From d5ef49f919c17d7e0eae60f216fc6321a11f3c6a Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Thu, 30 Oct 2025 12:44:54 -0700 Subject: [PATCH 1/3] =?UTF-8?q?Known=20issue=20=E2=80=94=20CSPM=20and=20As?= =?UTF-8?q?set=20Discovery=209.2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- release-notes/elastic-security/known-issues.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index cb1a12887f..c81ca11354 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -16,6 +16,24 @@ Known issues are significant defects or limitations that may impact your impleme % ::: +:::{dropdown} CSPM and Asset Management integrations don't ingest data when deployed using agent-based technology if {{kib}} is hosted on AWS +Applies to: ECH 9.2.0 deployments hosted on AWS, {{serverless-short}} deployments hosted on AWS + +**Impact** + +If your ECH or {{serverless-short}} deployment is hosted on AWS, new Cloud Security Posture Management (CSPM) and Asset Inventory integrations will fail to produce findings when deployed using agent-based deployment. ECH and {{serverless-short}} deployments hosted on GCP or Azure are not affected. Integrations that use agentless deployment are not affected. + +**Workaround** + +Two workarounds are available: + +1. Turn off the **Enable Cloud Connector** advanced setting. + 1. Go to the **Advanced Settings** menu using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). + 2. In the **Security Solution** section, turn off the **Enable Cloud Connector** option. + 3. Your agent-based integration deployments will work as expected. +2. Use agentless deployment. + 1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected. + ::::{dropdown} Filters may not apply correctly on the Alerts page Applies to: 9.1.0, 9.1.1, 9.1.2, and 9.1.3 From 5d90acdedbb0d5c349749f22101145c55672ba66 Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Thu, 30 Oct 2025 12:57:16 -0700 Subject: [PATCH 2/3] adds serverless RN --- .../elastic-cloud-serverless/known-issues.md | 18 ++++++++++++++++++ release-notes/elastic-security/known-issues.md | 12 ++++++------ 2 files changed, 24 insertions(+), 6 deletions(-) diff --git a/release-notes/elastic-cloud-serverless/known-issues.md b/release-notes/elastic-cloud-serverless/known-issues.md index 0807ff7f00..791af929bb 100644 --- a/release-notes/elastic-cloud-serverless/known-issues.md +++ b/release-notes/elastic-cloud-serverless/known-issues.md @@ -16,6 +16,24 @@ Known issues are significant defects or limitations that may impact your impleme ## Active +:::{dropdown} CSPM and Asset Management integrations don't ingest data when deployed using agent-based technology if {{kib}} is hosted on AWS +Applies to: {{serverless-short}} deployments hosted on AWS + +**Details** + +If your {{serverless-short}} deployment is hosted on AWS, new Cloud Security Posture Management (CSPM) and Asset Inventory integrations will fail to produce findings when deployed using agent-based deployment. {{serverless-short}} deployments hosted on GCP or Azure are not affected. Integrations that use agentless deployment are not affected. + +**Workaround** + +Two workarounds are available: + +1. Turn off the **Enable Cloud Connector** advanced setting. + 1. Go to the **Advanced Settings** menu using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). + 2. In the **Security Solution** section, turn off the **Enable Cloud Connector** option. + 3. Your agent-based integration deployments will work as expected. +2. Use agentless deployment. + 1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected. + ::::{dropdown} Alerts aren't generated for rules with alert flapping off and an alert delay higher than 1 **Details** diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index c81ca11354..d9a9818bbf 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -17,22 +17,22 @@ Known issues are significant defects or limitations that may impact your impleme % ::: :::{dropdown} CSPM and Asset Management integrations don't ingest data when deployed using agent-based technology if {{kib}} is hosted on AWS -Applies to: ECH 9.2.0 deployments hosted on AWS, {{serverless-short}} deployments hosted on AWS +Applies to: ECH 9.2.0 deployments hosted on AWS **Impact** -If your ECH or {{serverless-short}} deployment is hosted on AWS, new Cloud Security Posture Management (CSPM) and Asset Inventory integrations will fail to produce findings when deployed using agent-based deployment. ECH and {{serverless-short}} deployments hosted on GCP or Azure are not affected. Integrations that use agentless deployment are not affected. +If your ECH deployment is hosted on AWS, new Cloud Security Posture Management (CSPM) and Asset Inventory integrations will fail to produce findings when deployed using agent-based deployment. ECH deployments hosted on GCP or Azure are not affected. Integrations that use agentless deployment are not affected. **Workaround** Two workarounds are available: 1. Turn off the **Enable Cloud Connector** advanced setting. - 1. Go to the **Advanced Settings** menu using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). - 2. In the **Security Solution** section, turn off the **Enable Cloud Connector** option. - 3. Your agent-based integration deployments will work as expected. + 1. Go to the **Advanced Settings** menu using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). + 2. In the **Security Solution** section, turn off the **Enable Cloud Connector** option. + 3. Your agent-based integration deployments will work as expected. 2. Use agentless deployment. - 1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected. + 1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected. ::::{dropdown} Filters may not apply correctly on the Alerts page From b9d1067a1f3103c882f1625aaf638fa63b7aac5f Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Thu, 30 Oct 2025 13:02:53 -0700 Subject: [PATCH 3/3] adds closing colons --- release-notes/elastic-cloud-serverless/known-issues.md | 1 + release-notes/elastic-security/known-issues.md | 1 + 2 files changed, 2 insertions(+) diff --git a/release-notes/elastic-cloud-serverless/known-issues.md b/release-notes/elastic-cloud-serverless/known-issues.md index 791af929bb..fb8ccd7efc 100644 --- a/release-notes/elastic-cloud-serverless/known-issues.md +++ b/release-notes/elastic-cloud-serverless/known-issues.md @@ -33,6 +33,7 @@ Two workarounds are available: 3. Your agent-based integration deployments will work as expected. 2. Use agentless deployment. 1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected. +:::: ::::{dropdown} Alerts aren't generated for rules with alert flapping off and an alert delay higher than 1 diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index d9a9818bbf..1cc1a00265 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -33,6 +33,7 @@ Two workarounds are available: 3. Your agent-based integration deployments will work as expected. 2. Use agentless deployment. 1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected. +:::: ::::{dropdown} Filters may not apply correctly on the Alerts page