/elastic/kibana/issues/210427)


## Summary

This PR adds component tests for the processes list and summary.

## Fixes
It also fixes a DOM validation warning I saw once I ran the test
(visible also in the browser):

<img width="1423" alt="Dom validation warning"
src="https://github.com/user-attachments/assets/9eac7d9c-369d-4cd0-97c0-c616cf6eaa3c"
/>

## Testing 
- Run:
- `node scripts/jest
x-pack/solutions/observability/plugins/infra/public/components/asset_details/tabs/processes/processes_table.test.tsx`
- `node scripts/jest
x-pack/solutions/observability/plugins/infra/public/components/asset_details/tabs/processes/summary_table.test.tsx`
2025-02-11 15:25:03 +01:00
Georgiana-Andreea Onoleață
016cddec01
[ResponseOps][Forms]Make optional/required fields consistent in all ResponseOps forms (#207799)
Closes https://github.com/elastic/kibana/issues/206303

## Summary
- made `optional`/`required `fields be consistent in the following
forms:

Cases:
- Form: `Add Case` | `Add template`: `optional` label to `External
incident management system`
- Form: `Add Field`:  `optional` label to `Default value`

Connectors:

- Form: `Edit Connector -> Test tab: D3 security`: added optional label
to `Event Type` and `Severity`
- Form: `Edit Connector -> Test tab: IBM Resilient`: removed `required`
label, added `optional` label to `Incident type`, `Severity`,
`Description` and `Additional comments`
- Form: `Edit Connector -> Test tab: Jira`: removed `required` label,
added `optional` label to `Issue type`, `Additional comments,`
`Additional fields`
- Form: `Edit Connector -> Test tab: Opsgenie`: removed required label,
added `optional` label to `Opsgenie tags`, `Priority`, `Description` and
`Alias`
- Form: `Edit Connector -> Test tab: TheHive`: added `optional` label to
`Tags` and `Additional comments`

Rules: 

- Form: `Create/Edit Rule - Rule Details` - added `optional` label to
`Tags`
- Form: `Create/Edit Rule - Actions: Cases `- changed `Group by alert
field field type` and added `optional` label

---------

Co-authored-by: Christos Nasikas <xristosnasikas@gmail.com>
2025-02-11 16:23:47 +02:00
Sergi Massaneda
dc3b4c8c31
[Security Solution] Fix bug with redirect and add test (#210188)
## Summary

It fixes a bug caused by the `latestStats$` being initialized with `[]`
empty array. The hook considers the state is _loading_ while the hook is
`null`.


dde1bec88b/x-pack/solutions/security/plugins/security_solution/public/siem_migrations/rules/service/hooks/use_latest_stats.ts (L23-L26)

The fix consists of initializing the `latestStats$` observable to `null`
instead of `[]`.

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 15:20:50 +01:00
Marius Iversen
d22fae166a
[Rule Migration] Telemetry improvements (#210275)
## Summary

This PR resolves a minor bug in one of the telemetry events, it also
adds a try/catch around the event reporting to prevent it crashing on
failures.

I also moved our reportEvent wrapper function to use generics so that we
get proper typehint/checks on the events to prevent issues similar in
the future.
2025-02-11 15:01:53 +01:00
Jaime Soriano Pastor
a25dc3f530
[Fleet] Re-enable kibana version checks in 9.0 (#208169)
Revert the change in https://github.com/elastic/kibana/issues/198172.

It re-enables version constraints for packages in 9.0 by default,
following the plan described in internal issue
https://github.com/elastic/ingest-dev/issues/4484.

We already have some packages ready for 9.0, and many more coming, so it
should be enough for testing purposes during the FF.

Adjust some tests config so they continue disabling the constraints, as they
expect more packages than the ones available now.
2025-02-11 08:58:08 -05:00
Robert Jaszczurek
f9c4f59f8e
[ML] Trained models: Replace download button by extending deploy action (#205699)
## Summary

* Removes the download model button by extending the deploy action.
* The model download begins automatically after clicking Start
Deployment.
* It is possible to queue one deployment while the model is still
downloading.
* Navigating away from the Trained Models page will not interrupt the
downloading or deployment process.
* `State` column renamed to `Model State`
* Responsiveness fix: icons overlap



https://github.com/user-attachments/assets/045d6f1f-5c2b-4cb5-ad34-ff779add80e3

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-11 14:33:40 +01:00
Sander Philipse
633fad00f9
[Search] Fix notebooks config path (#210538)
## Summary

This updates the Search notebooks config path to fix a config conflict,
now that the main search plugin owns `xpack.search`. This config should
only have been used in Serverless and was never pushed to other users,
but I've added a rename and deprecation warning just in case anyone used
it..
2025-02-11 14:14:19 +01:00
Kevin Delemme
9545d6b127
feat(slo): group by slo id (#210469) 2025-02-11 07:55:41 -05:00
Viduni Wickramarachchi
d36df89025
[Obs AI Assistant] Default to "native" function calling if the connector config is not exposed (#210455)
Closes https://github.com/elastic/kibana/issues/210451

## Summary

If the connector config is not exposed (e.g.: in a pre-configured
connector), default to `native` function calling.


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-11 07:47:15 -05:00
Jill Guyonnet
2f4fb3ff2f
[Fleet] EPM - Fix error message for data stream settings update (#210330)
## Summary

During package installation, failure to update the default pipeline for
data streams currently has a misleading error message. This PR corrects
this and adds the original error message to improve clarity.

### Identify risks

N/A

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 12:25:13 +01:00
Yngrid Coello
d26f9ffbb6
[Dataset quality] 🐞 Rely solely on _index instead of data_stream properties (#210329)
Closes https://github.com/elastic/logs-dev/issues/192.

## Background

This have been an long running issue within dataset quality page which
became more noticeable when introducing failure store. Before this
change `Dataset quality details` page was already solely relying on
`_index` instead of filtering documents using `data_stream` properties
while the main page was filtering out the documents.

### Before 


https://github.com/user-attachments/assets/02d14cb9-81a6-4f61-a199-5d1e55443a20

### After


https://github.com/user-attachments/assets/09a4e523-b927-4147-99d1-6ceff40f1027
2025-02-11 11:48:45 +01:00
Kenneth Kreindler
a1356ffb9f
[Security Solution] [KB Management] Fix sorting by name in the kb entries table (#209141)
Fixes https://github.com/elastic/kibana/issues/199253

## Summary

Fixes the issue where KB entries in knowledge base management were not
sorting correctly by name. Previously, entries with names starting with
uppercase letters appeared before those with lowercase names, instead of
following a case-insensitive alphabetical order. This update ensures
proper sorting regardless of letter case.

Before:
<img width="3120" alt="image"
src="https://github.com/user-attachments/assets/1657fce4-abba-4672-aaa8-8c5c6c660c98"
/>


After:
<img width="3120" alt="image"
src="https://github.com/user-attachments/assets/10d1f3fc-f6db-4b5b-b67b-8b8ae7250dd4"
/>



How to test:
- See instructions in the issue. Create uppercase and lowercase KB
entries (e.g. A,a,b,B,c,C. Create the entries in that order).
- Reorder the table based on name and check the ordering makes sense.


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [X] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [x] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 10:18:02 +00:00
Jill Guyonnet
f50c2c1903
[Fleet] Fix agent policy batch processing in UnenrollInactiveAgentsTask (#210216)
## Summary

While working on https://github.com/elastic/ingest-dev/issues/4722 I
identified an issue in `UnenrollInactiveAgentsTask` in the batch
processing of agent policies. As it is, the task ends if no inactive
agents were found for an agent policy batch, regardless of whether there
could be inactive agents assigned to policies in further batches. This
means that for stacks with over 500 agent policies, it could be possible
that some inactive agents never get unenrolled (or at least not
predictably, since that depends on the order in which the agent policy
fetcher returns them).

I added a unit test to test this and also fixed a couple of other unit
tests.

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### Identify risks

Low probability of affecting automatic unenrolling of inactive agents on
stacks with over 500 agent policies.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-11 10:18:36 +01:00
Miriam
782c82be29
[ObsUX] [Profiling] Add date/time to main bar chart tooltip (#210367)
Closes https://github.com/elastic/prodfiler/issues/4605

BEFORE


![image](https://github.com/user-attachments/assets/d1315071-9168-4348-94aa-88fc23297a57)

AFTER


![image](https://github.com/user-attachments/assets/21555db6-3337-4a09-bcfe-8e1f8561f0f5)
2025-02-11 08:52:21 +00:00
christineweng
3889d9bf39
[Security Solution] Disable automatically open analyzer panels in flyout (#203497)
## Summary

In preparing for visualizations in flyout going GA, this PR disabled the
details panel showing upon opening analyzer. User can still access the
panels via the eye icon.

To test, enable `enableVisualizationsInFlyout` in advanced setting


https://github.com/user-attachments/assets/3a182736-8de0-46a7-94bd-d1eeac18e71c




### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

Co-authored-by: Philippe Oberti <philippe.oberti@elastic.co>
2025-02-11 09:11:33 +01:00
Philippe Oberti
ee61373643
[Security Solution][Alert details] do not open the SessionView detailed panel on first load (#210121)
## Summary

We [recently improved](https://github.com/elastic/kibana/pull/200270)
the SessionView experience when visualized within the alert details
expandable flyout. One downside was that the SessionView detailed panel
was opening in the flyout preview section on first load. This was
intended at the time, to mimic the behavior of the SessionView rendered
in place of the alerts table.
This behavior is not desired in the flyout though. This PR is making a
very small code change, to ensure that the detailed panel is NOT
rendered on first load, but will be when users click on a row in the
SessionView tree (which is a behavior that exists today).

#### Previous behavior


https://github.com/user-attachments/assets/ac6c0493-5d57-4dd1-bd43-bec6b025e768

#### New behavior


https://github.com/user-attachments/assets/4ce48f4d-f04d-46f8-a6b1-693fe8983d20

The amount of code change was kept to a minimum. I basically added one
prop to the `onSelectedProcess` callback that will differentiate user
actions from automated actions. The value is `false` by default, to not
change any existing logic, except on the user click event happening in
the tree.

#### Logic not changed when displayed in place of the alerts table


https://github.com/user-attachments/assets/b54ec319-baf5-4318-a45f-405178f92888

## How to test

- turn on the `securitySolution:enableVisualizationsInFlyout` Advanced
Settings
![Screenshot 2024-12-16 at 5 05
05 PM](https://github.com/user-attachments/assets/e5a937fa-7eaf-46b3-be11-d56224daf821)
- generate alerts with data for session view (`yarn test:generate -n
http://elastic:changeme@localhost:9200 -k
http://elastic:changeme@localhost:5601`)
2025-02-11 08:56:23 +01:00
Davis McPhee
37465f43d2
[Discover] Add "All logs" data view to classic nav (#209042)
## Summary

This PR adds the default "All logs" data view introduced in #205991 to
the classic nav in addition to Observability nav.

Resolves #209013.

### Checklist

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-10 21:18:26 -04:00
christineweng
fc6e1d6ae9
[Security Solution] Standardize actions in Alerts KPI visualizations (#206340)
### Background

The initial intent of the PR was to address customer feedback regarding
hover actions in the kpi charts. Because the hover actions wrap around
the label, some users find the trigger sensitive, especially when screen
resolution is high and the text labels are small.

Upon exploring options and reviewing with UIUX team, it was decided that
we should follow the take action format in Lens charts (inline actions
inline, vertical 3 dots icon, and black color), to ensure that we have a
standard experience in charts.

### Before ###
**Non-Lens charts: overview charts, treemap**
- Popover actions upon hover
- Popover content is blue (default color)

![image](https://github.com/user-attachments/assets/20091b16-4408-4f55-ace8-95cbac25ff2e)

![image](https://github.com/user-attachments/assets/06b97ad8-fe41-4508-95ff-cc0ee5a73338)


**Lens charts: Trend graph, Count table**
- Actions are inline, with the vertical 3 dots icon
- Icon and menu item are in black color

![image](https://github.com/user-attachments/assets/df0dd709-ec02-4549-bf35-60ca5fe57179)


### After 

All the non-Lens charts have inline actions in black


![image](https://github.com/user-attachments/assets/29c4e9e9-f458-4520-b90f-e4b16a5e1318)


![image](https://github.com/user-attachments/assets/ba904202-338c-4154-b645-128729010d1d)

### Changes to `CellActions` package

This PR focuses on making the inline option flexible, by taking
additional styling options in metadata

```
metadata={{
          extraActionsIconType: 'boxesVertical',
          extraActionsColor: 'text',
        }}
```
The styling does not impact hover options 

![image](https://github.com/user-attachments/assets/07e59cd1-0d0b-472f-9ef1-a8a185d8dd3c)

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-11 01:30:23 +01:00
Marshall Main
1b8bdcff67
[Security Solution] Fix whitespace/newlines for exception comments (#208959)
## Summary

Fixes https://github.com/elastic/kibana/issues/208956

## Before

![image](https://github.com/user-attachments/assets/aa9b00e9-da70-4ff2-be18-4073235e8a85)

## After

![image](https://github.com/user-attachments/assets/0fa2a69c-836d-4e98-8ecb-be88d1170519)
2025-02-10 18:17:49 -05:00
Bryce Buchanan
bfa945a0ea
Add 'Logs' tab to mobile services (#209944)
## Summary
Resolves #209630 
This PR adds the 'Logs' tab to mobile services. It uses the existing
`service_logs`
<img width="1714" alt="Screenshot 2025-02-05 at 17 03 59"
src="https://github.com/user-attachments/assets/62dd6059-b123-4796-81a5-f2f78b75fd3a"
/>

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-10 23:52:04 +01:00
Nathan Reese
0ba9c66a4e
[dashboard][canvas] Replace VisTypes and VisTypeAliases in Add Panel Menu (#209022)
Closes https://github.com/elastic/kibana/issues/180057

The following items needed to be replaced with add panel actions
* vega - visType
* markdown - visType
* lens - visTypeAlias
* maps - visTypeAlias

As an added benefit, now these actions are displayed in embeddable
examples that uses ADD_PANEL_TRIGGER

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-10 15:33:24 -07:00
christineweng
6e61f526a7
[Security Solution][Alert Flyout] Update entity insight badge to open entity flyouts (#208287)
## Summary

This PR updates the cloud insights in entity section to open to entity
flyout. When examining the insights (for example, the host is shown to
have 50 alerts, instead of opening the preview, and user click on the
details and go to respective tabs, this PR updated the behavior to open
the details tab via 1 click. The goal is to reduce friction for users
during investigation.

Feature flag: `newExpandableFlyoutNavigationEnabled`

When flag is off:
- Click on alert count should open timeline (if user has timeline
privileage)
- Click on misconfigurations and vulnerabilities badge should open
host/user preview


https://github.com/user-attachments/assets/23e0cc40-129d-4e75-b5be-26a49dcad710


When flag is on:
- Click on count badges should open the respective entity flyout and the
insights details tab



https://github.com/user-attachments/assets/5dfc39b7-edae-4b76-9a3a-79326337cb3b


### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-10 23:11:13 +01:00
Michael DeFazio
75694a1228
Fix alignment issues with badges on inference endpoints table (#210423)
## Summary

- Aligns preconfigured and tech preview badges. 
- Adds wrapping to the column
- Moves preconfigured to be next to the name: help remove an extra flex
item for non-preconfigured items


Previous:
![CleanShot 2025-02-10 at 11 39
39@2x](https://github.com/user-attachments/assets/aa462677-e41b-4d4b-a163-30bb337c4e65)

![CleanShot 2025-02-10 at 11 40
16@2x](https://github.com/user-attachments/assets/f515c65d-435b-42af-a849-b4c8f5e4bca3)


- - - 
 
Update:
![CleanShot 2025-02-10 at 11 09
24@2x](https://github.com/user-attachments/assets/66f3e57d-0ef2-497c-94e2-60df5004f83c)

![CleanShot 2025-02-10 at 11 09
10@2x](https://github.com/user-attachments/assets/b4aa24ba-11bf-4392-8c20-98fe4ae6f647)


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] ~Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)~
- [ ]
~[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials~
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] ~If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)~
- [ ] ~This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.~
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Low risk—just small UI flexbox changes.

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-10 15:50:18 -05:00
Bailey Cash
36e6d3d5ea
Removing unused scss files in obs solution (#210095)
Both files are un-used !!

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-10 15:25:58 -05:00
christineweng
d2c5132f74
[Security Solutions] Update cell actions copy (#209436)
## Summary

This is a part 2 following https://github.com/elastic/kibana/pull/206340
to standardize actions in the alerts kpi visualizations.

This PR updates the following copies:
- Changed `Filter In` to `Filter for`: to stay consistent with Lens and
Discover
<img width="1070" alt="image"
src="https://github.com/user-attachments/assets/3341279f-7e8f-4470-9476-86809840ff55"
/>

- Updated letter cases by following copy guidelines
  - `Filter Out` -> `Filter out` 
  - `Copy to Clipboard` -> `Copy to clipboard`
  - `Investigate in timeline` -> `Investigate in Timeline`
  - `Add to timeline` -> `Add to Timeline`


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-10 13:41:07 -06:00