diff --git a/docs/CHANGELOG.asciidoc b/docs/CHANGELOG.asciidoc index 5f544c4cf39d8..0e67a71bf784f 100644 --- a/docs/CHANGELOG.asciidoc +++ b/docs/CHANGELOG.asciidoc @@ -72,6 +72,426 @@ Review important information about the {kib} 7.16.x releases. coming::[7.16.0] +For information about the {kib} 7.16.0 release, review the following information. + +[float] +[[breaking-changes-7.16.0]] +=== Breaking changes + +Breaking changes can prevent your application from optimal operation and performance. +Before you upgrade to 7.16.0, review the breaking changes, then mitigate the impact to your application. + +// tag::notable-breaking-changes[] + +[discrete] +[[breaking-112523]] +.Updates browser support +[%collapsible] +==== +*Details* + +Google Chrome, Microsoft Edge, Mozilla Firefox, and ApplemSafari browser support has been updated. For more information, refer to {kibana-pull}112523[#112523]. + +*Impact* + +Use the following supported browsers: + +* Chrome 92 +* Edge 92 +* Firefox 91.0 +* Safari 14.1 +==== + +[discrete] +[[breaking-111339]] +.Removes legacy data table +[%collapsible] +==== +*Details* + +The legacy aggregation-based data table and `vis_type_table.legacyVisEnabled` setting are no longer supported. For more information, refer to {kibana-pull}111339[#111339]. + +*Impact* + +To auto-fit the table row height, create an {kibana-ref}/add-aggregation-based-visualization-panels.html#create-aggregation-based-panel[aggregation-based data table], click *Options*, then select *Auto fit rows to content*. +==== + +[discrete] +[[breaking-110786]] +.Removes the legacy area, bar, and line charts library +[%collapsible] +==== +*Details* + +The legacy aggregation-based area, bar, and line charts are no longer supported. For more information, refer to {kibana-pull}110786[#110786]. + +*Impact* + +When you upgrade to 7.16.0, you are only able to create area, bar, and line charts using the new implementation. +==== + +[discrete] +[[breaking-110255]] +.Removes the Timelion app +[%collapsible] +==== +*Details* + +The Timelion app is no longer supported. For more information, refer to {kibana-pull}110255[#110255] + +*Impact* + +When you upgrade to 7.16.0, you are unable to use the *Timelion* app. The {kibana-ref}/timelion.html[*Timelion*] visualization editor is still supported. +==== + +[discrete] +[[breaking-107345]] +.Replaces Osquery scheduled query groups with packs +[%collapsible] +==== +*Details* + +Queries are now scheduled using packs. For more information, refer to {kibana-pull}107345[#107345]. + +*Impact* + +When you upgrade to 7.16.0, any existing scheduled query groups are converted to packs. +Queries in the updated packs are scheduled for the same agent policy as the original +scheduled query group. Action IDs for scheduled queries in a pack have the +format `pack__`. +==== + +// end::notable-breaking-changes[] + +[float] +[[deprecations-7.16.0]] +=== Deprecations + +The following functionality is deprecated in 7.16.0, and will be removed in 8.0.0. +Deprecated functionality does not have an immediate impact on your application, but we strongly recommend +you make the necessary updates after you upgrade to 7.16.0. + +For the Elastic Security 7.16.0 deprecations, refer to {security-guide}/release-notes.html[_Elastic Security Solution Release Notes_]. + +[discrete] +[[deprecation-118363]] +.Adds levels to rule registry deprecations +[%collapsible] +==== +*Details* + +Levels are now explicitly in deprecation configurations. For more information, refer to {kibana-pull}118363[#118363]. + +*Impact* + +Levels for deprecations are explicitly set. +==== + +[discrete] +[[deprecation-114578]] +.Deprecates `search:includeFrozen` +[%collapsible] +==== +*Details* + +The <> advanced setting is deprecated and will be removed in 9.0.0. For more information, refer to {kibana-pull}114578[#114578]. + +*Impact* + +In 7.16.0, there is no impact. +==== + +[discrete] +[[deprecation-114381]] +.Sets `ignore_throttled` when `search:includeFrozen` is `true` +[%collapsible] +==== +*Details* + +When the <> advanced setting is set to `true`, `ignore_throttled` is conditionally configured. For more information, refer to {kibana-pull}114381[#114381]. + +*Impact* + +When you open *Upgrade Assistant*, then click *View deprecation logs in Observability*, `ignore_throttled` deprecation logs appear. +==== + +[discrete] +[[deprecation-114019]] +.Deprecates `xpack.reporting.capture.viewport` +[%collapsible] +==== +*Details* + +The `xpack.reporting.capture.viewport` settings are deprecated and will be removed in 8.0.0. For more information, refer to {kibana-pull}114019[#114019]. + +*Impact* + +When you upgrade to 8.0.0, you are unable to use the `xpack.reporting.capture.viewport` settings. +==== + +[discrete] +[[deprecation-113364]] +.Removes the `apm_oss plugin` and deprecates related settings +[%collapsible] +==== +*Details* + +The `apm_oss` plugin has been removed as a dependency of the `apm` plugin, and the `apm_oss` settings have been deprecated and moved to the `xpack.apm.indices*` configuration path. For more information, refer to {kibana-pull}113364[#113364]. + +*Impact* + +Update the following settings: + +* `apm_oss.errorIndices` is deprecated. Use `xpack.apm.indices.error`. +* `apm_oss.metricsIndices` is deprecated. Use `xpack.apm.indices.metric`. +* `apm_oss.onboardingIndices` is deprecated. Use `xpack.apm.indices.onboarding`. +* `apm_oss.sourcemapIndices` is deprecated. Use `xpack.apm.indices.sourcemap`. +* `apm_oss.spanIndices` is deprecated. Use `xpack.apm.indices.span`. +* `apm_oss.transactionIndices` is deprecated. Use `xpack.apm.indices.transaction`. +==== + +[discrete] +[[deprecation-113555]] +.Deprecates `proxyFilter` and `proxyConfig` +[%collapsible] +==== +*Details* + +The `proxyFilter` and `proxyConfig` settings are deprecated and will be removed in 8.0.0. For more information, refer to {kibana-pull}113555[#113555]. + +*Impact* + +Before you upgrade to 8.0.0, remove `console.proxyFilter` from kibana.yml, CLI flag, or Docker environment variable, then use the `server.ssl.*` and <>`elasticsearch.ssl.keyPassphrase`>> settings. +==== + +[discrete] +[[deprecation-111550]] +.Deprecates `KIBANA_PATH_CONF` +[%collapsible] +==== +*Details* + +The `KIBANA_PATH_CONF` environment variable is deprecated and will be removed in 8.0.0. For more information, refer to {kibana-pull}111550[#111550]. + +*Impact* + +Use <>. +==== + +[float] +[[features-7.16.0]] +=== Features +{kib} 7.16.0 adds the following new and notable features. + +APM:: +* Adds chart for failed transaction correlations {kibana-pull}110172[#110172] +* Correlations chart enhancements {kibana-pull}113039[#113039] +Canvas:: +* Adds Tag Cloud support {kibana-pull}106858[#106858] +Elastic Security:: +For the Elastic Security 7.16.0 release information, refer to {security-guide}/release-notes.html[_Elastic Security Solution Release Notes_]. +Lens & Visualizations:: +* Adds reference lines to *Lens* {kibana-pull}108342[#108342] +* Support custom field format in *TSVB* {kibana-pull}101245[#101245] +Observability:: +* Adds "Add to case" button {kibana-pull}112463[#112463] +Machine Learning:: +* Adds the ability to change data view in advanced job wizard {kibana-pull}115191[#115191] +* Adds KQL filter bar, filtering functionality, and compact design to Index data visualizer {kibana-pull}112870[#112870] +Management:: +* Adds alerting rules management to Transform UI {kibana-pull}115363[#115363] +* Transforms health alerting rule type {kibana-pull}112277[#112277] +* Allow fields that start with an underscore in the field list {kibana-pull}111238[#111238] +Platform:: +* Inspect flyout should be available in editor mode {kibana-pull}109656[#109656] +Sharing:: +* Short URL service now supports human readable slugs for short URLs {kibana-pull}107859[#107859] + +For more information about the features introduced in 7.16.0, refer to <>. + +[[enhancements-and-bug-fixes-v7.16.0]] +=== Enhancements and bug fixes + +For detailed information about the 7.16.0 release, review the enhancements and bug fixes. + +[float] +[[enhancement-v7.16.0]] +=== Enhancements +Alerting:: +* The Alerting event log indices, named `kibana-event-log-*`, are set to hidden indices via the `index.hidden: true` index setting {kibana-pull}117470[#117470] +* Removes TLS requirement for alerting when security is enabled {kibana-pull}115234[#115234] +* Shows execution duration on Rule Details view {kibana-pull}114719[#114719] +* Shows last execution duration on Rule Management view {kibana-pull}113935[#113935] +* Allow rule types to specify a default and minimum interval {kibana-pull}113650[#113650] +APM:: +* Adds advanced mode toggle for the APM failed transactions table {kibana-pull}114363[#114363] +* Adds context popover for APM latency correlations & failed transactions correlations {kibana-pull}113679[#113679] +* Adds chart for failed transactions correlations tab {kibana-pull}110172[#110172] +* Correlations chart enhancements {kibana-pull}113039[#113039] +Canvas:: +* Adds Tag Cloud support {kibana-pull}106858[#106858] +Dashboard:: +* Dashboard PDF and PNG reports can now be generated without requiring users to first save {kibana-pull}108553[#108553] +Discover:: +* Remember most recent "hide chart" setting {kibana-pull}114534[#114534] +* Adds "Chart options" menu {kibana-pull}112453[#112453] +* Adds "Open in Discover" to dashboard panels {kibana-pull}112396[#112396] +Elastic Security:: +For the Elastic Security 7.16.0 release information, refer to {security-guide}/release-notes.html[_Elastic Security Solution Release Notes_]. +Fleet:: +* Adds prompt for users to add an agent if they add an integration to an agent policy with no agents {kibana-pull}114830[#114830] +* Allow users with read access to view Integrations app {kibana-pull}113925[#113925] +* Removes enterprise license requirement for custom registry URL {kibana-pull}113858[#113858] +* Adds "Keep Policies up to Date" functionality for integrations {kibana-pull}112702[#112702] +* Allow packages to specify index privileges {kibana-pull}112397[#112397] +* Allow Integrations browse page to filter on descriptions {kibana-pull}111649[#111649] +* Support automatic upgrades of Package Policies when updating Integrations {kibana-pull}108269[#108269] +Kibana Home & Add Data:: +* Adds “Add data” button to Global Nav Drawer {kibana-pull}113648[#113648] +Lens & Visualizations:: +* Relax break down group validation for percentage charts in *Lens* {kibana-pull}114803[#114803] +* Adds rowHeightsOptions to table {kibana-pull}114637[#114637] +* Respect external URL allow list in TSVB {kibana-pull}114093[#114093] +* Respect external URL allow list in vega {kibana-pull}113720[#113720] +* Enables filter bar in *TSVB* {kibana-pull}109223[#109223] +* Support custom field format in *TSVB* {kibana-pull}101245[#101245] +Machine Learning:: +* Adds ability to change data view in advanced job wizard {kibana-pull}115191[#115191] +* Adds KQL filter bar, filtering functionality, and compact design to Index data visualizer {kibana-pull}112870[#112870] +* Job sync usability improvements {kibana-pull}112693[#112693] +* Auto-scalable ML node integrations improvements {kibana-pull}112264[#112264] +* Datafeed preview based job validation check {kibana-pull}109080[#109080] +Management:: +* Adds alerting rules management to Transform UI {kibana-pull}115363[#115363] +* Upgrade Assistant now displays the progress of your reindexing tasks {kibana-pull}114275[#114275] +* Transforms health alerting rule type {kibana-pull}112277[#112277] +* Allow fields that start with an underscore in the field list {kibana-pull}111238[#111238] +* In Snapshot & Restore, the performance of snapshots list is improved to handle a large number of snapshots {kibana-pull}110266[#110266] +* Open in dev tools button for request inspector {kibana-pull}109923[#109923] +* Use date field dropdown for edit transform retention policy setting {kibana-pull}108804[#108804] +* Adds tooltip help text for Transform filter query control {kibana-pull}108720[#108720] +Maps:: +* Adds support for UTM and MGRS coordinates in Maps "Go To" button {kibana-pull}107835[#107835] +Observability:: +* Adds APM-Fleet integration version check and upgrade message {kibana-pull}115297[#115297] +* Adds comparison to the error occurrences histogram and "failed transaction rate" to the chart panels {kibana-pull}115194[#115194] +* Revert multi-metric ML job {kibana-pull}114961[#114961] +* Adds the ability to select any service name, transaction type, and environment when creating and editing rules, both in APM and Stack Management. {kibana-pull}111883[#111883] +* Show new "no data screen" on the getting started page {kibana-pull}111803[#111803] +* Consistent "no data" screen with other Observability solutions {kibana-pull}111630[#111630] +* Set start date of APM ML job to -4 weeks {kibana-pull}111375[#111375] +* Deprecate `apm_oss.indexPattern` config option {kibana-pull}111133[#111133] +* Show badge for failed spans in waterfall {kibana-pull}109812[#109812] +* Show hostname in JVM view {kibana-pull}109651[#109651] +* Enable the observability alerting and cases features {kibana-pull}115785[#115785] +* Adds separate setting for Alert If Group Disappears for metric threshold rules {kibana-pull}113032[#113032] +* Adds warning about redundant groupBy on metric threshold {kibana-pull}111891[#111891] +* Adds KQL filter bar to alerts {kibana-pull}111663[#111663] +* Adds Inventory Timeline open/close state to context and URL state {kibana-pull}111034[#111034] +* Adds references for saved views in source configuration {kibana-pull}110556[#110556] +* Browser - add script recorder option {kibana-pull}115184[#115184] +* Adds uptime query inspector panel {kibana-pull}115170[#115170] +* Clean up empty states, tutorial links and routing to prefer unified integrations {kibana-pull}114911[#114911] +* Make uptime settings saved object exportable {kibana-pull}114235[#114235] +* Adds percentile ranks, show legend always, and fix field labels {kibana-pull}113765[#113765] +* Adds exploratory view multi series {kibana-pull}113464[#113464] +* Adds TLS options for browser monitors when zip url is selected {kibana-pull}112554[#112554] +* Adds "Add to case" button {kibana-pull}112463[#112463] +* Adds new advanced options {kibana-pull}112454[#112454] +* Make all error messages on tables consistence {kibana-pull}111690[#111690] +* Redirect to error page when Heartbeat mappings are missing {kibana-pull}110857[#110857] +* New "No Data" screens {kibana-pull}107709[#107709] +* For filters, use shared component {kibana-pull}105739[#105739] +* Annotate waterfall chart with additional metrics {kibana-pull}103642[#103642] +Operations:: +* Development and build support for ARM based Apple devices {kibana-pull}114879[#114879] +Platform:: +* The `/api/status` endpoint will now only respond with a `503` status code if any Kibana core service is unavailable {kibana-pull}113729[#113729] +* Integration tests for unsupported product 404 responses {kibana-pull}109755[#109755] +* Inspect flyout should be available in editor mode {kibana-pull}109656[#109656] +Reporting:: +* You can now generate a PDF or PNG report of an unsaved visualization {kibana-pull}110206[#110206] +Sharing:: +* Short URL service was updated to support short URL creation from locators {kibana-pull}107859[#107859] + +[float] +[[fixes-v7.16.0]] +=== Bug Fixes +Canvas:: +* Fixes Advanced settings in Datasource recreate on any change {kibana-pull}111840[#111840] +* Fixes Storybook for DatasourceComponent is crashing {kibana-pull}110180[#110180] +Dashboard:: +* Adds *Timelion* panel without asking for the index pattern {kibana-pull}113896[#113896] +* Fixes duplicating tags {kibana-pull}119079[#119079] +Discover:: +* Shows ignored field values {kibana-pull}115040[#115040] +* Fixes search highlighting of expanded document {kibana-pull}114884[#114884] +* Fixes wrong timepicker range when brushing {kibana-pull}111989[#111989] +* Hides multifields from doc table {kibana-pull}109242[#109242] +Elastic Security:: +For the Elastic Security 7.16.0 release information, refer to {security-guide}/release-notes.html[_Elastic Security Solution Release Notes_]. +Fleet:: +* Link to the installed version of an integration from global search {kibana-pull}115736[#115736] +* Fixes agent count in update modal {kibana-pull}114622[#114622] +* Shows security requirements page when ES security is not enabled {kibana-pull}114583[#114583] +* Improves default settings for Fleet component templates {kibana-pull}114101[#114101] +* Report `installing` status while package install is in progress {kibana-pull}111875[#111875] +Lens & Visualizations:: +* Do not show legend actions popup when in non-interactive mode in *Lens* {kibana-pull}115804[#115804] +* Fixes the scale type on a terms aggregation on a number field {kibana-pull}115729[#115729] +* Fixes the formatting on multiple axis {kibana-pull}115552[#115552] +* Fixes the long text problem that appears behind the gauge chart in *TSVB* {kibana-pull}115516[#115516] +* Fixes cursor type for topN charts with drilldowns in *TSVB* {kibana-pull}115333[#115333] +* Chart with override index pattern and last_value are migrated with entire_time_range from 7.13+ in *TSVB* {kibana-pull}115041[#115041] +* Fixes editor blowing up when working on non-exisiting data view in *Lens* {kibana-pull}114816[#114816] +* Formula: better messages for unsupported field types in *Lens* {kibana-pull}114528[#114528] +* Improves error message in case of invalid $schema URL in *Vega* {kibana-pull}114459[#114459] +* [Inspector] Close the inspector on Lens unmount in *Lens* {kibana-pull}114317[#114317] +* Keep the custom label when transitioning to/from Formula in *Lens* {kibana-pull}114270[#114270] +* Fixes filters not being cleaned when navigating to another visualisation in *Lens* {kibana-pull}114137[#114137] +* Fixes chart not updating with refresh button in *Lens* {kibana-pull}114135[#114135] +* Fixes Metric visualization scale in *Lens* {kibana-pull}113956[#113956] +* Error on refreshing an unsaved visualization created from a saved search in *Visualize* {kibana-pull}113938[#113938] +* Fixes problem with one chart plotted for multiple y axis when migrating from an old SO {kibana-pull}112972[#112972] +* Better error details on expression evaluation in *Timelion* {kibana-pull}112663[#112663] +* Adds support of triple quotes {kibana-pull}112656[#112656] +* Fixes bug with nested terms, one with other bucket and the other disabled {kibana-pull}112636[#112636] +* Better error explanation for EsErrors and inspector now showing error responses in *Vega* {kibana-pull}112634[#112634] +* Fixes the brushing of the last bucket for timeseries visualizations in *TSVB* {kibana-pull}112068[#112068] +* Removes trailing semicolor and scrollbar for empty pie chart visualization in *Lens* {kibana-pull}111971[#111971] +* Loads the no results screen if all slices have zero value {kibana-pull}111931[#111931] +* Reverse colors should not reverse palette picker previews in *Lens* {kibana-pull}110455[#110455] +* Shows validation feedback on top values out of bounds number of values in *Lens* {kibana-pull}110222[#110222] +* *TSVB* metrics that have legend (percentiles and percentile ranks) don't resize the text size properly {kibana-pull}109483[#109483] +* Split chart and alphabetical descending order doesn't work as expected {kibana-pull}108858[#108858] +* Doesn't work correctly with pipeline aggregations in "entire time range" mode in *TSVB* {kibana-pull}105073[#105073] +Machine Learning:: +* Data Frame Analytics wizard: retain query language when switching steps {kibana-pull}116227[#116227] +* Fixes errors from annotations searches when event mapping is incorrect {kibana-pull}116101[#116101] +* Fixes index data visualizer not available when no ML nodes available {kibana-pull}115972[#115972] +* Data Frame Analytics: Fix legend text colors for Vega based charts in dark mode {kibana-pull}115911[#115911] +* Deletes annotation directly from the index it is stored in {kibana-pull}115328[#115328] +* Fixes deletion of models that are not used by pipelines {kibana-pull}114107[#114107] +Management:: +* Space privilege "Index pattern management" read still shows delete button {kibana-pull}115390[#115390] +* Pass `compress` flag in query instead of headers {kibana-pull}113929[#113929] +* Fixes url formatter editor "Open in new tab" is hidden by default {kibana-pull}113141[#113141] +* The mappings editor in Index Management now supports defining a multi-field for the IP field type {kibana-pull}112477[#112477] +Maps:: +* Fixes locked tooltip issues {kibana-pull}115583[#115583] +* Fixes choropleth map with applyGlobalQuery set to false still creates filter for source {kibana-pull}108999[#108999] +* Adds force-refresh toggle {kibana-pull}104691[#104691] +Monitoring:: +* Fixes blank page between loading page and overview {kibana-pull}114550[#114550] +* Fixes shard size alerts {kibana-pull}114357[#114357] +* Adds initial react app {kibana-pull}109218[#109218] +Observability:: +* Adds missing legacy key for apm-server.secret_token {kibana-pull}116554[#116554] +* Alerts chart preview wrong timezone {kibana-pull}116014[#116014] +* Default time range overrides fetched range for link-to/trace URLs without range parameters {kibana-pull}115449[#115449] +* Update dependencies overview route to use backendName as a query param {kibana-pull}115226[#115226] +* Waterfall layout and expansion fixes {kibana-pull}114889[#114889] +* Update namespace for indices {kibana-pull}114612[#114612] +* Adds all APM configuration settings to the documentation {kibana-pull}114139[#114139] +* Fixes GC time calculation {kibana-pull}113992[#113992] +* Update title and description on APM tutorial in cloud hosted deployments {kibana-pull}113438[#113438] +* Removes dot from legend on the error marker {kibana-pull}113437[#113437] +* Display all properties by default in flyout {kibana-pull}113221[#113221] +* Fixes loading message missing or inconsistent in various list views {kibana-pull}110772[#110772] +* Clear threshold alert groups state when filterQuery changes {kibana-pull}116205[#116205] +* Ensure Kubernetes Pod CPU & Memory Usage is consistent across pages {kibana-pull}116177[#116177] +* Synthetics step fix browser console indexing error {kibana-pull}115897[#115897] +* Adjust the theme colors for uptime monitors browser screenshot labels {kibana-pull}115543[#115543] +* Removes rate aggregations {kibana-pull}114187[#114187] +* Fixes copy typo {kibana-pull}111203[#111203] +* Improves log threshold rule field selection {kibana-pull}111135[#111135] +Platform:: +* Reverting to legacy ES client behavior where maxSockets = Infinity {kibana-pull}113644[#113644] +* Fixes Error 500 on the workpad update {kibana-pull}111683[#111683] +* Adds references extract/inject for Workpads {kibana-pull}109874[#109874] +Querying & Filtering:: +* Saved query saved objects now properly reference index pattern saved objects, so they can be exported/imported properly {kibana-pull}111213[#111213] +Reporting:: +* Revisit handling timeouts for different phases of screenshot capture {kibana-pull}113807[#113807] +Security:: +* Adds custom error message when receiving 401 response to avoid confusion with Kibana session timeout {kibana-pull}113460[#113460] + ///// [[release-notes-7.15.2]] == {kib} 7.15.2 diff --git a/docs/settings/alert-action-settings.asciidoc b/docs/settings/alert-action-settings.asciidoc index c3d05c0dfd1d3..e985d51673012 100644 --- a/docs/settings/alert-action-settings.asciidoc +++ b/docs/settings/alert-action-settings.asciidoc @@ -131,7 +131,7 @@ into a single string. This configuration can be used for environments where the files cannot be made available. `xpack.actions.enabledActionTypes` {ess-icon}:: -A list of action types that are enabled. It defaults to `[*]`, enabling all types. The names for built-in {kib} action types are prefixed with a `.` and include: `.server-log`, `.slack`, `.email`, `.index`, `.pagerduty`, and `.webhook`. An empty list `[]` will disable all action types. +A list of action types that are enabled. It defaults to `[*]`, enabling all types. The names for built-in {kib} action types are prefixed with a `.` and include: `.email`, `.index`, `.jira`, `.pagerduty`, `.resilient`, `.server-log`, `.servicenow`, .`servicenow-itom`, `.servicenow-sir`, `.slack`, `.swimlane`, `.teams`, and `.webhook`. An empty list `[]` will disable all action types. + Disabled action types will not appear as an option when creating new connectors, but existing connectors and actions of that type will remain in {kib} and will not function. diff --git a/docs/settings/url-drilldown-settings.asciidoc b/docs/settings/url-drilldown-settings.asciidoc index ca414d4f650e9..d9a7d998bf7af 100644 --- a/docs/settings/url-drilldown-settings.asciidoc +++ b/docs/settings/url-drilldown-settings.asciidoc @@ -6,20 +6,18 @@ Configure the URL drilldown settings in your `kibana.yml` configuration file. -[cols="2*<"] -|=== -| [[url-drilldown-enabled]] `url_drilldown.enabled` - | deprecated:[7.16.0,"In 8.0 and later, this setting will no longer be supported."] - When `true`, enables URL drilldowns on your {kib} instance. -| [[external-URL-policy]] `externalUrl.policy` - | Configures the external URL policies. URL drilldowns respect the global *External URL* service, which you can use to deny or allow external URLs. -By default all external URLs are allowed. -|=== - -For example, to allow external URLs only to the `example.com` domain with the `https` scheme, except for the `danger.example.com` sub-domain, -which is denied even when `https` scheme is used: +[[url-drilldown-enabled]] `url_drilldown.enabled`:: +deprecated:[7.16.0,"In 8.0 and later, this setting will no longer be supported."] +When `true`, enables URL drilldowns on your {kib} instance. +[[external-URL-policy]] `externalUrl.policy`:: +Configures the external URL policies. URL drilldowns respect the global *External URL* service, which you can use to deny or allow external URLs. +By default all external URLs are allowed. ++ +This example allows external URLs only to the `example.com` domain with the `https` scheme, except for the `danger.example.com` sub-domain, +which is denied even when `https` scheme is used. ++ ["source","yml"] ----------- externalUrl.policy: @@ -29,4 +27,3 @@ externalUrl.policy: host: example.com protocol: https ----------- - diff --git a/docs/setup/settings.asciidoc b/docs/setup/settings.asciidoc index aebc494036ca9..fd28a9f12e759 100644 --- a/docs/setup/settings.asciidoc +++ b/docs/setup/settings.asciidoc @@ -225,7 +225,7 @@ In addition to this setting, trusted certificates may be specified via <> and/or <>. -| `elasticsearch.ssl.keyPassphrase:` +| [[elasticsearch-ssl-keyPassphrase]] `elasticsearch.ssl.keyPassphrase:` | The password that decrypts the private key that is specified via <>. This value is optional, as the key may not be encrypted. diff --git a/docs/user/dashboard/dashboard-troubleshooting.asciidoc b/docs/user/dashboard/dashboard-troubleshooting.asciidoc index d9bf80a5b1996..c23939ae5ffba 100644 --- a/docs/user/dashboard/dashboard-troubleshooting.asciidoc +++ b/docs/user/dashboard/dashboard-troubleshooting.asciidoc @@ -26,44 +26,3 @@ To enable *Labs*, contact your administrator, or configure the < Aggregation based*, then select *Timelion*. - -.. In your browser, open a new tab, the open the *Timelion* app. - -.. Select the chart you want to copy, then copy the chart expression. -+ -[role="screenshot"] -image::images/timelion-copy-expression.png[Timelion app chart] - -.. Go to the *Timelion* editor, paste the chart expression in the *Timelion expression* field, then click *Update*. -+ -[role="screenshot"] -image::images/timelion-vis-paste-expression.png[Timelion advanced editor UI] - -. Save the visualization. - -.. In the toolbar, click *Save to library*. - -.. Enter the *Title* and add any applicable <>. - -.. Make sure that *Add to Dashboard after saving* is selected. - -.. Click *Save and return*. -+ -The Timelion visualization panel appears on the dashboard. -+ -[role="screenshot"] -image::user/dashboard/images/timelion-dashboard.png[Final dashboard with saved Timelion app worksheet] - diff --git a/docs/user/dashboard/timelion.asciidoc b/docs/user/dashboard/timelion.asciidoc index 8d89adc454d63..19565c1ab99e6 100644 --- a/docs/user/dashboard/timelion.asciidoc +++ b/docs/user/dashboard/timelion.asciidoc @@ -13,8 +13,6 @@ The syntax enables some features that classical point series charts don't offer, [role="screenshot"] image:dashboard/images/timelion.png[Timelion] -deprecated::[7.0.0,"*Timelion* is still supported. The *Timelion app* is deprecated in 7.0, replaced by dashboard features. In 7.16 and later, the *Timelion app* is removed from {kib}. To prepare for the removal of *Timelion app*, you must migrate *Timelion app* worksheets to a dashboard. For information on how to migrate *Timelion app* worksheets, refer to <>."] - [float] ==== Timelion expressions diff --git a/package.json b/package.json index 2f7ae04e59536..a1aa20f98b016 100644 --- a/package.json +++ b/package.json @@ -193,7 +193,7 @@ "base64-js": "^1.3.1", "bluebird": "3.5.5", "brace": "0.11.1", - "broadcast-channel": "^4.2.0", + "broadcast-channel": "^4.7.0", "chalk": "^4.1.0", "cheerio": "^1.0.0-rc.10", "chokidar": "^3.4.3", diff --git a/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.test.tsx b/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.test.tsx index 9568f9c894e24..6abe96f228013 100644 --- a/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.test.tsx +++ b/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.test.tsx @@ -86,7 +86,12 @@ describe('InvestigateInResolverAction', () => { }); test('it does NOT render AddToCase context menu item when timelineId is not in the allowed list', () => { - const wrapper = mount(, { + // In order to enable alert context menu without a timelineId, event needs to be event.kind === 'event' and agent.type === 'endpoint' + const customProps = { + ...props, + ecsRowData: { ...ecsRowData, agent: { type: ['endpoint'] }, event: { kind: ['event'] } }, + }; + const wrapper = mount(, { wrappingComponent: TestProviders, }); wrapper.find(actionMenuButton).simulate('click'); diff --git a/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.tsx b/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.tsx index ed9ccb8a36033..2f107d80d3f64 100644 --- a/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.tsx +++ b/x-pack/plugins/security_solution/public/detections/components/alerts_table/timeline_actions/alert_context_menu.tsx @@ -164,6 +164,7 @@ const AlertContextMenuComponent: React.FC diff --git a/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.test.tsx b/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.test.tsx index a2f2ba331d959..eac526937551b 100644 --- a/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.test.tsx +++ b/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.test.tsx @@ -227,7 +227,7 @@ describe('take action dropdown', () => { }); }); - test('should disable the "Add Endpoint event filter" button if provided non-event or non-endpoint', async () => { + test('should hide the "Add Endpoint event filter" button if provided no event from endpoint', async () => { wrapper = mount( { ); wrapper.find('button[data-test-subj="take-action-dropdown-btn"]').simulate('click'); await waitFor(() => { - expect( - wrapper.find('[data-test-subj="add-event-filter-menu-item"]').first().getDOMNode() - ).toBeDisabled(); + expect(wrapper.exists('[data-test-subj="add-event-filter-menu-item"]')).toBeFalsy(); }); }); }); diff --git a/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.tsx b/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.tsx index a9a625d879a61..0d31b18fc9bc0 100644 --- a/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.tsx +++ b/x-pack/plugins/security_solution/public/detections/components/take_action_dropdown/index.tsx @@ -91,8 +91,6 @@ export const TakeActionDropdown = React.memo( const isEndpointEvent = useMemo(() => isEvent && isAgentEndpoint, [isEvent, isAgentEndpoint]); - const disableEventFilterAction = useMemo(() => !isEndpointEvent, [isEndpointEvent]); - const togglePopoverHandler = useCallback(() => { setIsPopoverOpen(!isPopoverOpen); }, [isPopoverOpen]); @@ -141,7 +139,7 @@ export const TakeActionDropdown = React.memo( const { eventFilterActionItems } = useEventFilterAction({ onAddEventFilterClick: handleOnAddEventFilterClick, - disabled: disableEventFilterAction, + disabled: !isEndpointEvent, }); const afterCaseSelection = useCallback(() => { @@ -167,8 +165,17 @@ export const TakeActionDropdown = React.memo( () => !isEvent && actionsData.ruleId ? [...statusActionItems, ...exceptionActionItems] - : eventFilterActionItems, - [eventFilterActionItems, exceptionActionItems, statusActionItems, isEvent, actionsData.ruleId] + : isEndpointEvent + ? eventFilterActionItems + : [], + [ + eventFilterActionItems, + isEndpointEvent, + exceptionActionItems, + statusActionItems, + isEvent, + actionsData.ruleId, + ] ); const { addToCaseActionItems } = useAddToCaseActions({ diff --git a/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.test.tsx b/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.test.tsx index 1da09bcf4e25f..c7c61c0311eaf 100644 --- a/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.test.tsx +++ b/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.test.tsx @@ -169,7 +169,7 @@ describe('Actions', () => { wrapper.find('[data-test-subj="timeline-context-menu-button"]').first().prop('isDisabled') ).toBe(false); }); - test('it enables for event.kind: alert and agent.type: endpoint', () => { + test('it disables for event.kind: alert and agent.type: endpoint', () => { const ecsData = { ...mockTimelineData[0].ecs, event: { kind: ['alert'] }, @@ -183,7 +183,7 @@ describe('Actions', () => { expect( wrapper.find('[data-test-subj="timeline-context-menu-button"]').first().prop('isDisabled') - ).toBe(false); + ).toBe(true); }); test('it shows the analyze event button when the event is from an endpoint', () => { const ecsData = { diff --git a/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.tsx b/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.tsx index f13a50ae1fe7e..e1d57076d41ed 100644 --- a/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.tsx +++ b/x-pack/plugins/security_solution/public/timelines/components/timeline/body/actions/index.tsx @@ -107,10 +107,7 @@ const ActionsComponent: React.FC = ({ const isContextMenuDisabled = useMemo( () => eventType !== 'signal' && - !( - (ecsData.event?.kind?.includes('event') || ecsData.event?.kind?.includes('alert')) && - ecsData.agent?.type?.includes('endpoint') - ), + !(ecsData.event?.kind?.includes('event') && ecsData.agent?.type?.includes('endpoint')), [eventType, ecsData.event?.kind, ecsData.agent?.type] ); diff --git a/yarn.lock b/yarn.lock index 25197ba1b9660..d9a1019c08074 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1268,7 +1268,7 @@ core-js-pure "^3.0.0" regenerator-runtime "^0.13.4" -"@babel/runtime@7.3.1", "@babel/runtime@^7.0.0", "@babel/runtime@^7.1.2", "@babel/runtime@^7.10.2", "@babel/runtime@^7.11.2", "@babel/runtime@^7.12.5", "@babel/runtime@^7.13.10", "@babel/runtime@^7.14.0", "@babel/runtime@^7.16.3", "@babel/runtime@^7.3.1", "@babel/runtime@^7.4.4", "@babel/runtime@^7.4.5", "@babel/runtime@^7.5.0", "@babel/runtime@^7.5.5", "@babel/runtime@^7.6.2", "@babel/runtime@^7.6.3", "@babel/runtime@^7.7.2", "@babel/runtime@^7.7.6", "@babel/runtime@^7.8.4", "@babel/runtime@^7.8.7", "@babel/runtime@^7.9.2": +"@babel/runtime@7.3.1", "@babel/runtime@^7.0.0", "@babel/runtime@^7.1.2", "@babel/runtime@^7.10.2", "@babel/runtime@^7.11.2", "@babel/runtime@^7.12.5", "@babel/runtime@^7.13.10", "@babel/runtime@^7.14.0", "@babel/runtime@^7.16.0", "@babel/runtime@^7.16.3", "@babel/runtime@^7.3.1", "@babel/runtime@^7.4.4", "@babel/runtime@^7.4.5", "@babel/runtime@^7.5.0", "@babel/runtime@^7.5.5", "@babel/runtime@^7.6.2", "@babel/runtime@^7.6.3", "@babel/runtime@^7.7.2", "@babel/runtime@^7.7.6", "@babel/runtime@^7.8.4", "@babel/runtime@^7.8.7", "@babel/runtime@^7.9.2": version "7.16.3" resolved "https://registry.yarnpkg.com/@babel/runtime/-/runtime-7.16.3.tgz#b86f0db02a04187a3c17caa77de69840165d42d5" integrity sha512-WBwekcqacdY2e9AF/Q7WLFUWmdJGJTkbjqTjoMDgXkVZ3ZRUvOPsLb5KdwISoQVsbP+DQzVZW4Zhci0DvpbNTQ== @@ -8746,19 +8746,19 @@ broadcast-channel@^3.4.1: rimraf "3.0.2" unload "2.2.0" -broadcast-channel@^4.2.0: - version "4.2.0" - resolved "https://registry.yarnpkg.com/broadcast-channel/-/broadcast-channel-4.2.0.tgz#9ca93a23a31036266c2c9b0f8f55bd21594b8f82" - integrity sha512-XX9yNnIy/v2T+HR5EKIH7ziM2mYTefsrzZ2lkCmFZxwCDG7Ns7HLIooUXA114sCeFRJ4MEXEgdMapxfPDh9Xkg== +broadcast-channel@^4.7.0: + version "4.7.0" + resolved "https://registry.yarnpkg.com/broadcast-channel/-/broadcast-channel-4.7.0.tgz#4f5c31982f627eae4ffe463623ba36a9e7da1992" + integrity sha512-1C7wDPqeiKkwpScqFP044MsPAtxxDNKZzOnJmkHaTuOlUdaMLo11op56NrCOMiRh8dzktstcNsiHELGeTMKnNQ== dependencies: - "@babel/runtime" "^7.7.2" + "@babel/runtime" "^7.16.0" detect-node "^2.1.0" - js-sha3 "0.8.0" microseconds "0.2.0" nano-time "1.0.0" oblivious-set "1.0.0" + p-queue "6.6.2" rimraf "3.0.2" - unload "2.2.0" + unload "2.3.1" brorand@^1.0.1, brorand@^1.1.0: version "1.1.0" @@ -11921,16 +11921,16 @@ detect-newline@3.1.0, detect-newline@^3.0.0: resolved "https://registry.yarnpkg.com/detect-newline/-/detect-newline-3.1.0.tgz#576f5dfc63ae1a192ff192d8ad3af6308991b651" integrity sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA== +detect-node@2.1.0, detect-node@^2.1.0: + version "2.1.0" + resolved "https://registry.yarnpkg.com/detect-node/-/detect-node-2.1.0.tgz#c9c70775a49c3d03bc2c06d9a73be550f978f8b1" + integrity sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g== + detect-node@^2.0.4: version "2.0.4" resolved "https://registry.yarnpkg.com/detect-node/-/detect-node-2.0.4.tgz#014ee8f8f669c5c58023da64b8179c083a28c46c" integrity sha512-ZIzRpLJrOj7jjP2miAtgqIfmzbxa4ZOr5jJc601zklsfEx9oTzmmj2nVpIPRpNlRTIh8lc1kyViIY7BWSGNmKw== -detect-node@^2.1.0: - version "2.1.0" - resolved "https://registry.yarnpkg.com/detect-node/-/detect-node-2.1.0.tgz#c9c70775a49c3d03bc2c06d9a73be550f978f8b1" - integrity sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g== - detect-port-alt@1.1.6: version "1.1.6" resolved "https://registry.yarnpkg.com/detect-port-alt/-/detect-port-alt-1.1.6.tgz#24707deabe932d4a3cf621302027c2b266568275" @@ -13361,7 +13361,7 @@ eventemitter2@^6.4.3: resolved "https://registry.yarnpkg.com/eventemitter2/-/eventemitter2-6.4.3.tgz#35c563619b13f3681e7eb05cbdaf50f56ba58820" integrity sha512-t0A2msp6BzOf+QAcI6z9XMktLj52OjGQg+8SJH6v5+3uxNpWYRR3wQmfA+6xtMU9kOC59qk9licus5dYcrYkMQ== -eventemitter3@^4.0.0: +eventemitter3@^4.0.0, eventemitter3@^4.0.4: version "4.0.7" resolved "https://registry.yarnpkg.com/eventemitter3/-/eventemitter3-4.0.7.tgz#2de9b68f6528d5644ef5c59526a1b4a07306169f" integrity sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw== @@ -21299,6 +21299,14 @@ p-map@^4.0.0: dependencies: aggregate-error "^3.0.0" +p-queue@6.6.2: + version "6.6.2" + resolved "https://registry.yarnpkg.com/p-queue/-/p-queue-6.6.2.tgz#2068a9dcf8e67dd0ec3e7a2bcb76810faa85e426" + integrity sha512-RwFpb72c/BhQLEXIZ5K2e+AhgNVmIejGlTgiB9MzZ0e93GRvqZ7uSi0dvRF7/XIXDeNkra2fNHBxTyPDGySpjQ== + dependencies: + eventemitter3 "^4.0.4" + p-timeout "^3.2.0" + p-retry@^3.0.1: version "3.0.1" resolved "https://registry.yarnpkg.com/p-retry/-/p-retry-3.0.1.tgz#316b4c8893e2c8dc1cfa891f406c4b422bebf328" @@ -21321,6 +21329,13 @@ p-timeout@^2.0.1: dependencies: p-finally "^1.0.0" +p-timeout@^3.2.0: + version "3.2.0" + resolved "https://registry.yarnpkg.com/p-timeout/-/p-timeout-3.2.0.tgz#c7e17abc971d2a7962ef83626b35d635acf23dfe" + integrity sha512-rhIwUycgwwKcP9yTOOFK/AKsAopjjCakVqLHePO3CC6Mir1Z99xT+R63jZxAT5lFZLa2inS5h+ZS2GvR99/FBg== + dependencies: + p-finally "^1.0.0" + p-try@^1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/p-try/-/p-try-1.0.0.tgz#cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3" @@ -28323,6 +28338,14 @@ unload@2.2.0: "@babel/runtime" "^7.6.2" detect-node "^2.0.4" +unload@2.3.1: + version "2.3.1" + resolved "https://registry.yarnpkg.com/unload/-/unload-2.3.1.tgz#9d16862d372a5ce5cb630ad1309c2fd6e35dacfe" + integrity sha512-MUZEiDqvAN9AIDRbbBnVYVvfcR6DrjCqeU2YQMmliFZl9uaBUjTkhuDQkBiyAy8ad5bx1TXVbqZ3gg7namsWjA== + dependencies: + "@babel/runtime" "^7.6.2" + detect-node "2.1.0" + unpipe@1.0.0, unpipe@~1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/unpipe/-/unpipe-1.0.0.tgz#b2bf4ee8514aae6165b4817829d21b2ef49904ec"