elastic · KOTungseth · Dec 10, 2024 · Dec 9, 2024 · Dec 9, 2024 · Dec 9, 2024
@@ -1,2 +1,3 @@
 * @elastic/platform-docs
-/.github/workflows/co-docs-builder.yml @elastic/docs-engineering
+/.github/workflows/co-docs-builder.yml @elastic/docs-engineering
+/serverless/serverless-changelog.asciidoc @elastic/docs 
@@ -0,0 +1,10 @@
+[[serverless-changelog]]
+== Serverless changelog
+++++
+<titleabbrev>Changelog</titleabbrev>
+++++
+
+include::./pages/serverless-changelog.asciidoc[leveloffset=+2]
+
+include::./pages/serverless-known-issues.asciidoc[leveloffset=+2]
+
@@ -19,4 +19,4 @@ include::./index-serverless-elasticsearch.asciidoc[]
 include::{observability-serverless}/index.asciidoc[]
 include::{security-serverless}/index.asciidoc[]
 include::./index-serverless-project-settings.asciidoc[]
-include::./serverless-changelog.asciidoc[]
+include::./index-serverless-changelog.asciidoc[]
@@ -0,0 +1,79 @@
+Review the latest improvements and changes to Elastic Cloud Serverless.
+
+For serverless API changes, refer to https://www.elastic.co/docs/api/changes[APIs Changelog].
+
+For serverless changes in Cloud Console, refer to https://www.elastic.co/guide/en/cloud/current/ec-release-notes.html[Elasticsearch Service Documentation: Release notes].
+
+[discrete]
+[[serverless-changelog-12092024]]
+== December 9, 2024
+
+[discrete]
+[[features-enhancements-12092024]]
+=== Features and enhancements
+* Elastic Observability Serverless adds a new sub-feature for managing private locations ({kibana-pull}201100[#201100]).
+* Elastic Observability Serverless adds the ability to configure SLO advanced settings from the UI ({kibana-pull}200822[#200822]).
+* Elastic Security Serverless adds support for suppressing EQL sequence alerts ({kibana-pull}189725[#189725]).
+* Elastic Security Serverless adds a `/trained_models_list` endpoint to retrieve complete data for the Trained Model UI ({kibana-pull}200977[#200977]).
+* Machine Learning adds an action to include log rate analysis in a case ({kibana-pull}199694[#199694]).
+* Machine Learning enhances the Kibana API to optimize trained models ({kibana-pull}201549[#201549]).
+
+[discrete]
+[[fixes-12092020]]
+=== Fixes
+* Fixes Slack API connectors not being displayed under the Slack connector type when adding a new connector to a rule in Alerting ({kibana-pull}202315[#202315]).
+* Fixes point visibility regression in dashboard visualizations ({kibana-pull}202358[#202358]).
+* Improves help text for creator and view count features on the Dashboard listing page ({kibana-pull}202488[#202488]).
+* Highlights matching field values when performing a KQL search on a keyword field in Discover ({kibana-pull}201952[#201952]).
+* Adds support for the *Inspect* option in saved search embeddables in Discover ({kibana-pull}202947[#202947]).
+* Enables the ability to clear user-specific system prompts in Elastic Observability Serverless ({kibana-pull}202279[#202279]).
+* Fixes an error when opening the rule flyout in Elastic Observability Serverless ({kibana-pull}202386[#202386]).
+* Improves handling of Opsgenie as the default connector in Elastic Observability Serverless ({kibana-pull}201923[#201923]).
+* Fixes issues with actions on charts in Elastic Observability Serverless ({kibana-pull}202443[#202443]).
+* Adds a flyout to the table view in Infrastructure Inventory in Elastic Observability Serverless ({kibana-pull}202646[#202646]).
+* Fixes service names with spaces not being URL-encoded properly for {{context.viewInAppUrl}} in Elastic Observability Serverless ({kibana-pull}202890[#202890]).
+* Enhances access query logic to handle user ID and name conditions in Elastic Observability Serverless ({kibana-pull}202833[#202833]).
+* Fixes an APM rule error message when a KQL filter is invalid in Elastic Observability Serverless ({kibana-pull}203096[#203096]).
+* Restricts and rejects CEF logs in automatic import and redirects them to the CEF integration in Elastic Security Serverless ({kibana-pull}201792[#201792]).
+* Updates the copy of the install rules title and message in Elastic Security Serverless ({kibana-pull}202226[#202226]).
+* Clears errors on the second entity engine initialization API call in Elastic Security Serverless ({kibana-pull}202903[#202903]).
+* Restricts unsupported log formats in Elastic Security Serverless ({kibana-pull}202994[#202994]).
+* Removes errors related to Enterprise Search nodes in Elasticsearch Serverless ({kibana-pull}202437[#202437]).
+* Ensures consistency in web crawler naming in Elasticsearch Serverless ({kibana-pull}202738[#202738]).
+* Fixes editor cursor jumpiness in ES|QL ({kibana-pull}202389[#202389]).
+* Implements rollover of data streams on subobject mapper exceptions in Fleet ({kibana-pull}202689[#202689]).
+* Fixes trained models to retrieve up to 10,000 models when spaces are synced in Machine Learning ({kibana-pull}202712[#202712]).
+* Fixes a Log Rate Analysis embeddable error on the Alerts page in AiOps ({kibana-pull}203093[#203093]).
+
+[discrete]
+[[serverless-changelog-12032024]]
+== December 3, 2024
+
+[discrete]
+[[features-enhancements-12032024]]
+=== Features and enhancements
+* Adds tabs for Import Entities and Engine Status to the Entity Store ({kibana-pull}201235[#201235]).
+* Adds status tracking for agentless integrations to {fleet} ({kibana-pull}199567[#199567]).
+* Adds a new {ml} module that can detect anomalous activity in host-based logs ({kibana-pull}195582[#195582]).
+* Allows custom Mapbox Vector Tile sources to style map layers and provide custom legends ({kibana-pull}200656[#200656]).
+* Excludes stale SLOs from counts of healthy and violated SLOs ({kibana-pull}201027[#201027]).
+* Adds a **Continue without adding integrations** button to the {elastic-sec} Dashboards page that takes you to the Entity Analytics dashboard ({kibana-pull}201363[#201363]).
+* Displays visualization descriptions under their titles ({kibana-pull}198816[#198816]).
+
+[discrete]
+[[fixes-12032024]]
+=== Fixes
+* Hides the *Clear* button when no filters are selected ({kibana-pull}200177[#200177]).
+* Fixes a mismatch between how wildcards were handled in previews versus actual rule executions ({kibana-pull}201553[#201553]).
+* Fixes incorrect Y-axis and hover values in the Service Inventory's Log rate chart ({kibana-pull}201361[#201361]).
+* Disables the *Add note* button in the alert details flyout for users who lack privileges ({kibana-pull}201707[#201707]).
+* Fixes the descriptions of threshold rules that use cardinality ({kibana-pull}201162[#201162]).
+* Disables the *Install All* button on the **Add Elastic Rules** page when rules are installing ({kibana-pull}201731[#201731]).
+* Reintroduces a data usage warning on the Entity Analytics Enablement modal ({kibana-pull}201920[#201920]).
+* Improves accessibility for the **Create a connector** page ({kibana-pull}201590[#201590]).
+* Fixes a bug that could cause {agents} to get stuck updating during scheduled upgrades ({kibana-pull}202126[#202126]).
+* Fixes a bug related to starting {ml} deployments with autoscaling and no active nodes ({kibana-pull}201256[#201256]).
+* Initializes saved objects when the **Trained Model** page loads ({kibana-pull}201426[#201426]).
+* Fixes the display of deployment stats for unallocated deployments of {ml} models ({kibana-pull}202005[#202005]).
+* Enables the solution type search for instant deployments ({kibana-pull}201688[#201688]).
+* Improves the consistency of alert counts across different views ({kibana-pull}202188[#202188]).
@@ -0,0 +1,64 @@
+[[serverless-known-issues]]
+= Serverless known issues
+++++
+<titleabbrev>Known issues</titleabbrev>
+++++
+
+[discrete]
+[[known-issues-201820]]
+== Exceptions tab fails to load
+
+On December 5, 2024, it was discovered the {sec-serverless} **Exceptions** tab fails to load when exceptions contain comments with newline characters (`\n`). For details, refer to ({kibana-issue}201820[#201820]).
+
+*Custom rules workaround* + 
+
+. Go to the **Rules** page, then <<import-export-rules-ui,export>> the rule or rules with the exception lists with newline characters. 
+. Open the `.ndjson` file, then remove the newline characters from the `comments`.
+. Go to the **Rules** page, then <<import-export-rules-ui,re-import>> the rules. Make sure to select **Overwrite existing exception lists with conflicting "list_id"**.
+
+*Prebuilt rules workaround* + 
+
+. For the exception lists with newline characters, fetch the IDs associated with the rule.
+.. Go to the **Rules** page.
+.. Open the rule details, then go to the page URL.
+.. Copy the URL id string. 
++
+For example, in the http://host.name/app/security/rules/id/167a5f6f-2148-4792-8226-b5e7a58ef46e URL, copy the `167a5f6f-2148-4792-8226-b5e7a58ef46e` id string.
+.. To specify the `id` when fetching the rule details, use the {api-kibana-serverless}/operation/operation-readrule[retrieve a detection rule API]:
++
+[source,console]
+----
+curl -H 'Authorization: ApiKey API_KEY_HERE' -H 'kbn-xsrf: true' -H 'elastic-api-version: 2023-10-31' KIBANA_URL/api/detection_engine/rules?id=167a5f6f-2148-4792-8226-b5e7a58ef46e
+----
++
+The JSON response contains the `id`, `list_id`, and `namespace_type` values in the `exceptions_list` key: 
++
+[source,console]
+----
+{
+  "id": "167a5f6f-2148-4792-8226-b5e7a58ef46e",
+  "exceptions_list": [
+    {
+      "id": "490525a2-eb66-4320-95b5-88bdd1302dc4",
+      "list_id": "f75aae6f-0229-413f-881d-81cb3abfbe2d",
+      "namespace_type": "single"
+    }
+  ]
+}
+----
++
+. To retrieve the exception list with newline characters, use the export exceptions API with the `id`, `list_id`, and `namespace_type` values:
++
+[source,console]
+----
+curl -XPOST -H 'Authorization: ApiKey API_KEY_HERE' -H 'kbn-xsrf: true' -H 'elastic-api-version: 2023-10-31' 'KIBANA_URL/api/exception_lists/_export?list_id=f75aae6f-0229-413f-881d-81cb3abfbe2d&id=490525a2-eb66-4320-95b5-88bdd1302dc4&namespace_type=single' -o list.ndjson
+----
++
+. Open the `.ndjson` file, then remove the newline characters from the `comments[].comment` values.
+. Go to the <<security-shared-exception-lists,**Shared Exception Lists**>> page.
+. To re-import the exception list, use the **Import exception lists** option.
++
+Since the exception list exists, the import fails, and the option to overwrite the existing list appears. 
+. Select the overwrite option, then resubmit the request to import the exception list.
+
+NOTE: To export and re-import exceptions for the Elastic Endpoint rule, use the <<security-shared-exception-lists,**Shared Exception Lists**>> page.