Commit graph

85681 commits

Author SHA1 Message Date
elastic-renovate-prod[bot]
e0e14c8929
Update dependency tsd to ^0.32.0 2025-04-16 15:30:13 +00:00
Gonçalo Rica Pais da Silva
d58e274fc3
[Discover][APM] Add trace waterfall section to traces doc viewer (#217568)
## Summary

Enables the Trace section for the summary tab in the Traces Doc Viewer.
This PR focuses on just bringing the section with the widget, not for
adjusting the widget styles/look to be closer to the intended designs.
That is for follow-up work.

Closes #217067

![Screenshot Trace Waterfall 3 2025-04-08
183800](https://github.com/user-attachments/assets/ef57a3c5-38a8-4aa0-854a-be483a6ebde3)

## How to test

* Add the following to your `kibana.dev.yml`:
```yaml
discover.experimental.enabledProfiles:
  - observability-traces-data-source-profile
  - observability-traces-transaction-document-profile
  - observability-traces-span-document-profile
```
* Ensure you are on an Observability root profile space
* Go to Discover, use or create a Data View profiles targetting
`traces-*` (such as `remote_cluster:traces-*`).
* Click on a span/transaction to expand the doc viewer
* The trace waterfall section should be present on the summary tab.

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-16 17:03:49 +02:00
Drew Tate
eec1a9156a
[ES|QL] Fixes the wrong source validation in case of unknown patterns (#218352)
## Summary

Closes https://github.com/elastic/kibana/issues/191556
2025-04-16 09:00:53 -06:00
Konrad Szwarc
a2b70a0d45
[EDR Workflows][Insights][UI] Rename Endpoint Insights to Automatic Troubleshooting in Permissions (#216977)
Docs update request -
https://github.com/elastic/docs-content/issues/1015

This PR updates the Permissions flyout to rename Endpoint Insights to
Automatic Troubleshooting. The change ensures the title and description
align with the current feature name.

![Screenshot 2025-04-03 at 11 12
12](https://github.com/user-attachments/assets/a9f5b63b-a10f-49eb-b2ab-d550ef2f7ddf)
2025-04-16 16:58:32 +02:00
Lisa Cawley
b969cc9e3d
Update API URLs in doc link service (#215084)
Co-authored-by: Ignacio Rivas <rivasign@gmail.com>
Co-authored-by: Jean-Louis Leysens <jloleysens@gmail.com>
2025-04-16 07:18:47 -07:00
Kevin Qualters
c277812ffe
[Security Solution] Fix redux action being fired because of unused react-router value (#217055)
## Summary

This pr fixes a bug with the RouteCapture component, used at a high
level in the security solution component tree, to reflect url changes
into redux. The code previously used the full result of
'react-router-dom' 's useLocation hook as the payload, which contains 4
parameters, pathname, search, hash that we make use of, and a 4th that
was added sometime later by the library that is essentially a random id
generated every time the hook is called, called key. We have never used
this, and it was being inadvertently copied into the redux state, and
also causing some other actions or hooks based listeners to run I think
as well.

Below is the contrived example of going from the home page to an empty
alerts page, and you can see 4 actions in the after, and 5 in the
before, with 1 updating only the key. May reduce more unneeded actions
with more going on in the page, but exactly how many is not known.
Before:

![image](https://github.com/user-attachments/assets/93cc2c5a-56e4-4764-8791-c41879fd5b45)


After:

![image](https://github.com/user-attachments/assets/ebd75055-4e17-497b-bed2-a5fd58c5c92f)


### Checklist

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-04-16 10:13:44 -04:00
Agustina Nahir Ruidiaz
f00f83715c
[Security Solution][Onboarding] Adding telemetry to video selectors (#217280)
## Summary

New event created for the video selectors inside rules, dashboards and
alerts cards.

```
export interface OnboardingHubSelectorCardClickedParams {
  originStepId: string;
  selectorId: string;
}
```

To verify:

Add these lines to kibana.dev.yml

```
logging.browser.root.level: debug
telemetry.optIn: true
```

1. In the onboarding hub, expand the rules card
2. It should log `Report event "Onboarding Hub Step Selector Clicked"`.


https://github.com/user-attachments/assets/c1b1084e-4917-4412-93ed-984a74b6b6b4


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-16 15:42:30 +02:00
Alexey Antonov
bf7389f515
fix: [Analytics:Visualize Library page]Dialog modal missing title from announcement (#217829)
Closes: #215112

**Description**
Dialog modal, flyout, field visible title should be announced for the
users, especially using assistive technology to know what dialog modal,
flyout opened, what field is active and what is needed to enter in it.

**Changes made:**

1. Added `aria-labelledby={flyoutTitleId}` for mentioned places
2025-04-16 16:19:03 +03:00
Elena Stoeva
dec6a17ec0
[Data Streams] Fix displayed index mode (#215683)
Fixes https://github.com/elastic/kibana/issues/208671

## Summary

Before this PR, the displayed index mode of the data streams was
determined based on the index mode of the associated index template.
However, the index mode can also be set through the component template,
so that logic is not reliable and can cause incorrectly displayed index
mode like described in https://github.com/elastic/kibana/issues/208671.

In this PR, we replace this logic with the recently added `index_mode`
field to the Es Get Data Streams API (see
https://github.com/elastic/elasticsearch/pull/122486).

**How to test:**
1. Create a component template with a LogsDB index mode (you can also
test with other index modes):
```
PUT _component_template/my-component-template
{
  "template": {
    "settings": {
      "index": {
        "mode": "logsdb"
      }
    }
  }
}
```
2. Create an index template that is composed of the component template
above:
```
PUT _index_template/my-index-template
{
  "index_patterns": [
    "my-ds-*"
  ],
  "data_stream": {},
  "composed_of": [
    "my-component-template"
  ]
}
```
3. Create a data stream that matched the index pattern from the index
template above:
```
PUT _data_stream/my-ds-1
```
4. Go to the data streams table and verify that the index mode is
displayed correctly in the table.

<img width="1165" alt="Screenshot 2025-03-24 at 18 12 04"
src="https://github.com/user-attachments/assets/ea211c14-3d03-49c7-ace7-88b15e294d1f"
/>


5. Click on the created data stream and verify that the displayed index
mode in the details panel is correct:

<img width="1165" alt="Screenshot 2025-03-06 at 14 36 12"
src="https://github.com/user-attachments/assets/954864e2-ae2a-4cb8-9eef-2c5f8b417f52"
/>

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-04-16 15:09:33 +02:00
Sergi Massaneda
937dbba41e
[Security Solution] Allow disabling experimental features via config (#217363)
## Summary

This PR adds support for disabling experimental features using the
existing `xpack.securitySolution.enableExperimental` configuration.

This solves the problem of not being able to disable a feature by config
once the feature has been enabled by default.

### The Challenge 

When we start developing a feature under an experimental flag we always
follow the same steps:

1 - Create the experimental flag disabled by default + enable it via
config for testing
2 - Implement the feature
3 - Enable the experimental flag by default when we want to release the
feature.
4 - Deployments can disable the feature via config (as a safety
measure).
5 - Remove the experimental flag after some time.

We start by creating the flag disabled by default while we implement it.
In `experimental_features.ts`:
```ts
export const allowedExperimentalValues = Object.freeze({
  myFeatureEnabled: false,
  [...]
```
And enable it via config with:
```yml
xpack.securitySolution.enableExperimental:
  - myFeatureEnabled
```

Once the implementation is done and the experimental flag can be enabled
by default, we have to do a trick:
Since the `xpack.securitySolution.enableExperimental` config can only
turn flags to _true_, instead of setting `myFeatureEnabled: true`, what
we have to do is rename the flag to `myFeatureDisabled` and keep the
value as _false_:

```ts
export const allowedExperimentalValues = Object.freeze({
  myFeatureDisabled: false,
  [...]
```
Then we also need to do a code refactor to update all the places in the
code where the flag was checked: `if (myFeatureEnabled)` -> `if
(!myFeatureDisabled)`

This way, we have the option of disabling the feature via config (in
case something goes wrong):
```yml
xpack.securitySolution.enableExperimental:
  - myFeatureDisabled
```

### A solution

This PR introduces the possibility to turn a flag to _false_ using the
same `xpack.securitySolution.enableExperimental` config. This was
preferable to introducing a new config since this one is already
whitelisted in Cloud UI, can be easily overritten in deployments, and
also because people are used to it.

With these changes, the first two steps would be the same, with the
difference that we won't need to have the _Enabled_ or _Disabled_ word
at the end of the flag name. It could be just the feature name, in
`experimental_features.ts`:
```ts
export const allowedExperimentalValues = Object.freeze({
  myFeature: false,
  [...]
```

And when we need to enable the feature by default, we can just turn it
to `true`:
```ts
export const allowedExperimentalValues = Object.freeze({
  myFeature: true,
  [...]
```
No tedious refactor or confusing naming would be required. 

Then, in case we need to disable the feature in a production deployment
for some reason, we could just do this via config :
```yml
xpack.securitySolution.enableExperimental:
  - disable:myFeature
```

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-04-16 14:09:28 +02:00
Alexey Antonov
b91da375a3
fix: [Analytics:Graph page]Dialog modal missing title from announcement (#217827)
Closes: #214760

**Description**
Dialog modal, flyout, field visible title should be announced for the
users, especially using assistive technology to know what dialog modal,
flyout opened, what field is active and what is needed to enter in it.

**Changes made:**

1. Set correct value for` aria-labelledby` attr.
2025-04-16 15:03:38 +03:00
Marco Vettorello
19feb59109
[Lens] Fix generation of on-click filters for generated ESQL Lens (#218223) 2025-04-16 12:32:11 +02:00
Kibana Machine
eaa19786d2 skip failing test suite (#218378) 2025-04-16 12:08:58 +02:00
Antonio
08d0717d46
[ResponseOps][MaintenanceWindow] Public maintenance window API (#216756)
Closes #198685

## Summary

This PR creates a public Maintenance Window API.

The work was done on a feature branch over multiple separate PRs. Here
we will merge the feature branch into `main`.
- https://github.com/elastic/kibana/pull/209734
- https://github.com/elastic/kibana/pull/213694
- https://github.com/elastic/kibana/pull/214747
- https://github.com/elastic/kibana/pull/213771

The [documentation PR](https://github.com/elastic/kibana/pull/212377)
still needs to be merged.

## Release Notes

Publish new public APIs for the Maintenance Window.

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: lcawl <lcawley@elastic.co>
2025-04-16 11:39:38 +02:00
Elena Shostak
334ca2ae50
[CodeQL] Moved notification on failure to a separate step (#218394)
## Summary

Moved notification on failure to a separate step.
2025-04-16 11:22:02 +02:00
Mykola Harmash
fc686f8a6d
[Oblt Onboarding] Remove Custom Logs flow (#216053)
Closes https://github.com/elastic/kibana/issues/208025

This change deleted the "Stream log files" onboarding flow which is now
replaced by the Auto Detect flow.

| Before | After |
| --- | --- |
| ![CleanShot 2025-03-27 at 14 55
55@2x](https://github.com/user-attachments/assets/46a90769-8b3d-495f-b600-9a8f24964761)
| ![CleanShot 2025-03-27 at 14 56
28@2x](https://github.com/user-attachments/assets/e800cab8-cfd2-48e8-8d1a-8a41c037d532)
|


Changes made:
* Deleted UI components responsible for rendering the Custom Logs flow
* Deleted the definition for a custom card in the onboarding search
results
* Deleted API endpoints and supporting files used only by the Custom
Logs flow
* `/internal/observability_onboarding/logs/setup/environment` endpoint
was still used by the OTel Host flow, so it was moved to a dedicated
OTel route and pathname changed to
`/internal/observability_onboarding/otel_host/setup`
* Functionality of the `/internal/observability_onboarding/otel/api_key`
endpoint was merged into the above mentioned OTel route, so UI has to
make a single API request to get all the necessary information from the
server
* Deleted Scout UI tests for the Custom Logs flow
* Deleted API integration tests for the deleted endpoints
* API tests that we previously testing
`/internal/observability_onboarding/logs/flow` were converted to test
`/internal/observability_onboarding/flow'` used by the Auto Detect flow

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-16 11:01:18 +02:00
Tomasz Ciecierski
ff8f7333c2
[EDR Workflows] Upgrade Osquery and ECS schemas (#217802) 2025-04-16 10:51:30 +02:00
Stratoula Kalafateli
abeb2d4a5d
[Lens] Hides the legend actions from ES|QL charts when in dashboard (#217133) 2025-04-16 10:43:55 +02:00
Konrad Szwarc
ce10318ef3
[EDR Workflows][Osquery][Cypress] Fallback for KibanaStatus error response when fetching kibana version (#218240)
This PR fixes an issue that can cause test execution to fail when `await
kbnClient.status.get()` doesn't return the Kibana version. The fallback
now uses the version from `package.json` in that case.

Example failure:
https://buildkite.com/elastic/kibana-on-merge/builds/66520#0196344e-f27e-4ab8-9bf7-f041b94c665d/268-3998

---------

Co-authored-by: Patryk Kopyciński <contact@patrykkopycinski.com>
Co-authored-by: Tiago Costa <tiago.costa@elastic.co>
2025-04-16 10:43:10 +02:00
Kenneth Kreindler
1d430d4d35
[Security solution] [Ai Assistant] ES|QL generation with self healing (#213726) 2025-04-16 09:12:49 +01:00
Francesco Fagnani
ec88cca373
[Synthetics] Added drilldown to synthetics stats overview embeddable (#217688)
This PR closes #208066 by adding drilldowns to the synthetics stats
overview embeddable.



https://github.com/user-attachments/assets/fe8d9eb0-ecdc-449d-93af-7d165c541d46
2025-04-16 09:52:16 +02:00
Kibana Machine
ba4f863bd4
[api-docs] 2025-04-16 Daily api_docs build (#218377)
Generated by
https://buildkite.com/elastic/kibana-api-docs-daily/builds/1044
2025-04-16 08:01:35 +02:00
Stratoula Kalafateli
6f5a3c900b
[ES|QL] Adds a change point recommendation (#216748)
## Summary

**Merge after Change point moves to Tech preview**

Adds a change point detection recommendation

<img width="833" alt="image"
src="https://github.com/user-attachments/assets/9834b034-99f8-447a-b822-bb85e42f220c"
/>

<img width="741" alt="image"
src="https://github.com/user-attachments/assets/dc97af55-1263-4fe9-9699-426184ffe71a"
/>
2025-04-16 07:49:38 +02:00
Stratoula Kalafateli
34049fe9b8
[ES|QL] Mutes the forward compatibility tests (#218199)
## Summary

Closes https://github.com/elastic/kibana/issues/216398

### Checklist

This test fails because it tests ES 9.0 with kibana 8.19 but this is not
compatible for field controls (ES changed the backend implementation in
8.19 and 9.1)
2025-04-16 07:49:27 +02:00
Tiago Costa
53972b906f
chore(NA): update versions after v9.0.1 bump (#218306)
This PR is a simple update of our versions file after the recent bumps.
2025-04-16 06:43:47 +01:00
Tiago Costa
09dc05ad64
chore(NA): update versions after v8.17.6 bump (#218299)
This PR is a simple update of our versions file after the recent bumps.
2025-04-16 05:27:01 +01:00
Kurt
d7fd324356
Feature/saml multi tab (#212148)
## Summary

Closes https://github.com/elastic/kibana/issues/199188

Allow multiple SAML authc calls to succeed.

## Testing 

Configure logging:
```yaml
logging.loggers:
  - name: plugins.security
    level: debug
```

### See the failure

Pull `main` and copy the code from the following files in this PR into
their respective files on that branch:

- `packages/kbn-mock-idp-plugin/public/login_page.tsx`
- `packages/kbn-mock-idp-plugin/server/plugin.ts`
- `packages/kbn-mock-idp-utils/src/index.ts`
- `packages/kbn-mock-idp-utils/src/utils.ts`

Start KB/ES in serverless from this modified main branch

Open 2 tabs to the local serverless login screen

As the same user, click login and change tabs and click login again

The you will get an error.

Shut down KB/ES

### See the success

Start KB/ES in serverless from this PR

Open 2 tabs to the local serverless login screen

As the same user, click login and change tabs and click login again

Both should succeed

## Release note
Refreshing multiple tabs where the user has logged out will
simultaneously login successfully

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-16 05:47:06 +02:00
elastic-renovate-prod[bot]
bb60ec69b5
Update docker.elastic.co/wolfi/chainguard-base-fips:latest Docker digest to b6d3d24 (main) (#218037)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base-fips | digest | `0135014` ->
`b6d3d24` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwiY2k6YnVpbGQtZG9ja2VyLWZpcHMiLCJyZWxlYXNlX25vdGU6c2tpcCJdfQ==-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
2025-04-15 19:51:41 -06:00
elastic-renovate-prod[bot]
c1026c66b8
Update docker.elastic.co/wolfi/chainguard-base:latest Docker digest to 1c7f5aa (main) (#218038)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base | digest | `c56628d` ->
`1c7f5aa` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwicmVsZWFzZV9ub3RlOnNraXAiXX0=-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
2025-04-15 19:46:47 -06:00
Tiago Costa
2de9febaca
skip flaky suite (#218208) 2025-04-16 02:41:35 +01:00
Saikat Sarkar
398123d22c
[Playground chat] UX cleanup for EIS on by default (#217410)
## Summary

This PR involves changes in the UX for playground setup page and
Palyground Chat. Following items have been addressed.

- [x] Convert LLM Connected button to a label that is not interactive
- [x] Rename that label to "Elastic LLM Connected" if EIS is connected,
otherwise "LLM Connected"
- [x] Split the main panel into two panel: one for connecting to an LLM,
one for adding data
- [x] Add unit tests

# Before 
![Screenshot 2025-04-09 at 4 48
35 PM](https://github.com/user-attachments/assets/a632bc94-eeea-4403-bbd3-f7bfcc0deae2)
![Screenshot 2025-04-09 at 4 49
37 PM](https://github.com/user-attachments/assets/fb667ff6-6efc-470b-bb55-5b63bf33f61a)



# After
![Screenshot 2025-04-14 at 5 43
20 PM](https://github.com/user-attachments/assets/d9da3bd9-b7b5-490d-9b7c-d4783e3a4d3b)

![Screenshot 2025-04-09 at 4 40
24 PM](https://github.com/user-attachments/assets/ab0a9fac-d8e0-4f64-a7d5-588c2990a015)


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Liam Thompson <32779855+leemthompo@users.noreply.github.com>
2025-04-15 19:04:00 -05:00
Alexey Antonov
9ee5741134
fix: [Analytics:Discover page]Elements missing title from announcement (#217821)
Closes: #214335

**Description**
Dialog modal, flyout, field visible title should be announced for the
users, especially using assistive technology to know what dialog modal,
flyout opened, what field is active and what is needed to enter in it.

**Changes made:**
1. Added `aria-labelledby={flyoutTitleId}` for mentioned places
2025-04-15 17:33:40 -06:00
Colleen McGinnis
907cd5904b
[docs] Fix image paths for docs-assembler (#218344)
Fixes image paths to work with docs-assembler.

Notes for the reviewer:
* I was not able to get images in reference, extend, or release-notes to
work using the `:::{image}` syntax because it seems to resolve
differently than the Markdown `![]()` syntax. We should address this in
docs-builder, but in order to get images working as soon as possible,
I've used Markdown syntax and left us a `TO DO` in a code comment to add
back the `screenshot` class where applicable.
* Can you please add the appropriate labels needed for backporting?
2025-04-15 16:59:57 -05:00
jennypavlova
7c9a3ee1f2
[APM][OTel] EDOT error summary fix (#217885)
## Summary

This PR fixes the issue with the error summary missing items using edot.
It includes e2e tests with synthtrace for both edot and otel services.

TODO 

- [x] Test with serverless (waiting for the PR to be deployed)
Tested on serverless works as expected: 

<img width="2560" alt="image"
src="https://github.com/user-attachments/assets/8dd7962e-7d66-482d-97fb-0b08882bd04f"
/>
2025-04-15 21:44:11 +02:00
Drew Tate
7ee7edb5e5
[ES|QL] fix editor menus on safari (#218167)
## Summary

Fix https://github.com/elastic/kibana/issues/215405

Tooltips still work:

<img width="524" alt="Screenshot 2025-04-14 at 1 03 17 PM"
src="https://github.com/user-attachments/assets/5a28d2e4-af75-455f-9df1-691493460cc7"
/>

---------

Co-authored-by: Stratoula Kalafateli <efstratia.kalafateli@elastic.co>
2025-04-15 21:26:27 +02:00
Shahzad
83f3d614cc
[Custom threshold rule] Allow group for ip type fields !! (#216062)
Allow group by for ip fields !!

---------

Co-authored-by: Faisal Kanout <faisal.kanout@elastic.co>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-15 20:15:02 +02:00
christineweng
a4a11bb46f
[Security Solution][Alert flyout] Edit highlighted fields in overview tab (#216740)
## Summary

This PR allows user to edit highlighted fields in alert flyout, under
`Investigations`. The modal shows default highlighted fields that are
defined by Elastic, and allow user to edit custom highlighted fields.

Currently this feature is behind feature flag
`editHighlightedFieldsEnabled` (not enabled by default).



https://github.com/user-attachments/assets/35b3d09e-5e21-42ea-80e9-e8c0753985c9



#### Disabled when:

<details>
<summary>User does not have security privilege</summary>


![image](https://github.com/user-attachments/assets/69ba7bc7-2d9b-4a2c-ae8e-e9c14f396a31)

</details>

<details>
<summary>Prebuilt rule w/o enterprise license (showing upsell)</summary>


![image](https://github.com/user-attachments/assets/a9c38e20-85b2-4082-af5e-a8707b2098cb)

</details>

#### Do not show the button when:
<details>
<summary>Not an alert </summary>


![image](https://github.com/user-attachments/assets/b5e9afde-f0d0-4a88-aaed-7481ba586850)

</details>

<details>
<summary>rule preview</summary>


![image](https://github.com/user-attachments/assets/283d7a83-50b2-48ab-af2d-11692501c205)

</details>

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-04-15 12:18:35 -05:00
Kibana Machine
1575f51019 skip failing test suite (#218297) 2025-04-15 18:28:56 +02:00
Ievgen Sorokopud
34df5e3328
[Attack Discovery][Scheduling] Fix the attack discovery alert type (#218025)
## Summary

This is a fix for the incorrectly generated attack discovery alert
schema type due to the limitation of the generation tool.
2025-04-15 18:18:33 +02:00
Drew Tate
9b4403b7dc
[ES|QL] remove worker (#218006)
## Summary

Fix https://github.com/elastic/kibana/issues/217923

Investigations in https://github.com/elastic/kibana/issues/217368 showed
that there was basically no performance impact to passing the AST across
a thread boundary. But we also didn't detect a pressing reason to remove
the worker.

Since then, however, we noticed another cost associated with the worker:
it's a hefty Javascript file, even in production builds. In addition, we
are doing parsing on the main thread _and_ the worker, so the
`kbn-esql-ast` package is actually being loaded and parsed twice by the
browser, once for the main thread and once for the worker.

This PR removes our worker. Our parsing associated with validation and
autocomplete will still be done asynchronously, but on the main thread.

I do not see any regression in perceived performance.

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: Stratoula Kalafateli <efstratia.kalafateli@elastic.co>
2025-04-15 10:18:07 -06:00
Kibana Machine
f660e0140e skip failing test suite (#218282) 2025-04-15 18:01:25 +02:00
Janki Salvi
0aeadb80ca
[ResponseOps][Connectors] throw error for empty correlationId or incidentId (#217639)
## Summary

Resolves https://github.com/elastic/kibana/issues/217004


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-04-15 16:10:16 +01:00
Tim Sullivan
b9c2b57c23
[Solution Side Nav] Remove PanelContentProvider & support optional title in nav node (#218156)
Epic: https://github.com/elastic/kibana-team/issues/1439
Needed for https://github.com/elastic/kibana/pull/218050 (adjustments to
types for `title` field in `ChromeProjectNavigationNode`)

## Summary

1. `PanelContentProvider` was used for security solution, but is no
longer used. This removes it to simplify the interfaces for panel .
2. Allow title of `navGroup` to be optional. This allows the correct
design for nav items in the footer, which are child-items of a nav group
with no title

## Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-04-15 08:04:01 -07:00
Francesco Fagnani
f693e7218e
[Synthetics] Sync global parameters is called in the endpoints to add, edit or delete global params (#216197)
This PR closes #215668.

The global parameters are synched in the endpoints where they are
created, edited or deleted.

---------

Co-authored-by: Shahzad <shahzad31comp@gmail.com>
2025-04-15 16:53:14 +02:00
Kibana Machine
7b629a9908 skip failing test suite (#207773) 2025-04-15 16:38:12 +02:00
Kibana Machine
d1826a4ebd skip failing test suite (#218255) 2025-04-15 16:19:17 +02:00
Elena Stoeva
d9477a74d4
Console/fix folding with script (#216817)
Fixes https://github.com/elastic/kibana/issues/212902

## Summary

This PR fixes the logic for finding folding ranges by ignoring
opening/closing markers inside triple-quote strings.

**How to test:**

Verify that the `script` field in the following request is folded
correctly:

```
POST _ingest/pipeline/_simulate
{
  "pipeline": {
    "processors": [
      {
        "script": {
          "source":
          """
            for (field in params['fields']){
                if (!$(field, '').isEmpty()){
                    def value = $(field, '');
                    def hash = value.sha256();

                    // Now we need to traverse as deep as needed
                    // and write to that field
                    // because we do not have a simple
                    // set operation available
                    
                "SCRIPT":  parts = field.splitOnToken('.');
                    

                }
            }
          """,
          "params": {
            "fields": [
              "user.name",
              "geo.city",
              "does.not.exist",
              "this.is.quite.a.deep.field"
            ]
          }
        }
      }
    ]
  }
}
```

Note: The logic is for finding the ranges is best-effort without
compromising performance. We currently iterate through each line in the
text and use regex, but there are some cases which are not covered by
this logic; for example, opening parenthesis, followed by a string in
the same line would not be foldable. In order to cover all cases
correctly, we would need to iterate through every single character, but
that would make the logic much more complex and might affect performance
if we have a lot of text in the editor, as these folding ranges are
computed on every change in the editor.
2025-04-15 14:45:23 +01:00
Joe Reuter
f402033eab
Synthtrace otel logs scenario (#217988)
OTel is expected to become more common over time. This PR adds a
synthtrace scenario to send sample otel logs to an otel data stream.

This helps testing whether Discover, Streams and so on function
correctly for this category of data.
2025-04-15 15:40:28 +02:00
Alexey Antonov
d47e77627a
fix: [Analytics:MachineLearning:AnomalyDetection:Jobs page] Edit model snapshot flyout missing title from announcement (#217831)
Closes: #216147

**Description**
Dialog modal, flyout, field visible title should be announced for the
users, especially using assistive technology to know what dialog modal,
flyout opened, what field is active and what is needed to enter in it.

**Changes made:**

1. Added` aria-labelledby={flyoutTitleId} `for mentioned places
2025-04-15 16:38:48 +03:00
Marco Antonio Ghiani
d36b269e60
[Streams 🌊] Schema editor bug fixes (#218225)
## 📓 Summary

These changes address various minor issues reported on the Schema
Editor.

Closes #217888 
Closes #217889
Closes #217891
Closes #217892
Closes #217893 

### [Streams 🌊] "System managed" appears in the list of field types in
the schema editor

<img width="659" alt="Screenshot 2025-04-15 at 10 50 37"
src="https://github.com/user-attachments/assets/5f9e832a-e7ea-4e19-9507-2bd3669c7043"
/>

### [Streams 🌊] Clicking the link in the schema editor to edit a field
mapping in the parent stream loads a new page


https://github.com/user-attachments/assets/de1a1b09-5eca-4143-a822-2de6814333b6

### [Streams 🌊] Saving changes in the schema editor for an inherited
field results in error


https://github.com/user-attachments/assets/603c8a89-6df3-474a-91bc-ee7bbee0f250

### [Streams 🌊] Disable submit button when there is invalid input for
mapping in the schema editor


https://github.com/user-attachments/assets/22dfb91a-fa37-4b68-a8c5-c5f3a89a98e5

### Advanced fields mapping simulation and client-side validation


https://github.com/user-attachments/assets/faf99f86-5074-4587-9cc6-65f39f3595e9

### [Streams 🌊] Increase width in the type filter popup in schema editor


https://github.com/user-attachments/assets/b6eab484-308b-42dd-887b-560fb91986da
2025-04-15 15:36:09 +02:00