Your window into the Elastic Stack
Find a file
Maryam Saeidi d915fd29c4
[8.16] [Custom threshold] Fix using data view runtime fields during rule execution for the custom threshold rule (#209133) (#209287)
# Backport

This will backport the following commits from `main` to `8.16`:
- [[Custom threshold] Fix using data view runtime fields during rule
execution for the custom threshold rule
(#209133)](https://github.com/elastic/kibana/pull/209133)

<!--- Backport version: 9.6.4 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Maryam
Saeidi","email":"maryam.saeidi@elastic.co"},"sourceCommit":{"committedDate":"2025-02-03T11:09:29Z","message":"[Custom
threshold] Fix using data view runtime fields during rule execution for
the custom threshold rule (#209133)\n\nFixes #200772\r\n\r\n## 🐉
Summary\r\n\r\n\r\nThis PR fixes supporting data view runtime fields
during rule execution\r\nfor the custom threshold rule.\r\n\r\n## 🧪 How
to test\r\n\r\n1. Create a runtime field as shown below:\r\n\r\n
|Runtime field| Preview|\r\n
|---|---|\r\n\r\n|![Image](e93efad5-bc3b-4306-b820-8b096dbba360)|\r\n\r\n2.
Make sure alerts are generated as expected both for regular
and\r\nno-data
alerts:\r\n\r\n![image](https://github.com/user-attachments/assets/a2174e40-11a4-4d75-8500-bfce126ba7cd)\r\n\r\n###
TODO\r\n- [x] Add an API integration test\r\n - [x] Test on
MKI","sha":"8fe5738b24048972f801dc96e243d5a3d5d72eb3","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","backport:prev-major","ci:project-deploy-observability","Team:obs-ux-management","v9.1.0"],"title":"[Custom
threshold] Fix using data view runtime fields during rule execution for
the custom threshold
rule","number":209133,"url":"https://github.com/elastic/kibana/pull/209133","mergeCommit":{"message":"[Custom
threshold] Fix using data view runtime fields during rule execution for
the custom threshold rule (#209133)\n\nFixes #200772\r\n\r\n## 🐉
Summary\r\n\r\n\r\nThis PR fixes supporting data view runtime fields
during rule execution\r\nfor the custom threshold rule.\r\n\r\n## 🧪 How
to test\r\n\r\n1. Create a runtime field as shown below:\r\n\r\n
|Runtime field| Preview|\r\n
|---|---|\r\n\r\n|![Image](e93efad5-bc3b-4306-b820-8b096dbba360)|\r\n\r\n2.
Make sure alerts are generated as expected both for regular
and\r\nno-data
alerts:\r\n\r\n![image](https://github.com/user-attachments/assets/a2174e40-11a4-4d75-8500-bfce126ba7cd)\r\n\r\n###
TODO\r\n- [x] Add an API integration test\r\n - [x] Test on
MKI","sha":"8fe5738b24048972f801dc96e243d5a3d5d72eb3"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/209133","number":209133,"mergeCommit":{"message":"[Custom
threshold] Fix using data view runtime fields during rule execution for
the custom threshold rule (#209133)\n\nFixes #200772\r\n\r\n## 🐉
Summary\r\n\r\n\r\nThis PR fixes supporting data view runtime fields
during rule execution\r\nfor the custom threshold rule.\r\n\r\n## 🧪 How
to test\r\n\r\n1. Create a runtime field as shown below:\r\n\r\n
|Runtime field| Preview|\r\n
|---|---|\r\n\r\n|![Image](e93efad5-bc3b-4306-b820-8b096dbba360)|\r\n\r\n2.
Make sure alerts are generated as expected both for regular
and\r\nno-data
alerts:\r\n\r\n![image](https://github.com/user-attachments/assets/a2174e40-11a4-4d75-8500-bfce126ba7cd)\r\n\r\n###
TODO\r\n- [x] Add an API integration test\r\n - [x] Test on
MKI","sha":"8fe5738b24048972f801dc96e243d5a3d5d72eb3"}},{"url":"https://github.com/elastic/kibana/pull/209253","number":209253,"branch":"8.18","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/209254","number":209254,"branch":"8.x","state":"OPEN"},{"url":"https://github.com/elastic/kibana/pull/209280","number":209280,"branch":"8.17","state":"OPEN"}]}]
BACKPORT-->
2025-02-04 17:16:27 +01:00
.buildkite [8.16] [ci] Click to deploy cloud (#205623) (#208045) 2025-01-24 17:12:58 +01:00
.devcontainer [8.16] Sync devcontainer with main (#202857) 2024-12-03 17:11:11 -08:00
.github [8.16] Update actions/checkout action to v4.2.2 (main) (#195305) (#205319) 2024-12-31 11:48:22 -05:00
api_docs [8.16] [AVC Banner] Updates the AVC Banner for 2025 (#205467) (#205819) 2025-01-22 20:19:07 +00:00
config [8.16] [docs] Update &#x60;kibana.yml&#x60; defaults (#206423) (#206500) 2025-01-13 21:44:05 +00:00
dev_docs [8.x] [dev docs] Add recently viewed docs (#195001) (#195779) 2024-10-10 14:51:14 +00:00
docs [8.16] [DOCS] Give finding apps and objects section an ID (#199352) (#208719) 2025-01-29 11:45:01 +00:00
examples [8.16] [dashboard] Do not reset panel to undefined or empty last saved state (#203158) (#203510) 2024-12-09 22:54:32 -06:00
kbn_pm Adds AGPL 3.0 license (#192025) 2024-09-06 19:02:41 -06:00
legacy_rfcs rename @elastic/* packages to @kbn/* (#138957) 2022-08-18 08:54:42 -07:00
licenses Adds AGPL 3.0 license (#192025) 2024-09-06 19:02:41 -06:00
oas_docs [8.16] Added examples for necessary Entity Analytics OpenAPI docs (#205439) (#208232) 2025-01-24 18:36:47 +00:00
packages [8.16] [EDR Workflows] Fix invalid event filter for cloud workloads (#208974) (#209330) 2025-02-04 13:32:27 +01:00
plugins
scripts [8.x] [KB] create @kbn/product-doc-artifact-builder package (#193847) (#196206) 2024-10-15 08:02:35 +02:00
src Update docker.elastic.co/wolfi/chainguard-base:latest Docker digest to 8df3ca6 (8.16) (#208942) 2025-01-30 13:02:25 -06:00
test [8.16] [Console] Fix flaky autocomplete functional tests (#208322) (#208369) 2025-01-27 15:54:36 +00:00
typings Adds AGPL 3.0 license (#192025) 2024-09-06 19:02:41 -06:00
x-pack [8.16] [Custom threshold] Fix using data view runtime fields during rule execution for the custom threshold rule (#209133) (#209287) 2025-02-04 17:16:27 +01:00
.backportrc.json chore(NA): adds 8.16 into backportrc (#187530) 2024-07-04 19:09:25 +01:00
.bazelignore Remove references to deleted .ci folder (#177168) 2024-02-20 19:54:21 +01:00
.bazeliskversion chore(NA): upgrade bazelisk into v1.11.0 (#125070) 2022-02-09 20:43:57 +00:00
.bazelrc chore(NA): use new and more performant BuildBuddy servers (#130350) 2022-04-18 02:01:38 +01:00
.bazelrc.common Transpile packages on demand, validate all TS projects (#146212) 2022-12-22 19:00:29 -06:00
.bazelversion chore(NA): revert bazel upgrade for v5.2.0 (#135096) 2022-06-24 03:57:21 +01:00
.browserslistrc Add Firefox ESR to browserlistrc (#184462) 2024-05-29 17:53:18 -05:00
.editorconfig
.eslintignore [ES|QL] New @kbn/esql-services package (#179029) 2024-03-27 14:39:48 +01:00
.eslintrc.js [8.x] chore(security, eslint): apply platform security-specific rules to all exclusively owned paths. (#195711) (#196010) 2024-10-12 11:19:03 -04:00
.gitattributes
.gitignore [ON-WEEK][POC] Playwright (#190803) 2024-09-06 13:09:18 +02:00
.i18nrc.json [8.x] [Search][Onboarding] api-key plugin (#191926) (#194756) 2024-10-03 14:02:05 +02:00
.node-version [8.16] Upgrade Node.js to 20.18.2 (#207431) (#207892) 2025-01-22 19:50:27 +00:00
.npmrc [npmrc] Fix puppeteer_skip_download configuration (#177673) 2024-02-22 18:59:01 -07:00
.nvmrc [8.16] Upgrade Node.js to 20.18.2 (#207431) (#207892) 2025-01-22 19:50:27 +00:00
.prettierignore
.prettierrc
.puppeteerrc Add .puppeteerrc (#179847) 2024-04-03 09:14:39 -05:00
.stylelintignore
.stylelintrc Bump stylelint to ^14 (#136693) 2022-07-20 10:11:00 -05:00
.telemetryrc.json [Telemetry] Fix telemetry-tools TS parser for packages (#149819) 2023-01-31 04:09:09 +03:00
.yarnrc
BUILD.bazel Transpile packages on demand, validate all TS projects (#146212) 2022-12-22 19:00:29 -06:00
catalog-info.yaml [sonarqube] Disable cron (#190611) 2024-08-15 09:19:09 -05:00
CODE_OF_CONDUCT.md
CONTRIBUTING.md Update doc slugs to improve analytic tracking, move to appropriate folders (#113630) 2021-10-04 13:36:45 -04:00
FAQ.md Fix small typos in the root md files (#134609) 2022-06-23 09:36:11 -05:00
fleet_packages.json [8.16] Sync bundled packages with Package Storage (#208239) 2025-01-27 10:57:30 +00:00
github_checks_reporter.json
kibana.d.ts Adds AGPL 3.0 license (#192025) 2024-09-06 19:02:41 -06:00
LICENSE.txt Adds AGPL 3.0 license (#192025) 2024-09-06 19:02:41 -06:00
NOTICE.txt [8.16] [APM] Fix stack trace syntax highlight (#205187) (#205354) 2025-01-02 04:34:19 -06:00
package.json [8.16] Update jquery (main) (#206180) (#209175) 2025-02-01 01:22:26 +01:00
preinstall_check.js Adds AGPL 3.0 license (#192025) 2024-09-06 19:02:41 -06:00
README.md [README] Update version Compatibility with Elasticsearch (#116040) 2022-01-10 10:31:21 -05:00
renovate.json [8.x] [Cloud Security] Graph visualization and API (#195307) (#196015) 2024-10-12 12:41:22 -05:00
RISK_MATRIX.mdx Add "Risk Matrix" section to the PR template (#100649) 2021-06-02 14:43:47 +02:00
run_fleet_setup_parallel.sh [Fleet] Prevent concurrent runs of Fleet setup (#183636) 2024-05-31 16:38:51 +02:00
SECURITY.md
sonar-project.properties [sonarqube] update memory, cpu (#190547) 2024-09-09 16:16:30 -05:00
STYLEGUIDE.mdx [styleguide] update path to scss theme (#140742) 2022-09-15 10:41:14 -04:00
tsconfig.base.json [8.x] [Cloud Security] Refactoring cloud-security-posture packages' folder structure (#196008) (#196267) 2024-10-15 06:51:18 -05:00
tsconfig.browser.json
tsconfig.browser_bazel.json [build_ts_refs] improve caches, allow building a subset of projects (#107981) 2021-08-10 22:12:45 -07:00
tsconfig.json Transpile packages on demand, validate all TS projects (#146212) 2022-12-22 19:00:29 -06:00
TYPESCRIPT.md Fix small typos in the root md files (#134609) 2022-06-23 09:36:11 -05:00
versions.json [ci] Update version tracking for 7.17.25 (#192477) 2024-09-10 20:54:04 -05:00
WORKSPACE.bazel [8.16] Upgrade Node.js to 20.18.2 (#207431) (#207892) 2025-01-22 19:50:27 +00:00
yarn.lock [8.16] Update jquery (main) (#206180) (#209175) 2025-02-01 01:22:26 +01:00

Kibana

Kibana is your window into the Elastic Stack. Specifically, it's a browser-based analytics and search dashboard for Elasticsearch.

Getting Started

If you just want to try Kibana out, check out the Elastic Stack Getting Started Page to give it a whirl.

If you're interested in diving a bit deeper and getting a taste of Kibana's capabilities, head over to the Kibana Getting Started Page.

Using a Kibana Release

If you want to use a Kibana release in production, give it a test run, or just play around:

Building and Running Kibana, and/or Contributing Code

You might want to build Kibana locally to contribute some code, test out the latest features, or try out an open PR:

Documentation

Visit Elastic.co for the full Kibana documentation.

For information about building the documentation, see the README in elastic/docs.

Version Compatibility with Elasticsearch

Ideally, you should be running Elasticsearch and Kibana with matching version numbers. If your Elasticsearch has an older version number or a newer major number than Kibana, then Kibana will fail to run. If Elasticsearch has a newer minor or patch number than Kibana, then the Kibana Server will log a warning.

Note: The version numbers below are only examples, meant to illustrate the relationships between different types of version numbers.

Situation Example Kibana version Example ES version Outcome
Versions are the same. 7.15.1 7.15.1 💚 OK
ES patch number is newer. 7.15.0 7.15.1 ⚠️ Logged warning
ES minor number is newer. 7.14.2 7.15.0 ⚠️ Logged warning
ES major number is newer. 7.15.1 8.0.0 🚫 Fatal error
ES patch number is older. 7.15.1 7.15.0 ⚠️ Logged warning
ES minor number is older. 7.15.1 7.14.2 🚫 Fatal error
ES major number is older. 8.0.0 7.15.1 🚫 Fatal error

Questions? Problems? Suggestions?

  • If you've found a bug or want to request a feature, please create a GitHub Issue. Please check to make sure someone else hasn't already created an issue for the same topic.
  • Need help using Kibana? Ask away on our Kibana Discuss Forum and a fellow community member or Elastic engineer will be glad to help you out.