mirror of
https://github.com/elastic/kibana.git
synced 2025-04-18 23:21:39 -04:00
bb38af57f7
## Summary Introduces a new fleet config variable to be able to set the default the fleet setting for `prerelease_integrations_enabled`. This is to be used in the new search_ai_lake tier for the ai4dsoc project as we want to enable pre-release versions by default. ## How to test 1. Set `xpack.fleet.prereleaseEnabledByDefault: true` in your `kibana.dev.yml` 2. Start up elasticsearch and kibana 3. Navigate to the integrations page and the toggle to enable should be on <img width="750" alt="Screenshot 2025-04-16 at 3 25 50 PM" src="https://github.com/user-attachments/assets/17d14630-94f5-4f2a-ab32-d733d0b36d48" /> OR 1. Add the following to `serverless.security.dev.yml`: ``` xpack.securitySolutionServerless.productTypes: [ { product_line: 'ai_soc', product_tier: 'search_ai_lake' }, ] ``` 2. Restart Kibana serverless for security 3. Navigate to the Configurations -> Integrations page 4. Click on the 'Splunk' integration and verify it loads the page <img width="750" alt="Screenshot 2025-04-16 at 5 15 28 PM" src="https://github.com/user-attachments/assets/ba4bf986-1b47-4703-9f33-9a0a7a437539" /> ___ Relates: https://github.com/elastic/security-team/issues/11789
19 lines
651 B
YAML
19 lines
651 B
YAML
# Security Search AI Lake tier config
|
|
|
|
## Disable plugins
|
|
xpack.osquery.enabled: false
|
|
xpack.ml.ad.enabled: false
|
|
xpack.ml.dfa.enabled: false
|
|
|
|
xpack.features.overrides:
|
|
### The following features are Security features hidden in Role management UI for this specific tier.
|
|
securitySolutionTimeline.hidden: true
|
|
securitySolutionNotes.hidden: true
|
|
siem.description: null
|
|
siemV2.description: null
|
|
securitySolutionSiemMigrations.hidden: true
|
|
|
|
# Custom integrations/fleet settings
|
|
xpack.fleet.agentless.isDefault: true
|
|
xpack.fleet.integrationsHomeOverride: '/app/security/configurations/integrations'
|
|
xpack.fleet.prereleaseEnabledByDefault: true
|