Commit graph

85681 commits

Author SHA1 Message Date
Alex Szabo
5c68342cea
Skip flaky suite: https://github.com/elastic/kibana/issues/217668 (#217676)
## Summary
Skips recently failing test suite:
https://github.com/elastic/kibana/issues/217668
2025-04-09 17:22:47 +02:00
Melissa Alvarez
d99e258925
Update preconfigured connector name (#217570)
## Summary

Update Preconfigured connector name to `Elastic Managed LLM`.


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...
2025-04-09 09:15:11 -06:00
Christiane (Tina) Heiligers
50ddab4418
[Unzyme] src/core/packages/apps (#217599)
## Summary

Fix https://github.com/elastic/kibana/issues/217589
Related to #217387

Migrates `metric_tiles` and `status_table` unit tests from `enzyme`
snapshot tests to explicit assertions using `RTL`. Explicit assertions
have the advantage of being more readable, targeted, reducing noise due
to unrelated changes (e.g. EUI updates) and to make debugging easier.

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-04-09 07:57:29 -07:00
Saikat Sarkar
8b6e73b462
[Playground chat] Change the text for Elastic LLM (#217591)
## Summary

This PR changes the name from **Elastic LLM** to **Elastic Managed LLM**
in the playground.

<img width="860" alt="Screenshot 2025-04-08 at 2 58 21 PM"
src="https://github.com/user-attachments/assets/2c92cab8-8e63-42e4-91db-b4fd05af4a0a"
/>



### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...
2025-04-09 08:51:32 -06:00
Tre
3917dbccd6
[SKIP ON MKI] .../build_dashboard.ts (#217507)
see details: https://github.com/elastic/kibana/issues/207097
2025-04-09 09:42:34 -05:00
Jedr Blaszyk
7951e7bca5
feat: workchat home screen (#217650)
## Summary

Workchat home screen. 

Used avatars as agent icons, works pretty nice imo

conversation history limited to 10 in the right column. 


<img width="1709" alt="Screenshot 2025-04-09 at 13 24 59"
src="https://github.com/user-attachments/assets/8f1fce7d-bace-4cd1-97de-0b0bc9c1b526"
/>

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [x ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-09 16:39:40 +02:00
Drew Tate
7e35e92b4b
[ES|QL] validation and autocomplete for FORK (#216743)
## Summary

Part of https://github.com/elastic/kibana/issues/210339

Adds
- AST support
- Validation (mostly delegates validation to the subcommands)
- Autocomplete


https://github.com/user-attachments/assets/9fed4401-adf9-48b7-a43f-096e07054966

Also, reworked the `WHERE` replacement range logic, cleaning things up
and fixing small things to make it work within `FORK`.

### Formatting support

https://github.com/user-attachments/assets/3cf5960f-0daf-4339-ad8b-58b30ce86975

### Constraints

- Only one `FORK` command per query

<img width="847" alt="Screenshot 2025-04-04 at 10 43 23 AM"
src="https://github.com/user-attachments/assets/a3b3b5dc-4c86-498b-934c-68d3461f4a89"
/>

- At least two branches per FORK command

<img width="737" alt="Screenshot 2025-04-04 at 10 51 35 AM"
src="https://github.com/user-attachments/assets/6bf921aa-7167-4791-a29a-66624d2cb75a"
/>

- Only supports `WHERE`, `SORT`, and `LIMIT` (currently)

<img width="816" alt="Screenshot 2025-04-04 at 10 52 39 AM"
src="https://github.com/user-attachments/assets/0fa286c9-9676-471c-93a4-b01ae42d0c6f"
/>

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Stratoula Kalafateli <efstratia.kalafateli@elastic.co>
2025-04-09 16:39:09 +02:00
Maryam Saeidi
1b10f35b3d
[Log threshold] Use dataViewLazy during rule execution (#215306)
## Summary

In this PR, we use dataViewLazy, which avoids calling _field_caps API
(this logic was introduced in this
[PR](https://github.com/elastic/kibana/pull/183694)).

#### Questions
1. Do we need to call _field_caps API in the log threshold rule
executor? If yes, in which scenario?
    No, we don't need to call _field_caps API in rule execution.
2. How to fix the type issues since DataViewLazy misses some fields that
exist in the DataView type.
We decided to use DataViewLazy everywhere on the server side but convert
it to an actual DataView on the client side due to the need for the
fields.


||Screenshot|
|---|---|

|Create|![image](https://github.com/user-attachments/assets/2c3e3e87-a3f6-4cf3-bc9a-620b501558d0)|

|createDataViewLazy|![image](https://github.com/user-attachments/assets/ea63ca5a-b68c-4e41-acd3-a18be823eefa)|

### 🧪 How to test
- Enable APM locally
```
elastic.apm.active: true
elastic.apm.transactionSampleRate: 1.0
elastic.apm.environment: username
```
- Create a log threshold rule and check its execution in
[traces](https://kibana-cloud-apm.elastic.dev/app/apm/traces?rangeFrom=now-15m&rangeTo=now)
filtered for your `username` as the environment. There should be one
with your rule name:

![image](https://github.com/user-attachments/assets/bb3b6eae-474b-4d2e-a428-15f71e671250)
    
The timing for `_field_caps` would be more if you replace the
`createDataViewLazy` with the `create` function.

---------

Co-authored-by: Faisal Kanout <faisal.kanout@elastic.co>
2025-04-09 16:30:45 +02:00
Tim Sullivan
77523f7b15
NavigationItemOpenPanel: remove handling of landing page ("four squares" design) (#210893)
## Summary

Part of Epic: https://github.com/elastic/kibana-team/issues/1439
Requires: https://github.com/elastic/kibana/issues/212903

Changes:
1. Moves the Solution Side Nav away from the "four squares" design
pattern: where clicking the item label opens a landing page and the item
icon opens the secondary nav panel. This was a custom component
implemented in the Kibana package, not part of the EUI
`EuiCollapsibleNavBeta` component.
2. Changes some usage of `@emotion/css` to `@emotion/react` for better
developer experience

### Screenshots

<details><summary>Before</summary>


![01-security-solution-before](https://github.com/user-attachments/assets/259442a2-6cd5-45f2-be27-1b4e9ef26b04)

</details>

<details><summary>After</summary>


![02-security-solution-after](https://github.com/user-attachments/assets/a8ef8476-e36d-479f-9eba-2450b1df71ac)

</details>

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] This design pattern was only used in Security Solution. There is a
small risk of regression issues in Security Solution navigation. This
was mitigated by manual testing during development.
2025-04-09 07:25:30 -07:00
Sergi Romeu
a49dc03330
[A11y][APM] Improve aria-label for EuiCodeBlock on onboarding page (#217292)
## Summary

Fixes #195030

This PR adds `aria-label` with language context for `EuiCodeBlock` in
the APM onboarding page.
2025-04-09 15:55:12 +02:00
Elena Stoeva
b5a30054c7
[Console] Disable autocomplete suggestions inside scripts (#216986)
Fixes https://github.com/elastic/kibana/issues/212904

## Summary

This PR disables autocomplete suggestions if the curser is inside
scripts (triple-quote strings).


**How to test:**

Verify that there are no autocomplete suggestions when you place the
cursor inside the script in the request below:

```
POST _ingest/pipeline/_simulate
{
  "pipeline": {
    "processors": [
      {
        "script": {
          "source":
          """
            for (field in params['fields']){
                if (!$(field, '').isEmpty()){
                    def value = $(field, '');
                    def hash = value.sha256();

                    // Now we need to traverse as deep as needed
                    // and write to that field
                    // because we do not have a simple
                    // set operation available
                    
    parts = field.splitOnToken('.');
                    

                }
            }
          """,
          "params": {
            "fields": [
              "user.name",
              "geo.city",
              "does.not.exist",
              "this.is.quite.a.deep.field"
            ]
          }
        }
      }
    ]
  }
}
```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-09 14:31:09 +01:00
Alejandro Fernández Haro
f833e09121
[Config stack compilation] Read inline security tier (#217658)
## Summary

I noticed that FTRs providing product tier's configuration didn't load
the configuration coming from the
`serverless.security.{productTier}.yml` files, which is a code smell
since we're not testing the real end product.

This PR makes sure to read the CLI options when deciding if a Security
product tier is selected.

Noticed while working on https://github.com/elastic/kibana/issues/215919

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-04-09 15:21:53 +02:00
Cristina Amico
a6308f3b66
[Fleet] Remove kibana_api_key from secrets and use encrypted field instead (#217472)
Part I of https://github.com/elastic/kibana/issues/217025

## Summary
`kibana_api_key` and `kibana_url` fields are part of remote ES outputs
and where added in https://github.com/elastic/kibana/pull/208516.

Because of a change in the architecture of remote synced integrations
the secret field is not needed anymore: kibana can't read secrets
directly and fleet server (that can read them) won't be used.

- Remove the `secrets.kibana_api_key` field from remote outputs and
keeps only the `kibana_api_key`, registering it as an encrypted object.
- Remove these fields from full agent policy as they don't need to be
sent to fleet server/agents
- Replace the text field in the output flyout with a password field

<img width="793" alt="Screenshot 2025-04-08 at 15 18 26"
src="https://github.com/user-attachments/assets/4086b769-0a65-49d8-b93d-c51b38509497"
/>

 The `secrets.kibana_api_key` secret field was added in
9.1.0 and the whole feature is under a feature flag so it should be safe
to remove it.


### Checklist

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-04-09 14:54:39 +02:00
Gerard Soldevila
47eab38887
Improve modal_service Unit Test (#216786)
## Summary

Address https://github.com/elastic/kibana/issues/216785
2025-04-09 14:53:08 +02:00
Giorgos Bamparopoulos
411aa9928a
Update chart label when there are no docs (#217569)
Update chart label when there are no docs

Closes https://github.com/elastic/streams-program/issues/250

### Before
<img width="967" alt="image"
src="https://github.com/user-attachments/assets/2e26b631-4a8a-46a2-80d1-c29f77fec969"
/>


### After
<img width="943" alt="image"
src="https://github.com/user-attachments/assets/5e2cd7a2-4624-4c3a-9968-4121198fd3df"
/>
2025-04-09 13:46:29 +01:00
Stratoula Kalafateli
751e44d5da
[ES|QL] Creates control by typing a questionmark (#216839)
## Summary

Closes https://github.com/elastic/kibana/issues/213877

Gives the users the ability to create a control by typing a ?


![meow](https://github.com/user-attachments/assets/1df4e138-9d7b-4850-886b-922c375a498c)


![meow](https://github.com/user-attachments/assets/7691b619-407f-407d-94ff-6c057f2723ea)

### Checklist

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-04-09 14:39:19 +02:00
Alejandro Fernández Haro
0e882dda8a
[ES 9.0] Remove body workaround (@elastic/kibana-management) (#217220)
## Summary

Follow up to https://github.com/elastic/kibana/pull/213375: The latest
version of the ES client fixed the issue
https://github.com/elastic/elasticsearch-js/issues/2584.

We should be able to remove all usages of `// @ts-expect-error
elasticsearch@9.0.0
https://github.com/elastic/elasticsearch-js/issues/2584`.
2025-04-09 13:47:40 +02:00
Felix Stürmer
a76e2acaea
[Synthtrace] Fix id generator tests (#216696)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-04-09 13:33:53 +02:00
Milton Hultgren
53263fd9fc
[kbn/server-route-repository] Make security required (#216196)
To mirror the changes in https://github.com/elastic/kibana/pull/215180
2025-04-09 12:51:54 +02:00
Elena Shostak
4f79e2480a
[CodeQL] Set CODEQL_EXTRACTOR_JAVASCRIPT_OPTION_SKIP_TYPES for all branches (#217647)
## Summary

Set `CODEQL_EXTRACTOR_JAVASCRIPT_OPTION_SKIP_TYPES` for all branches by
default.
2025-04-09 10:48:59 +00:00
Jean-Louis Leysens
ab1700ed52
[OAS] More guidance about publishing docs (#217524)
## Summary

<img width="779" alt="Screenshot 2025-04-08 at 15 58 19"
src="https://github.com/user-attachments/assets/b4f8329d-8dbe-4016-99cb-ae23c46ed29b"
/>
2025-04-09 12:39:25 +02:00
Dario Gieselaar
bdfc5a53f8
[Profiler] Grep for processes (#216770)
Grep for running Node.js processes if specified.
2025-04-09 12:15:53 +02:00
Ola
df60cc9392
[UI] Search bar does not auto-expand for long queries (#217556)
## Summary
Updates search bar styles to wrap long text inputs while preserving
formatting.

Closes: #211071
2025-04-09 12:10:31 +02:00
Janki Salvi
adbc6d9a38
[ResponseOps][Alerts] Remove fieldsForAad attribute from rule type registry (#215767)
## Summary

Implements https://github.com/elastic/kibana/issues/215338

This PR removes `fieldsForAAD ` and `hasFieldsForAAD ` from the rule
type registry and all corresponding rule types.
It uses existing `getBrowserFieldsByFeatureId ` route to fetch fields
from
[field_caps](https://www.elastic.co/guide/en/elasticsearch/reference/8.17/search-field-caps.html)
API.

It also updates `getBrowserFieldsByFeatureId` route 
- to use `include_empty_fields: false` query param to fetch only non
empty fields to have limited number of fields
- to use `index filter` to fetch fields only from last 90 days for
better performance
    ```
       const indexFilter = {
              range: {
                '@timestamp': {
                  gte: 'now-90d',
                },
              },
            };
    ```   


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### Flaky Test runner: 
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8151

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-09 12:05:05 +02:00
Joe Reuter
102ceb65e3
🌊 Streams: Fix indices link (#217229)
The link to all indices of a data stream from the streams UI didn't work
properly because `includeHiddenIndices` wasn't set properly.

To fix it and prevent it breaking in another place, I moved the logic to
the locator itself
2025-04-09 11:56:36 +02:00
Arturo Lidueña
4109420186
update knowledge base installation flow (#214133)
## Summary
Closes [#209791](https://github.com/elastic/kibana/issues/209791)
Closes [#204378](https://github.com/elastic/kibana/issues/204378)
### Improve Knowledge Base Installation and Inference Endpoint
Management

#### Enhancements  
- The **"Install Knowledge Base"** button is only shown when there is no
inference endpoint. If the inference endpoint creation fails, an error
notification is displayed.
- When an inference endpoint **exists and is ready**, no buttons or
messages are shown.
- If the installation was in progress and **succeeded**, a success
message is displayed.
- If an inference endpoint is present, users can **inspect the state of
the model deployment** to diagnose issues.
- When an inference endpoint exists but has an **error**, users can
retry the installation.

#### Inspection & Troubleshooting  
Users can inspect the inference endpoint's deployment status, including:
- **Model is deploying**  
- **No ML node available**  
- **Insufficient memory available**  


https://github.com/user-attachments/assets/03a91120-173c-4dc9-b6f2-59a8c8c8defb

### Suggested Improvements  
- Display **autoscaling information** for better resource insights.  
- Show **ML node details** to help users understand the infrastructure.
- Allow users to **install, deploy, and stop the model** directly from
the inspection popup.

These changes enhance visibility, troubleshooting, and control over
inference endpoint deployment. 🚀


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...
2025-04-09 11:38:41 +02:00
Tomasz Ciecierski
795094d8c6
[AI4DSOC] Change rules and alerts capabilities (#215148) 2025-04-09 11:29:09 +02:00
Stratoula Kalafateli
10741d9d40
[ES|QL] Failure stores client side validation (#217317)
## Summary

Part of https://github.com/elastic/kibana/issues/205663

Fixes the validation of falure stores

<img width="266" alt="image"
src="https://github.com/user-attachments/assets/b8dd5b30-3828-435a-ab2f-ddd1a4e5bca7"
/>


### Checklist
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: vadimkibana <vadimkibana@gmail.com>
Co-authored-by: Vadim Kibana <82822460+vadimkibana@users.noreply.github.com>
2025-04-09 10:59:04 +02:00
Stratoula Kalafateli
6e94b2e375
[ES|QL] Moves the monaco language esql code to ES|QL team (#217606)
## Summary

Moves the monaco language esql code to ES|QL team

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-09 10:58:25 +02:00
Robert Oskamp
e710e98fe0
[workchat] Initial FTR test setup (#216828)
## Summary

This PR adds the structure for workchat FTR tests and adds a few initial
tests as an example.

### Details about initially added tests

New test directories:
- `x-pack/test_serverless/api_integration/test_suites/chat`
  - load a few common tests (that run on all project types)
- run `platform` security tests (taken over from `search` project type)
- `x-pack/test_serverless/functional/services/svl_chat_navigation.ts`
  - load the `home page` common test
- run a simple navigation test, using the `svlChatNavigation` service
that has been introduced as an example

Note that these tests mostly serve as examples to prove things are
actually running and will have to be adjusted / removed / extended over
time. The purpose of this PR is NOT to add proper test coverage.

Closes #213469

---------

Co-authored-by: Aleh Zasypkin <aleh.zasypkin@gmail.com>
2025-04-09 10:31:12 +02:00
Marco Antonio Ghiani
4302da3b6d
[Streams 🌊] Move management page + update Streams template (#217487)
## 📓 Summary

Closes https://github.com/elastic/streams-program/issues/233

This work applies changes as follows:
- Move stream management section into a standalone page
- Update routing config to support nested breadcrumbs and keep shared
stream retrieval between detail <-> management
- Replace custom panels with EuiTemplate for stream pages. Remove
previous ad-hoc components
- Improve stream detail view validation (add redirect) for unknown
stream detail sections
2025-04-09 10:19:11 +02:00
Marco Liberati
99d6c85e02
[chore] Tweak io-ts config on shared bundle (#217202)
## Summary

Save ~250kb out of thin air by tweaking the webpack configuration for
the `io-ts` package.
2025-04-09 10:15:55 +02:00
Miriam
92a9f8531a
[ObsUx][A11y] Add unique accessible lables to metadata table (#217496)
Closes https://github.com/elastic/kibana/issues/194972

## Summary

Add unique accessible labels to metadata table

### How to test

Use a screen reader to navigate the table

On Host details, Metadata tab

1. Verify the first column in the table header announces Pin Fields
column

<img width="1262" alt="Screenshot 2025-04-08 at 12 38 28"
src="https://github.com/user-attachments/assets/bdac5799-97d4-4001-b5f0-f9230227b749"
/>

2. Verify the Pin column row announces which field pins

<img width="1262" alt="Screenshot 2025-04-08 at 12 38 45"
src="https://github.com/user-attachments/assets/a9a18fc4-4f46-49d7-880e-9b77eca476dd"
/>

<img width="1262" alt="Screenshot 2025-04-08 at 12 39 14"
src="https://github.com/user-attachments/assets/889ca03f-aa00-4360-87b5-6d767fe11cff"
/>

3. Verify the "+ x more" does announce more of which field

<img width="1262" alt="Screenshot 2025-04-08 at 12 39 35"
src="https://github.com/user-attachments/assets/dfba3fd9-7e71-4ef6-956e-3761094f4667"
/>
2025-04-09 08:41:30 +01:00
Alejandro Fernández Haro
adccf04df3
[Unzyme] src/core/packages/application (#217583) 2025-04-09 09:12:12 +02:00
Carlos Crespo
704a3d4a9e
[APM] Treat "links" field as array (#215906)
Fixes [#215706](https://github.com/elastic/kibana/issues/215706)

## Summary

This fixes the problem where Otel span links were not considered a
collection of links.


<img width="1721" alt="image"
src="https://github.com/user-attachments/assets/bce354d5-8473-41db-856e-3bbb66b88c18"
/>


### How to test

Run: `node scripts/synthtrace span_links.ts --live --uniqueIds --clean
--logLevel=debug --scenarioOpts pipeline=apmToOtel` and wait a few
minutes

Navigate to Services Inventory -> product consumer -> Transactions and
inspect the span links from `Span B`

Run the query below to confirm that there are `links` with a collection
of items
```
GET traces-*otel*/_search
{
  "query": {
    "exists": {
      "field": "links*"
    }
  }
}
```
2025-04-09 09:10:15 +02:00
Sergi Romeu
749f57c12f
[A11y][APM] Add missing aria-label for some services buttons (#217325)
## Summary

Fixes #212264

This PR adds a couple of `aria-label` attributes to buttons that do not
have a screen-reader announcement under the Services and Services Groups
pages.
2025-04-09 09:02:15 +02:00
Kibana Machine
c6c54f0364
[api-docs] 2025-04-09 Daily api_docs build (#217605)
Generated by
https://buildkite.com/elastic/kibana-api-docs-daily/builds/1037
2025-04-09 08:23:44 +02:00
Weronika Olejniczak
1204458d2a
Upgrade EUI to v101.3.0 (#217491)
`101.2.0`  `101.3.0`

[Questions? Please see our Kibana upgrade
FAQ.](https://github.com/elastic/eui/blob/main/wiki/eui-team-processes/upgrading-kibana.md#faq-for-kibana-teams)

## Package updates

### `@elastic/eui`

#### [`v101.3.0`](https://github.com/elastic/eui/releases/v101.3.0)

- Updated 78 existing and added two new glyphs (`code` and
`checkCircle`) for `EuiIcon`
([#8530](https://github.com/elastic/eui/pull/8530))
- Changed `gutterSize` to `m` between right side items on
`EuiPageHeader` ([#8529](https://github.com/elastic/eui/pull/8529))

**Bug fixes**

- Fixed a visual bug on disabled `EuiButton` in high contrast mode where
wrong text colors were applied
([#8550](https://github.com/elastic/eui/pull/8550))
2025-04-09 08:05:42 +02:00
elastic-renovate-prod[bot]
5e74e71153
Update docker.elastic.co/wolfi/chainguard-base-fips:latest Docker digest to 0135014 (main) (#217592)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base-fips | digest | `22d75e2` ->
`0135014` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwiY2k6YnVpbGQtZG9ja2VyLWZpcHMiLCJyZWxlYXNlX25vdGU6c2tpcCJdfQ==-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
2025-04-09 04:55:24 +02:00
Dzmitry Lemechko
a234f3646c
[ftr] split feature controls tests into v1/v2 configs (#217458)
## Summary

Splitting long running config:
`x-pack/test/functional/apps/saved_query_management/config.ts` **~57
min** into

  - x-pack/test/functional/apps/saved_query_management/config.ts 35m 
- x-pack/test/functional/apps/saved_query_management/config.v2.ts 25m
17s

ideally we need to split both even more, but I will leave it for the
later (probably Data-Discovery Team have some ideas how to re-org it?)
2025-04-08 19:01:06 -03:00
Davis McPhee
c3bcdab741
[Discover] Keep fetched results when switching tabs (#216741)
## Summary

This PR implements the initial work to keep fetched results when
switching tabs:
- Avoid cancelling the current document request when switching tabs
(this still needs more work, especially migrating the `use_esql_mode`
hook to the central data fetching).
- Move `DiscoverStateContainer` and `DiscoverCustomizationService` to
`RuntimeStateManager` so they can be reused by tabs without
reinitializing.
- Re-add the current tab ID to `InternalStateStore` for high-level tab
management only (called `unsafeCurrentId` now to discourage misuse).
- Move `initializeAndSync` and initial `fetchData` call to the
`initializeSession` thunk to avoid calling it when switching back to
existing tabs.
- Move URL tracking directly into `DiscoverSavedSearchContainer` since
it previously used a hook which could now become out of sync because
`initializeAndSync` was moved (URL could update before the hook was
called).
- Support fully disconnecting tabs with a new `disconnectTab` thunk
(called on tab close and for all remaining tabs when leaving Discover).
- Sync global services to current tab state when switching tabs (this
should probably be cleaned up more, but it should work as a start).
- Basic implementation of `getPreviewData` (needs to be cleaned up).
- A couple of small misc changes (e.g. fixing scrollbar when tabs are
enabled).

Part of #216475.

### Checklist

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-04-08 16:28:46 -03:00
Paul Tavares
990432ccc0
[Security Solution][Endpoint] Fix endpoint package policy update Fleet extension callback error (#217391)
## Summary

### Fleet Changes

- Added a debug statement to the execution of external callbacks that
outputs `callback.toString()` whenever an external callback throws an
error
- The output of `callback.toString()` should help identify the code
behind the callback that threw an error and assist with debugging

### Security Solution

- Fixes the Endpoint package policy update callback that is registered
with Fleet to now throw an error while attempting to report policy
protection feature usage. (see error below)
- Fleet recently made a change to `PackagePolicy.bulkUpdate()` service
method that ensure registered callbacks for policy update is called,
which seems to be the reason why this started to happen recently. Its
unclear why this error is occurring being that Space Awareness features
are currently disabled by default.
2025-04-08 14:37:54 -04:00
Melissa Alvarez
f51ac13197
[ML] Moves job and trained model management features into Stack Management (#204290)
## Summary

Updates the navigation for Machine Learning pages, moving admin tasks
for managing ML jobs and models to a single place inside Stack
Management, and leaving exploratory tasks in a consolidated top-level
Machine Learning menu.

The available items vary by solution, so that the navigation for an
Elasticsearch project, for example, contains a single item for managing
trained models.

#### Stack management menu for classic/observability/security nav
<img width="275" alt="Screenshot 2025-04-04 at 16 10 04"
src="https://github.com/user-attachments/assets/14b6e8d4-7111-4fbd-ae5d-9f389f83f23c"
/>

#### Stack management for search:
<img width="271" alt="Screenshot 2025-04-07 at 14 38 45"
src="https://github.com/user-attachments/assets/e104bf20-8a4d-4eed-9b5b-9c05944091ca"
/>


#### Machine Learning menu for Classic nav
<img width="341" alt="Screenshot 2025-04-07 at 14 22 03"
src="https://github.com/user-attachments/assets/610efd59-311f-410f-9881-548359ca7997"
/>


#### Machine Learning menu for Observability
<img width="522" alt="Screenshot 2025-04-04 at 16 11 48"
src="https://github.com/user-attachments/assets/ef16acf1-4d39-4494-a5d3-0fb078d74730"
/>


#### Machine Learning menu for Security
<img width="528" alt="Screenshot 2025-04-04 at 17 46 43"
src="https://github.com/user-attachments/assets/2df20c20-b894-4421-a732-9370bb5d6f2d"
/>


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...

---------

Co-authored-by: Quynh Nguyen <quynh.nguyen@elastic.co>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Timothy Sullivan <tsullivan@elastic.co>
2025-04-08 19:52:16 +02:00
Mason Herron
b0c0917fa7
[Fleet] Add 'No Tags' filter to agent table (#216944)
## Summary

Closes #213933 

Adds a `No Tags` filter to the filter select on the agents table so that
users can filter for agents without tags.


https://github.com/user-attachments/assets/1223d049-1f21-4565-854c-75776ae4609b



### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

N/A
2025-04-08 19:47:27 +02:00
Alexey Antonov
fb961ec880
fix: [Platform:Dashboards:DashboardEditMode] Add Maps, Lens, Custom visualizations,markdown,TSVB are announced incorrectly (#217312)
Closes: #215457

**Description**
When user clicks on Add lens, maps or custom visualizations, Kibana
announces them as "Group" which doesn't give the user the context that
they are on create lens page or maps page or custom visualization

**Changes made:**

1. Added `role="menu"` and `role="menuitem"` to provide users with more
context.
2. The `Group` component was slightly updated: `EuiListGroupItem` and
`EuiTooltip` were removed in favor of using the native EuiListGroup API.

**Screens:**


https://github.com/user-attachments/assets/8587787c-6444-4d39-b499-5f1a3daefbde
2025-04-08 20:00:31 +03:00
Dzmitry Lemechko
9c560e5444
[ftr] split discover group3 config (#217486)
## Summary

Split long running config
`src/platform/test/functional/apps/discover/group3/config.ts: 39.1
minutes` into

  - src/platform/test/functional/apps/discover/group3/config.ts 10m
  - src/platform/test/functional/apps/discover/group9/config.ts 14m 34s
  - src/platform/test/functional/apps/discover/group10/config.ts 18m 15s
2025-04-08 18:52:13 +02:00
elastic-renovate-prod[bot]
84f647ad54
Update docker.elastic.co/wolfi/chainguard-base:latest Docker digest to c56628d (main) (#217401)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base | digest | `29150cd` ->
`c56628d` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwicmVsZWFzZV9ub3RlOnNraXAiXX0=-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Jon <jon@elastic.co>
2025-04-08 11:35:01 -05:00
elastic-renovate-prod[bot]
194e54fcf4
Update docker.elastic.co/wolfi/chainguard-base-fips:latest Docker digest to 22d75e2 (main) (#216553)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base-fips | digest | `60d2da3` ->
`22d75e2` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJUZWFtOk9wZXJhdGlvbnMiLCJiYWNrcG9ydDpza2lwIiwiY2k6YnVpbGQtZG9ja2VyLWZpcHMiLCJyZWxlYXNlX25vdGU6c2tpcCJdfQ==-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Jon <jon@elastic.co>
2025-04-08 11:34:27 -05:00
Marco Vettorello
971edc124a
[Lens] Fix getIndexPatternsObjects for index-pattern only and minor cleanups (#215325)
## Summary

This PR fixes the https://github.com/elastic/kibana/issues/215323 issue
and also provide small cleanup on the code near the edited file, not
directly correlated but I was already there and the changes are pretty
minimal.

Cleanups:

- the `SavedObjectReference` is deprecated and needs to be imported from
`core/server` instead
- Looking at the locator I've noticed a couple of non-null assertion
that wasn't necessary
- the locator readme was referencing the old `kibana app services` team
- cleaned up the `x-pack/platform/plugins/shared/lens/public/utils.ts`
to align all the method to use the same form (or all functions or all
arrow function, there was a pretty interesting mix there)
- replaced usages of exclusive OR with a more appropriate nullish
coalescing operator
2025-04-08 18:31:56 +02:00
Dominique Clarke
9d56263413
[Chore] Remove Investigate plugin, Investigate app plugin, and Investigation-schema package (#216342)
## Summary

Removes unused code from the Investigate and Investigate app plugin.

Removes all references to those plugins in storybook, i18n, types, etc.

Removes codeowner requirements for those plugins

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-04-08 12:25:21 -04:00