[Elastic Workflows] add elastic_workflows Fleet content package#18433
Open
rosomri wants to merge 9 commits intoelastic:mainfrom
Open
[Elastic Workflows] add elastic_workflows Fleet content package#18433rosomri wants to merge 9 commits intoelastic:mainfrom
rosomri wants to merge 9 commits intoelastic:mainfrom
Conversation
Introduce a content package with a Workflows execution overview dashboard for existing `.workflows-executions` data (Kibana 9.3+). Includes `_dev` scripts to regenerate the dashboard JSON. Closes elastic/security-team#15773
Contributor
✅ Vale Linting ResultsNo issues found on modified lines! The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale. |
andrewkroh
added
documentation
4 tasks
andrewkroh
reviewed
Apr 21, 2026
rosomri
added
the
Team:One Workflow
rosomri
commented
Apr 21, 2026
andrewkroh
removed
dashboard
…script Update the dashboard saved object with the latest Kibana export: - New KPI panels: Slowest Workflow (max duration), Timed Out (with trendline) - Failures KPI now includes a trendline sparkline - Compact KPI layout with hidden titles and valueFontMode: fit - Treemap visualizations for Trigger Breakdown and Status Breakdown - Duration formatting using humanizePrecise instead of raw ms - Badge color mode for Per-Workflow Summary table columns - Pinned panel controls: isTestRun (exclude test runs) and spaceId filter Add _dev/scripts/import_dashboard_ndjson.py: - Converts a Kibana saved-object NDJSON export to the integration format - Strips transient fields (accessControl, created_at, updated_at, etc.) - Re-IDs the object to match the integration's expected dashboard ID - Re-injects adHocDataViews definitions that Kibana strips on export (checks both indexPatternId in layers and the references array) Usage: python3 import_dashboard_ndjson.py <path-to-ndjson>
Kibana omits fromUnit on export, causing duration columns to default to seconds instead of milliseconds. Fix the Avg Duration KPI and add automatic fix_duration_formats to the import script for future exports.
… subscription Dashboard best-practice alignment: - Rename panel titles to be self-explanatory (remove redundant suffixes) - Hide axis titles on all XY charts via axisTitlesVisibilitySettings - Clear redundant column labels used as implicit axis titles - Fix Per-Workflow Summary duration columns to use humanizePrecise Update README to reflect current dashboard panels and data sources. Change subscription requirement from basic to enterprise.
Remove build_dashboard.py and its intermediate output create_final_dashboard.json. The dashboard is now maintained by editing in Kibana and importing via import_dashboard_ndjson.py.
💚 Build Succeeded
History
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the
elastic_workflowsFleet content package — a dashboard-only integration for monitoring Elastic Workflows executions, performance, and failure rates.Package contents
adhoc_wf) pointing to.workflows-executionsDev scripts (
_dev/scripts/)Three scripts support dashboard development and maintenance:
build_dashboard.py: Programmatically defines the dashboard in a readable Python DSL (panel builders, shared constants for KQL queries, ad-hoc data views). Outputs an intermediate JSON to_dev/shared/create_final_dashboard.json.build_so.py: Takes the intermediate representation and builds the final Kibana saved-object JSON atkibana/dashboard/<id>.json. Handles UUID generation for Lens column IDs, reference collection,panelsJSON/optionsJSONstring encoding, and thetypeMigrationVersionfield. This is the authoritative builder for the dashboard.import_dashboard_ndjson.py: Converts a Kibana saved-object NDJSON export back into the integration format. Useful when the dashboard is edited directly in Kibana and re-exported. It:accessControl,created_at,updated_at,created_by,updated_by,version,managed,coreMigrationVersion)adHocDataViewsdefinitions that Kibana strips on export (checks bothindexPatternIdin layers and thereferencesarray)python3 import_dashboard_ndjson.py <path-to-ndjson>Metadata
content(no data streams or agent policies)elastic/workflows-eng^9.3.0enterpriseScreenshots