Merge branch 'master' of github.com:elastic/kibana into alerting/disa…

…ble-actions-plugin-ESO-tmp-key

.github/CODEOWNERS

@@ -69,9 +69,11 @@
 # Canvas
 /x-pack/legacy/plugins/canvas/  @elastic/kibana-canvas
 
-# Logs & Metrics UI
+# Observability UIs
 /x-pack/legacy/plugins/infra/ @elastic/logs-metrics-ui
+/x-pack/plugins/infra/ @elastic/logs-metrics-ui
 /x-pack/legacy/plugins/integrations_manager/ @elastic/epm
+/x-pack/plugins/observability/ @elastic/logs-metrics-ui @elastic/apm-ui @elastic/uptime @elastic/ingest
 
 # Machine Learning
 /x-pack/legacy/plugins/ml/  @elastic/ml-ui
@@ -146,6 +148,7 @@
 # Kibana Alerting Services
 /x-pack/legacy/plugins/alerting/ @elastic/kibana-alerting-services
 /x-pack/legacy/plugins/actions/ @elastic/kibana-alerting-services
+/x-pack/plugins/actions/ @elastic/kibana-alerting-services
 /x-pack/plugins/event_log/ @elastic/kibana-alerting-services
 /x-pack/plugins/task_manager/ @elastic/kibana-alerting-services
 /x-pack/test/alerting_api_integration/ @elastic/kibana-alerting-services

docs/apm/filters.asciidoc

@@ -45,20 +45,18 @@ Service environments are defined when configuring your APM agents.
 It's very important to be consistent when naming environments in your agents.
 See the documentation for each agent you're using to learn how to configure service environments:
 
-|===
-|*Environment configuration*
-v|*Go:* {apm-go-ref}/configuration.html#config-environment[`ELASTIC_APM_ENVIRONMENT`]
-*Java:* {apm-java-ref}/config-core.html#config-environment[`environment`]
-*Node.js:* {apm-node-ref}/configuration.html#environment[`environment`]
-*Python:* {apm-py-ref}/configuration.html#config-environment[`environment`]
-*Ruby:* {apm-ruby-ref}/configuration.html#config-environment[`environment`]
-*Real User Monitoring:* {apm-rum-ref}/configuration.html#environment[`environment`]
-|===
+* *Go:* {apm-go-ref}/configuration.html#config-environment[`ELASTIC_APM_ENVIRONMENT`]
+* *Java:* {apm-java-ref}/config-core.html#config-environment[`environment`]
+* *.NET* {apm-dotnet-ref}/config-core.html#config-environment[`Environment`]
+* *Node.js:* {apm-node-ref}/configuration.html#environment[`environment`]
+* *Python:* {apm-py-ref}/configuration.html#config-environment[`environment`]
+* *Ruby:* {apm-ruby-ref}/configuration.html#config-environment[`environment`]
+* *Real User Monitoring:* {apm-rum-ref}/configuration.html#environment[`environment`]
 
 [[contextual-filters]]
 ==== Contextual filters
 
-Local filters are ways you can filter your specific APM data on each individual page.
+Contextual filters are ways you can filter your specific APM data on each individual page.
 The filters shown are relevant to your data, and will persist between pages,
 but only where they are applicable -- they are typically most useful in their original context.
 As an example, if you select a host on the Services overview, then select a transaction group,

docs/apm/spans.asciidoc

@@ -9,7 +9,7 @@ The span timeline visualization is a bird's-eye view of what your application wa
 This makes it useful for visualizing where the selected transaction spent most of its time.
 
 [role="screenshot"]
-image::apm/images/apm-distributed-tracing.png[Example view of the distributed tracing in APM app in Kibana]
+image::apm/images/apm-transaction-sample.png[Example of distributed trace colors in the APM app in Kibana]
 
 View a span in detail by clicking on it in the timeline waterfall.
 For example, in the below screenshot we've clicked on an SQL Select database query.
@@ -35,6 +35,3 @@ These transactions can be expanded and viewed in detail by clicking on them.
 
 After exploring these traces,
 you can return to the full trace by clicking *View full trace* in the upper right hand corner of the page.
-
-[role="screenshot"]
-image::apm/images/apm-transaction-sample.png[Example of distributed trace colors in the APM app in Kibana]

docs/apm/transactions.asciidoc

@@ -2,54 +2,74 @@
 === Transaction overview
 
 TIP: A {apm-overview-ref-v}/transactions.html[transaction] describes an event captured by an Elastic APM agent instrumenting a service.
-The APM agents automatically collect performance metrics on HTTP requests, database queries, and much more.
+APM agents automatically collect performance metrics on HTTP requests, database queries, and much more.
 
 Selecting a <<services,*service*>> brings you to the *transactions* overview.
-The *time spent by span type*, *transaction duration* and *requests per minute* chart display information on all transactions associated with the selected service.
-The *Transactions* table, however, provides only a list of _transaction groups_ for the selected service.
-In other words, this view groups all transactions of the same name together, and only displays one transaction for each group.
 
 [role="screenshot"]
 image::apm/images/apm-transactions-overview.png[Example view of transactions table in the APM app in Kibana]
 
-*Time spent by span type* -- Most agents support breakdown graphs in the APM app.
-This graph is an easy way to visualize where your application is spending most of its time.
-For example, is your app spending time in external calls, database processing, or application code execution?
+The *time spent by span type*, *transaction duration*, and *requests per minute* chart display information on all transactions associated with the selected service:
 
+*Time spent by span type*::
+Visualize where your application is spending most of its time.
+For example, is your app spending time in external calls, database processing, or application code execution?
++
 The time a transaction took to complete is also recorded and displayed on the chart under the "app" label.
 "app" indicates that something was happening within the application, but we're not sure exactly what.
 This could be a sign that the agent does not have auto-instrumentation for whatever was happening during that time.
-
++
 It's important to note that if you have asynchronous spans, the sum of all span times may exceed the duration of the transaction.
 
-*Transaction duration* shows the response times for this service and is broken down into average, 95th, and 99th percentile.
+*Transaction duration*::
+Response times for this service, broken down into average, 95th, and 99th percentile.
 If there's a weird spike that you'd like to investigate,
 you can simply zoom in on the graph - this will adjust the specific time range,
 and all of the data on the page will update accordingly.
 
-*Requests per minute* is divided into response codes: 2xx, 3xx, 4xx, etc.,
+*Requests per minute*::
+Visualize response codes: `2xx`, `3xx`, `4xx`, etc.,
 and is useful for determining if you're serving more of one code than you typically do.
 Like in the Transaction duration graph, you can zoom in on anomalies to further investigate them.
 
-The *Transactions* table is similar to the <<traces,traces>> overview and shows the name of each transaction occurring in the selected service.
-Transactions with the same name are grouped together and only shown once in this table.
+[[transactions-table]]
+==== Transactions table
+
+The *Transactions* table displays a list of _transaction groups_ for the selected service.
+In other words, this view groups all transactions of the same name together,
+and only displays one entry for each group.
+
+[role="screenshot"]
+image::apm/images/apm-transactions-table.png[Example view of the transactions table in the APM app in Kibana]
+
 By default, transaction groups are sorted by _Impact_.
 Impact helps show the most used and slowest endpoints in your service - in other words,
 it's the collective amount of pain a specific endpoint is causing your users.
 If there's a particular endpoint you're worried about, you can click on it to view the <<transaction-details, transaction details>>.
 
 [IMPORTANT]
 ====
-The transaction overview will only display helpful information when the transactions in your service are named correctly.
-
-Elastic APM Agents come with built-in support for popular frameworks out-of-the-box.
-However, if you only see one route in the Transaction overview page, or if you have transactions named "unknown route",
+If you only see one route in the Transactions table, or if you have transactions named "unknown route",
 it could be a symptom that the agent either wasn't installed correctly or doesn't support your framework. 
 
 For further details, including troubleshooting and custom implementation instructions,
 refer to the documentation for each {apm-agents-ref}[APM Agent] you've implemented.
 ====
 
+[[transactions-annotations]]
+==== Transaction annotations
+
+For enhanced visibility into your deployments, we offer deployment annotations on all transaction charts.
+This feature automatically tags new deployments, so you can easily see if your deploy has increased response times
+for an end-user, or if the memory/CPU footprint of your application has increased.
+Being able to quickly identify bad deployments enables you to rollback and fix issues without causing costly outages.
+
+Deployment annotations are automatically enabled, and appear when the `service.version` of your app changes.
+
+[role="screenshot"]
+image::apm/images/apm-transaction-annotation.png[Example view of transactions annotation in the APM app in Kibana]
+
+
 [[rum-transaction-overview]]
 ==== RUM Transaction overview
 
@@ -75,23 +95,24 @@ It's important to note that all of these graphs show data from every transaction
 [role="screenshot"]
 image::apm/images/apm-transaction-response-dist.png[Example view of response time distribution]
 
-A single sampled transaction is also displayed.
-This sampled transaction is based on your selection in the *Transactions duration distribution*.
-You can update the sampled transaction by selecting a new _bucket_ in the transactions duration distribution graph.
+Up to ten sampled transactions are also displayed.
+These sampled transactions are based on your selection in the *Transactions duration distribution*.
+You can update the sampled transactions by selecting a new _bucket_ in the transactions duration distribution graph.
 The number of requests per bucket is displayed when hovering over the graph, and the selected bucket is highlighted to stand out.
 
 [role="screenshot"]
 image::apm/images/apm-transaction-duration-dist.png[Example view of transactions duration distribution graph]
 
 Let's look at an example.
 In the screenshot below,
-you'll notice most of our requests fall into buckets on the left side of the graph,
+you'll notice most of the requests fall into buckets on the left side of the graph,
 with a long tail of smaller buckets to the right.
 This is a typical distribution, and indicates most of our requests were served quickly - awesome!
 It's the requests on the right, the ones taking longer than average, that we probably want to focus on.
-By clicking on these buckets,
-we're presented with a span timeline waterfall showing what a typical request in that bucket was doing.
-By investigating this timeline waterfall, we can hopefully see why it was slow and then implement a fix.
+When you select one of these buckets,
+you're presented with up to ten trace samples.
+Each sample has a span timeline waterfall that shows what a typical request in that bucket was doing.
+By investigating this timeline waterfall, we can hopefully determine _why_ this request was slow and then implement a fix.
 
 [role="screenshot"]
 image::apm/images/apm-transaction-sample.png[Example view of transactions sample]

docs/developer/plugin/development-plugin-resources.asciidoc

@@ -3,10 +3,6 @@
 
 Here are some resources that are helpful for getting started with plugin development.
 
-[float]
-==== Our IRC channel
-Many Kibana developers hang out on `irc.freenode.net` in the `#kibana` channel. We *want* to help you with plugin development. Even more than that, we *want your help* in understanding your plugin goals, so we can build a great plugin system for you! If you've never used IRC, welcome to the fun. You can get started with the http://webchat.freenode.net/?channels=kibana[Freenode Web Client].
-
 [float]
 ==== Some light reading
 Our {repo}blob/master/CONTRIBUTING.md[contributing guide] can help you get a development environment going.
@@ -50,7 +46,7 @@ You're welcome to use these components, but be aware that they are rapidly evolv
 
 [float]
 ==== TypeScript Support
-Plugin code can be written in http://www.typescriptlang.org/[TypeScript] if desired. 
+Plugin code can be written in http://www.typescriptlang.org/[TypeScript] if desired.
 To enable TypeScript support, create a `tsconfig.json` file at the root of your plugin that looks something like this:
 
 ["source","js"]
@@ -67,6 +63,6 @@ To enable TypeScript support, create a `tsconfig.json` file at the root of your
 }
 -----------
 
-TypeScript code is automatically converted into JavaScript during development, 
-but not in the distributable version of Kibana. If you use the 
+TypeScript code is automatically converted into JavaScript during development,
+but not in the distributable version of Kibana. If you use the
 {repo}blob/{branch}/packages/kbn-plugin-helpers[@kbn/plugin-helpers] to build your plugin, then your `.ts` and `.tsx` files will be permanently transpiled before your plugin is archived. If you have your own build process, make sure to run the TypeScript compiler on your source files and ship the compilation output so that your plugin will work with the distributable version of Kibana.

docs/management/advanced-options.asciidoc

@@ -220,8 +220,10 @@ might increase the search time. This setting is off by default. Users must opt-i
 [horizontal]
 `siem:defaultAnomalyScore`:: The threshold above which Machine Learning job anomalies are displayed in the SIEM app.
 `siem:defaultIndex`:: A comma-delimited list of Elasticsearch indices from which the SIEM app collects events.
-`siem:enableNewsFeed`:: Enables the News feed
-`siem:newsFeedUrl`:: News feed content will be retrieved from this URL
+`siem:enableNewsFeed`:: Enables the security news feed on the SIEM *Overview* 
+page.
+`siem:newsFeedUrl`:: The URL from which the security news feed content is 
+retrieved.
 `siem:refreshIntervalDefaults`:: The default refresh interval for the SIEM time filter, in milliseconds.
 `siem:timeDefaults`:: The default period of time in the SIEM time filter.
 

docs/siem/index.asciidoc

@@ -33,7 +33,8 @@ https://www.elastic.co/products/beats/packetbeat[{packetbeat}]
 send security events and other data to Elasticsearch.
 
 The default index patterns for SIEM events are `auditbeat-*`, `winlogbeat-*`,
-`filebeat-*`, `endgame-*`, and `packetbeat-*``. You can change the default index patterns in
+`filebeat-*`, `packetbeat-*`, `endgame-*`, and `apm-*-transaction*`. You can 
+change the default index patterns in
 *Kibana > Management > Advanced Settings > siem:defaultIndex*.
 
 [float]

examples/ui_action_examples/README.md

@@ -0,0 +1,8 @@
+## Ui actions examples
+
+These ui actions examples shows how to:
+ - Register new actions
+ - Register custom triggers
+ - Attach an action to a trigger
+
+To run this example, use the command `yarn start --run-examples`.

examples/ui_action_examples/kibana.json

@@ -0,0 +1,10 @@
+{
+  "id": "uiActionsExamples",
+  "version": "0.0.1",
+  "kibanaVersion": "kibana",
+  "configPath": ["ui_actions_examples"],
+  "server": false,
+  "ui": true,
+  "requiredPlugins": ["uiActions"],
+  "optionalPlugins": []
+}

examples/ui_action_examples/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "ui_actions_examples",
+  "version": "1.0.0",
+  "main": "target/examples/ui_actions_examples",
+  "kibana": {
+    "version": "kibana",
+    "templateVersion": "1.0.0"
+  },
+  "license": "Apache-2.0",
+  "scripts": {
+    "kbn": "node ../../scripts/kbn.js",
+    "build": "rm -rf './target' && tsc"
+  },
+  "devDependencies": {
+    "typescript": "3.5.3"
+  }
+}

examples/ui_action_examples/public/hello_world_action.tsx

@@ -0,0 +1,43 @@
+/*
+ * Licensed to Elasticsearch B.V. under one or more contributor
+ * license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright
+ * ownership. Elasticsearch B.V. licenses this file to you under
+ * the Apache License, Version 2.0 (the "License"); you may
+ * not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import React from 'react';
+import { EuiText, EuiModalBody, EuiButton } from '@elastic/eui';
+import { OverlayStart } from '../../../src/core/public';
+import { createAction } from '../../../src/plugins/ui_actions/public';
+import { toMountPoint } from '../../../src/plugins/kibana_react/public';
+
+export const HELLO_WORLD_ACTION_TYPE = 'HELLO_WORLD_ACTION_TYPE';
+
+export const createHelloWorldAction = (openModal: OverlayStart['openModal']) =>
+  createAction<{}>({
+    type: HELLO_WORLD_ACTION_TYPE,
+    getDisplayName: () => 'Hello World!',
+    execute: async () => {
+      const overlay = openModal(
+        toMountPoint(
+          <EuiModalBody>
+            <EuiText data-test-subj="helloWorldActionText">Hello world!</EuiText>
+            <EuiButton data-test-subj="closeModal" onClick={() => overlay.close()}>
+              Close
+            </EuiButton>
+          </EuiModalBody>
+        )
+      );
+    },
+  });

examples/ui_action_examples/public/hello_world_trigger.ts

@@ -0,0 +1,28 @@
+/*
+ * Licensed to Elasticsearch B.V. under one or more contributor
+ * license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright
+ * ownership. Elasticsearch B.V. licenses this file to you under
+ * the Apache License, Version 2.0 (the "License"); you may
+ * not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import { Trigger } from '../../../src/plugins/ui_actions/public';
+import { HELLO_WORLD_ACTION_TYPE } from './hello_world_action';
+
+export const HELLO_WORLD_TRIGGER_ID = 'HELLO_WORLD_TRIGGER_ID';
+
+export const helloWorldTrigger: Trigger = {
+  id: HELLO_WORLD_TRIGGER_ID,
+  actionIds: [HELLO_WORLD_ACTION_TYPE],
+};

examples/ui_action_examples/public/index.ts

@@ -0,0 +1,26 @@
+/*
+ * Licensed to Elasticsearch B.V. under one or more contributor
+ * license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright
+ * ownership. Elasticsearch B.V. licenses this file to you under
+ * the Apache License, Version 2.0 (the "License"); you may
+ * not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import { UiActionExamplesPlugin } from './plugin';
+import { PluginInitializer } from '../../../src/core/public';
+
+export const plugin: PluginInitializer<void, void> = () => new UiActionExamplesPlugin();
+
+export { HELLO_WORLD_TRIGGER_ID } from './hello_world_trigger';
+export { HELLO_WORLD_ACTION_TYPE } from './hello_world_action';