- Affected offering: ECH (aka ESS). Serverless is not affected.
- Affected versions:
v8.17.0, v8.17.1.
- The issue will be mitigated in
v8.17.2.
- Workaround: increasing Kibana RAM to 2 GB fixes the issue.
What happens: whenever a user opens a page in Security Solution, we attempt to install the Fleet package with prebuilt rules. If the package is not installed yet, Kibana starts downloading the latest version of the package and crashes with an Out Of Memory error. Then it restarts automatically. Then the issue can be reproduced again.
This is fixed in v8.17.2 on the Fleet side by elastic/kibana#208869 and elastic/kibana#208475.
We should add a known issue to the 8.17.0 and 8.17.1 Security release notes.
Related ticket: elastic/ingest-docs#1671