Release notes

{kib} 8.9.0

For information about the {kib} 8.9.0 release, review the following information.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.9.0, review the breaking changes, then mitigate the impact to your application.

Hide Uptime app if no data is available

Details
The Uptime app now gets hidden from the interface when it doesn’t have any data for more than a week. If you have a standalone Heartbeat pushing data to Elasticsearch, the Uptime app is considered active. You can disable this automatic behavior from the advanced settings in Kibana using the Always show legacy Uptime app option. For synthetic monitoring, we now recommend to use the new Synthetics app. For more information, refer to {kibana-pull}159118[#159118]

Remove synthetics pattern from Uptime settings

Details
Data from browser monitors and monitors of all types created within the Synthetics App or via the Elastic Synthetics Fleet Integration will no longer appear in Uptime. For more information, refer to {kibana-pull}159012[#159012]

Deprecations

The following functionality is deprecated in 8.9.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.9.0.

Hide ability to create legacy input controls

Details
The option to create legacy input controls when creating a new visualization is hidden. For more information, refer to {kibana-pull}156455[#156455]

Remove legacy field stats

Details
Legacy felid stats that were previously shown within a popover have been removed. For more information, refer to {kibana-pull}155503[#155503]

Features

{kib} 8.9.0 adds the following new and notable features.

APM

Removes default service name and environment {kibana-pull}159901[#159901]
Adds Agent status action {kibana-pull}159227[#159227]
Added sessionSampleRate to agent configuration, which is a mobile specific setting {kibana-pull}159061[#159061]
Adds storage explorer improvements {kibana-pull}157303[#157303]

Elastic Security

For the Elastic Security 8.9.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.9.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds CloudFormation install method to CSPM {kibana-pull}159994[#159994]
Adds flags to give permissions to write to any dataset and namespace {kibana-pull}157897[#157897]
Disables Agent ID verification for Observability projects {kibana-pull}157400[#157400]
Setup ignore_malformed in fleet {kibana-pull}157184[#157184]

Lens & Visualizations

Adds several new capabilities for annotation groups in Lens {kibana-pull}152623[#152623]

Observability

Adds SLO create callout to service overview, transactions page and transactions details {kibana-pull}159958[#159958]
Adds the Logs threshold alert detail page, which provides more information and context about the Logs threshold alert {kibana-pull}159947[#159947]

Security

Adds vulnerability dashboard tables {kibana-pull}159699[#159699]
Adds new Vulnerabilities tab to the Group by Resource page {kibana-pull}158987[#158987]
Adds display errors and check licenses for actions in response actions {kibana-pull}155254[#155254]
Adds common response actions tab in the alert flyout {kibana-pull}155362[#155362]

For more information about the features introduced in 8.9.0, refer to What’s new in 8.9.

Enhancements and bug fixes

For detailed information about the 8.9.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Adds a Mustache lambda for alerting actions to format numbers with {{#FormatNumber}} using Intl.NumberFormat {kibana-pull}159644[#159644]
Removes bulk snoozing of rules in Select All mode {kibana-pull}159749[#159749]
Adds refresh button to maintenance windows list {kibana-pull}159618[#159618]
Adds the feature for a Slack API to have allowed list on channels {kibana-pull}159534[#159534]
Integrate Conditional Actions with several Observability rule types {kibana-pull}159522[#159522]
Adds AAD Fields API {kibana-pull}158516[#158516]
Adds API to retrieve the fieldsForAAD from a given rule type {kibana-pull}158516[#158516]
Improves the performance of clearing expired snooze schedules {kibana-pull}157909[#157909]

APM

Ensure Saved Objects are versionable {kibana-pull}159881[#159881]
Adds active alerts column for transaction group table {kibana-pull}159552[#159552]
Adds an OpenAI integration {kibana-pull}158678[#158678]
Adds Storage explorer improvements {kibana-pull}157303[#157303]
Adds logic to replace transaction histogram with summary for backwards compatibility {kibana-pull}155714[#155714]

Dashboard

Adds design enhancements to the clone experience in Dashboards {kibana-pull}159752[#159752]
Adds enhancements to the empty state screen in Dashboards {kibana-pull}158496[#158496]
Adds a query DSL documentation link to filters UI {kibana-pull}156543[#156543]
Adds a counter displaying the min/max values of the time series counter field in the field popover {kibana-pull}155499[#155499]
Adds the ability for Controls to recover from non-fatal error state {kibana-pull}158087[#158087]

Discover

Updates Discover sharing capabilities to enable sharing a link when using temporary data views {kibana-pull}154947[#154947]

Elastic Security

For the Elastic Security 8.9.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.9.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds agent integration health reporting in the Fleet UI {kibana-pull}158826[#158826]

Lens & Visualizations

Adds feature to ignore global filters at layer level in Lens {kibana-pull}159248[#159248]
Adds significant terms support as ranking function in Top Values in lens {kibana-pull}158962[#158962]
Adds support for curved, linear and stepped lines in Lens {kibana-pull}158896[#158896]
Allow wildcard searching in options list {kibana-pull}158427[#158427]
Adds tag cloud to Lens {kibana-pull}157751[#157751]

Machine Learning

Data Frame Analytics: Allow interval time range selection in custom URLs {kibana-pull}159874[#159874]
Increase limit of anomaly charts to max of 50 {kibana-pull}159816[#159816]
Enable auto-complete on filter by influencer search box on anomaly explorer page {kibana-pull}159739[#159739]
Moves import buttons in file data visualizer {kibana-pull}159722[#159722]
Explain Log Rate Spikes: Adds secondary sort by doc_count only if sorted by p-value {kibana-pull}159568[#159568]
Adds hyperlink to anomaly explorer for job from anomaly layer in maps {kibana-pull}159268[#159268]
Support pipelines deletion and force flag for delete action {kibana-pull}158671[#158671]
Use auto layout for anomalies table columns {kibana-pull}157687[#157687]
Versioning all ML APIs {kibana-pull}156949[#156949]

Management

Transforms: Adds extra checkpoint stats to details tab {kibana-pull}157287[#157287]
Adds in-product docs for cross cluster search index pattern input {kibana-pull}156155[#156155]

Maps

Adds a new layer wizard for the spatial join option {kibana-pull}156618[#156618]

Metrics

Adds copilot to hosts process {kibana-pull}159413[#159413]

Observability

Adds TLS Certificates page copied from Uptime, which only displays certificates from the synthetics application {kibana-pull}159541[#159541]
Adds creating, editing, deleting monitors in private locations, which no longer requires all permissions in feet. You will only need synthetics write permissions. {kibana-pull}159378[#159378]
Adds burn rate windows to SLO detail page {kibana-pull}159750[#159750]
Adds Normalize by time and scale factor on Diff TopN functions page {kibana-pull}159394[#159394]
Adds a severity label to SLO burn rate rule reason message {kibana-pull}158954[#158954]
Adds Copy JSON button to Clipboard for SLO form {kibana-pull}157902[#157902]
Adds Custom Metric SLI {kibana-pull}157421[#157421]
Adds Data Views to index pattern selector {kibana-pull}158033[#158033]

Platform

The savedObjects export API now supports exporting all types using the * wildcard. Please refer to the documentation {kibana-pull}159289[#159289]

Security

Hide create spaces button when limit is reached {kibana-pull}159102[#159102]

Uptime

Adds the option to send an HTML email instead of a plaintext email to users when assigned to a case {kibana-pull}159335[#159335]
Implement standard time formatting {kibana-pull}143799[#143799]
Adds a new field, called category, to categorize cases. Users can create a new category, set or select an existing one on a case, and filter by multiple categories on the cases table. {kibana-pull}159890[#159890]

Bug Fixes

Alerting

Fixes containment boundaries not being re-fetched when a query changes {kibana-pull}157408[#157408]
Fixes the charts on Log threshold breached details page {kibana-pull}160321[#160321]

APM

Fixes infinite loading of APM alert table {kibana-pull}161134[#161134]
Fixes other bucket message and sorting {kibana-pull}159919[#159919]
Fixes percentiles for service transaction metrics {kibana-pull}158913[#158913]
Fixes stack trace on errors when only available as plain text {kibana-pull}156831[#156831]

Cases

Fixes a bug in the alerts table where you cannot create a new case when attaching alerts to a case from the cases modal {kibana-pull}160526[#160526]
Fixes an issue where the following special characters could not be included in the case tags: \\():<>"* because it resulted in a bug where the case would not be displayed in the cases table when filtered for those tags. These characters are now handled correctly and the cases will be shown in the table. {kibana-pull}159815[#159815]

Dashboard

Fixes an issue where a Dashboard redirect alias displayed a blank screen instead of redirecting properly {kibana-pull}161043[#161043]
Fixes an issue where the time slider would override custom time ranges {kibana-pull}160938[#160938]
Fixes an issue where if the Reset button is clicked after changing the Title or Description in Panel settings before clicking Save, the Title or Description would revert to previous values {kibana-pull}159430[#159430]
Fixes dashboard reset when initial state has no controls {kibana-pull}159404[#159404]

Design

Accessibility: Make links on job validation step distinguished from surrounding text {kibana-pull}160608[#160608]
Fixes the range slider rendering issues and performance improvements {kibana-pull}159271[#159271]

Discover

Fixes refresh fields when entering Discover {kibana-pull}160195[#160195]

Elastic Security

For the Elastic Security 8.9.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.9.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Fixes bug that prevented index.mapping settings to be propagated into component templates from default settings {kibana-pull}157289[#157289]

Lens & Visualizations

Fixes missing datasource migration sometimes failing to run in Lens {kibana-pull}160129[#160129]
Removes wrong padding on the dashboard in Lens {kibana-pull}159992[#159992]
Fixes counter fields being used with Top values in Lens {kibana-pull}159709[#159709]
Fixes dimension labels being partially translated on language change in Lens {kibana-pull}159089[#159089]
Fixes the threshold visibility rendering in XY charts {kibana-pull}158917[#158917]
Fixes a tag cloud warning about container being too small that never disappears {kibana-pull}159611[#159611]
Default format in Lens will apply dataView field format as usual now in new Metric visualization {kibana-pull}158468[#158468]
Fixes the handling of partition chart empty slices in Lens {kibana-pull}158346[#158346]
Make reference lines use the correct formatter when configured in Lens {kibana-pull}158266[#158266]
Fixes an issue where dropping a date field into a XY visualization with multiple mixed layers resets the chart type of all layers in Lens {kibana-pull}157871[#157871]
Fixes an issue where incompatible actions were visible from the panels {kibana-pull}156667[#156667]

Machine Learning

Fixing time range selector in recognizer wizard {kibana-pull}160910[#160910]
Fixes Anomaly Explorer URL for alerting context with non-default space {kibana-pull}160899[#160899]
Hide inference stats for PyTorch models {kibana-pull}160599[#160599]
Outlier detection results: ensure feature influence color persists on column position change {kibana-pull}160470[#160470]
Anomaly detection: fixes time format used in query for datafeed chart {kibana-pull}160325[#160325]
Hide cache_miss_count for PyTorch models {kibana-pull}160265[#160265]
Fixes time range in link to data visualizer after file upload {kibana-pull}160189[#160189]
Fixes links to dashboards in Lens created anomaly detection jobs {kibana-pull}160156[#160156]
Adds warning to log pattern analysis page if data view is not time based {kibana-pull}160021[#160021]

Management

Fixes creation and editing of composite runtime fields with dots in the names {kibana-pull}160458[#160458]
Fixes decreasing network delays when cross cluster search is running by sending ccs_minimize_roundtrips=true for async search requests {kibana-pull}159848[#159848]
Fixes max page search size limit for Transforms {kibana-pull}159052[#159052]
Fixes issue with single value for fields parameters {kibana-pull}157930[#157930]
Fixes data view timestamp validation {kibana-pull}150398[#150398]
Fixes theming for search sessions management {kibana-pull}160182[#160182]

Maps

Fixes geojson layer with joins and no left source matches stuck in loading state {kibana-pull}160222[#160222]
Fixes size legend not indicating when min/max clamped by standard deviation range {kibana-pull}156927[#156927]

Metrics

Fixes metric_explorer flaky test{kibana-pull}157194[#157194]

Operations

Fixes Elasticsearch snapshot startup for parameters with dots in their path {kibana-pull}161022[#161022]

Platform

Fixes theming for error toast messages {kibana-pull}160219[#160219]
Fixes a bug that could cause old Kibana deployments to loose their uiSettings after an upgrade {kibana-pull}159649[#159649]
Fixes the handling of non-existing objects in _copy_saved_objects API call {kibana-pull}158036[#158036]

Security

Fixes theming of CodeEditors {kibana-pull}159638[#159638]
Update session viewer Policy permissions to use Policy specific check {kibana-pull}160448[#160448]
Fixes an issue when opening an endpoint exception from the Alert’s summary flyout actions button, the exception did not auto-populate {kibana-pull}159908[#159908]

Uptime

Fixes parsing of response check on JSON expressions {kibana-pull}161634[#161634]
Fixes an API error stating no key exists when a user was visiting the getting started page or tried to add monitor view by enabling synthetics {kibana-pull}160360[#160360]
Fixes copy on private locations popover {kibana-pull}159740[#159740]

{kib} 8.8.2

Review the following information about the {kib} 8.8.2 release.

Known issues

Kibana can run out of memory during an upgrade when there are many {fleet} agent policies.

Details
Due to a schema version update, during {fleet} setup in 8.8.x, all agent policies are being queried and deployed. This action triggers a lot of queries to the Elastic Package Registry (EPR) to fetch integration packages. As a result, there is an increase in Kibana’s resident memory usage (RSS).

Impact
Because the default batch size of 100 for schema version upgrade of {fleet} agent policies is too high, this can cause Kibana to run out of memory during an upgrade. For example, we have observed 1GB Kibana instances run out of memory during an upgrade when there were 20 agent policies with 5 integrations in each.

Workaround
Two workaround options are available:

Increase the Kibana instance size to 2GB. So far, we are not able to reproduce the issue with 2GB instances.
Set xpack.fleet.setup.agentPolicySchemaUpgradeBatchSize to 2 in the kibana.yml and restart the Kibana instance(s).

In 8.9.0, we are addressing this by changing the default batch size to 2.

Bug Fixes

APM

Fixes the latency graph displaying all service transactions, rather than the selected one, on the transaction detail page {kibana-pull}159085[#159085]

Dashboard

Fixes styling of top nav bar {kibana-pull}159754[#159754]
Fixes alias redirect and update error handling {kibana-pull}159742[#159742]
Fixes time range regression {kibana-pull}159337[#159337]

Elastic Security

For the Elastic Security 8.8.2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.8.2 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Fixes usage of AsyncLocalStorage for audit log {kibana-pull}159807[#159807]
Fixing issue of returning output API key {kibana-pull}159179[#159179]

Logs

Fixes log categorization UI failure due to an infinite loop {kibana-pull}159090[#159090]

Machine Learning

Hiding pattern analysis button for non-time series data {kibana-pull}160051[#160051]
Fixes blocking forced downgrades/installation if indices can’t be deleted {kibana-pull}159814[#159814]

Maps

Fixes layer group loading indicator always on when group has non-visible layer {kibana-pull}159517[#159517]
Fixes geo line source not loading unless the Maps application is open {kibana-pull}159432[#159432]
Fixes Maps orphan sources on layer deletion {kibana-pull}159067[#159067]

Monitoring

Permanently hide the telemetry notice on dismissal {kibana-pull}159893[#159893]

Observability

Handle buildEsQuery error (such as leading wildcard) in status change {kibana-pull}159891[#159891]

Platform

Fixes global search crash on missing tag {kibana-pull}159196[#159196]
Fixes a regression where the "saved_object_resolve" audit action was not being logged per object {kibana-pull}160014[#160014]

Uptime

Ensures that users can configure custom Content-Type headers for HTTP monitors in the Synthetics app {kibana-pull}159737[#159737]
Fixes an issue where alerting on Synthetics monitors was sometimes delayed {kibana-pull}159511[#159511]

{kib} 8.8.1

Review the following information about the {kib} 8.8.1 release.

Known issues

Kibana can run out of memory during an upgrade when there are many {fleet} agent policies.

Details
Due to a schema version update, during {fleet} setup in 8.8.x, all agent policies are being queried and deployed. This action triggers a lot of queries to the Elastic Package Registry (EPR) to fetch integration packages. As a result, there is an increase in Kibana’s resident memory usage (RSS).

Impact
Because the default batch size of 100 for schema version upgrade of {fleet} agent policies is too high, this can cause Kibana to run out of memory during an upgrade. For example, we have observed 1GB Kibana instances run out of memory during an upgrade when there were 20 agent policies with 5 integrations in each.

Workaround
Two workaround options are available:

Increase the Kibana instance size to 2GB. So far, we are not able to reproduce the issue with 2GB instances.
Set xpack.fleet.setup.agentPolicySchemaUpgradeBatchSize to 2 in the kibana.yml and restart the Kibana instance(s).

In 8.9.0, we are addressing this by changing the default batch size to 2.

Memory leak in {fleet} audit logging.

Details
{fleet} introduced audit logging for various CRUD (create, read, update, and delete) operations in version 8.8.0.

While audit logging is not enabled by default, we have identified an off-heap memory leak in the implementation of {fleet} audit logging that can result in poor {kib} performance, and in some cases {kib} instances being terminated by the OS kernel’s oom-killer. This memory leak can occur even when {kib} audit logging is not explicitly enabled (regardless of whether xpack.security.audit.enabled is set in the kibana.yml settings file).

Impact
The version 8.8.2 release includes in {kibana-pull}159807[a fix] for this problem. If you are using {fleet} integrations and {kib} audit logging in version 8.8.0 or 8.8.1, you should upgrade to 8.8.2 or above to obtain the fix.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.8.1, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in the {kib} 8.8.1 release.

To review the breaking changes in the previous release, check {kibana-ref-all}/8.8/release-notes-8.8.0.html#breaking-changes-8.8.0[8.8.0].

Enhancements

Elastic Security

For the Elastic Security 8.8.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Add Elastic Agent UI instructions for Universal Profile {kibana-pull}158936[#158936]

Bug Fixes

Alerting

Fixes a bug where ML embeddables, OsQuery, and IoCs attachments in a case render the wrong view {kibana-pull}158441[#158441]
Makes alert links shorter {kibana-pull}158582[#158582]
Throws a Mustache error when validating action message for warnings {kibana-pull}158668[#158668]
Adds null checks when iterating through an index template list {kibana-pull}158742[#158742]

APM

Displays the size of hidden indices in storage explorer {kibana-pull}158746[#158746]
Changes the APM latency value and latency threshold to microseconds {kibana-pull}158703[#158703]
Fixes service transaction metrics by using transaction.duration.histogram for percentile aggregations {kibana-pull}158909[#158909]

Discover

Update single doc view locator to URL encode rowId {kibana-pull}158635[#158635]
Fixes the display of grid row selection when in dark mode {kibana-pull}158231[#158231]

Elastic Security

For the Elastic Security 8.8.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Include hidden data streams in package upgrade {kibana-pull}158654[#158654]

Logs

Fixes Log Categorization UI failure due to an infinite loop {kibana-pull}159090[#159090]

Machine Learning

Increases calendar events request limit {kibana-pull}158726[#158726]
Disables the delete option for deployed models {kibana-pull}158533[#158533]
Applies theme based on the User Profile settings {kibana-pull}158258[#158258]

Maps

Fixes toolbar action button not filled when selected {kibana-pull}158284[#158284]
Fixes Maps to display dark theme when enabled {kibana-pull}158219[#158219]

Operations

Fixes configuration stacking order {kibana-pull}158827[#158827]

Platform

Fixes {kib} crashing on Safari versions prior to 16.4 {kibana-pull}158825[#158825]
Updates all aliases with a single updateAliases() when relocating saved objects {kibana-pull}158940[#158940]
Fixes a race condition that could cause intermittent upgrade migration failures when {kib} connects to a single node {es} cluster {kibana-pull}158182[#158182]
Dynamically reduces the migrations.batchSize value when {kib} encounters a migration batch that’s too big to process {kibana-pull}157494[#157494]

{kib} 8.8.0

Review the following information about the {kib} 8.8.0 release.

Known issues

Kibana can run out of memory during an upgrade when there are many {fleet} agent policies.

Details
Due to a schema version update, during {fleet} setup in 8.8.x, all agent policies are being queried and deployed. This action triggers a lot of queries to the Elastic Package Registry (EPR) to fetch integration packages. As a result, there is an increase in Kibana’s resident memory usage (RSS).

Impact
Because the default batch size of 100 for schema version upgrade of {fleet} agent policies is too high, this can cause Kibana to run out of memory during an upgrade. For example, we have observed 1GB Kibana instances run out of memory during an upgrade when there were 20 agent policies with 5 integrations in each.

Workaround
Two workaround options are available:

Increase the Kibana instance size to 2GB. So far, we are not able to reproduce the issue with 2GB instances.
Set xpack.fleet.setup.agentPolicySchemaUpgradeBatchSize to 2 in the kibana.yml and restart the Kibana instance(s).

In 8.9.0, we are addressing this by changing the default batch size to 2.

Failed upgrades to 8.8.0 can cause bootlooping and data loss

Details
The 8.8.0 release splits the .kibana index into multiple saved object indices. If an upgrade to 8.8.0 partially succeeds, but not all the indices are created successfully, {kib} may be unable to successfully complete the upgrade on the next restart.

This can result in a loss of saved objects during the upgrade. This can also leave {kib} in a bootlooping state where it’s unable to start due to write_blocked indices.

Impact
The 8.8.1 release includes in {kibana-pull}158940[a fix] for this problem. Customers affected by a failed 8.8.0 upgrade should contact Elastic support. For more information, see the {kibana-issue}158733[related issue].

Memory leak in {fleet} audit logging.

Details
{fleet} introduced audit logging for various CRUD (create, read, update, and delete) operations in version 8.8.0. While audit logging is not enabled by default, we have identified an off-heap memory leak in the implementation of {fleet} audit logging that can result in poor {kib} performance, and in some cases {kib} instances being terminated by the OS kernel’s oom-killer. This memory leak can occur even when {kib} audit logging is not explicitly enabled (regardless of whether xpack.security.audit.enabled is set in the kibana.yml settings file).

Impact
The version 8.8.2 release includes in {kibana-pull}159807[a fix] for this problem. If you are using {fleet} integrations and {kib} audit logging in version 8.8.0 or 8.8.1, you should upgrade to 8.8.2 or above to obtain the fix.

Monitors in Synthetics may stop running

Details
If Monitor Management was enabled prior to 8.6.0, the API key generated internally will not contain the required permissions. The Synthetics app will attempt to fix this automatically in {kibana-pull}155203[#155203] when a user with sufficient privileges visits this page for the first time after upgrading to 8.8.0.

Impact
All monitors configured to run on Elastic’s global managed testing infrastructure will stop running until a user with permissions has loaded the Synthetics app.

Network throttling disabled for browser monitors in Synthetics

Details
Network throttling has been temporarily disabled for browser-based Synthetics monitors running on Elastic’s global managed testing infrastructure and private locations. This will be enabled again at some point in the future. We’re providing frequent updates on this issue in this document.

Impact
With network throttling being disabled, your monitors may run more quickly (i.e. have a lower duration) than you observed previously and than when network throttling is enabled again in the future. No monitor configurations have been changed, but the network throttling settings are ignored at the moment.

Alert failures when migrating to 8.8.0 from 8.6 or earlier

Details
If a cluster meets all of the following conditions, its {elastic-sec} and {observability} rules will fail and no actions will be sent:

The {elastic-sec} and {observability} rules were created in version 8.6 or earlier releases.
There must be an {ref}/index-templates.html[index template] (for any index) that isn’t composed of component templates.

The following error messages in the {kib} log occur when {kib} starts or when the rules run:

Error installing component template .alerts-ecs-mappings - Cannot read properties of undefined (reading 'includes')

Error installing common resources for AlertsService. No additional resources will be installed and rule execution may be impacted. - Failure during installation. Cannot read properties of undefined (reading 'includes')

Impact
If you have upgraded to 8.8.0 and your alerting rules fail, upgrade to 8.8.1.

Incorrect attachments are added to cases

Details
When you attach {ml} visualizations, OsQuery, or Indicators of Compromise (IoCs) to a case, each attachment has its own view which renders in the Activity tab. For these attachments, a bug was introduced in 8.8.0:

If you add two different attachments on a case, the view will be the same for both.
If you add one attachment to one case and another to a different case, in the second case you will view the attachment of the first case.

Alerts are not affected.

Impact
There are no mitigations for the first scenario, other than upgrading to 8.8.1. For the second scenario, refreshing the case fixes the issue.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.8.0, review the breaking changes, then mitigate the impact to your application.

Removes legacy project monitor API

Details
The project monitor API for Synthetics in Elastic Observability has been removed. For more information, refer to {kibana-pull}155470[#155470].

Impact
In 8.8.0 and later, an error appears when you use the project monitor API.

Changes the privileges for alerts and cases

Details
The privileges for attaching alerts to cases has changed. For more information, refer to {kibana-pull}147985[#147985].

Impact
To attach alerts to cases, you must have Read access to an {observability} or Security feature that has alerts and All access to the Cases feature. For detailed information, check {kib} privileges and Configure access to cases.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.7/release-notes-8.7.0.html#breaking-changes-8.7.0[8.7.0] | {kibana-ref-all}/8.6/release-notes-8.6.0.html#breaking-changes-8.6.0[8.6.0] | {kibana-ref-all}/8.5/release-notes-8.5.0.html#breaking-changes-8.5.0[8.5.0] | {kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Deprecations

The following functionality is deprecated in 8.8.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.8.0.

Deprecates ephemeral Task Manager settings

Details
The following Task Manager settings are deprecated:

xpack.task_manager.ephemeral_tasks.enabled
xpack.task_manager.ephemeral_tasks.request_capacity
xpack.alerting.maxEphemeralActionsPerAlert

For more information, refer to {kibana-pull}154275[#154275].

Impact
To improve task execution resiliency, remove the deprecated settings from the kibana.yml file. For detailed information, check Task Manager settings in {kib}.

Deprecates monitor schedules

Details
Synthetics and Uptime monitor schedules and zip URL fields are deprecated. For more information, refer to {kibana-pull}154010[#154010] and {kibana-pull}154952[#154952].

Impact
When you create monitors in Uptime Monitor Management and the Synthetics app, unsupported schedules are automatically transfered to the nearest supported schedule. To use zip URLs, use project monitors.

Deprecates Agent reassign API PUT endpoint

Details
The PUT endpoint for the agent reassign API is deprecated. For more information, refer to {kibana-pull}152236[#152236].

Impact
Use the POST endpoint for the agent reassign API.

Deprecates total in /agent_status Fleet API

Details
The total field in /agent_status Fleet API responses is deprecated. For more information, refer to {kibana-pull}151564[#151564].

Impact
The /agent_status Fleet API now returns the following statuses:

all — All active and inactive
active — All active

Deprecates Elastic Synthetics integration

Details
The Elastic Synthetics integration is deprecated. For more information, refer to {kibana-pull}149506[#149506].

Impact
To monitor endpoints, pages, and user journeys, go to {observability} → Synthetics (beta).

Features

{kib} 8.8.0 adds the following new and notable features.

Alerting

Adds Maintenance Window Task Runner Integration + New AAD/Event Log Fields {kibana-pull}154761[#154761]
Adds support for users authenticated with API keys to manage alerting rules {kibana-pull}154189[#154189]
Adds the ability to control allowed attached file mime types and the maximum file size {kibana-pull}154013[#154013]
Adds query and timeframe params to RuleAction to filter alerts {kibana-pull}152360[#152360]

APM

Adds group-by feature in APM rules {kibana-pull}155001[#155001]
Adds queues as nodes to the service map {kibana-pull}153784[#153784]
Adds the ability to display the latest agent version in agent explorer {kibana-pull}153643[#153643]
Adds table tabs showing summary of metrics {kibana-pull}153044[#153044]
Adds warning to Edit Rule Flyout when publicUrl is not configured {kibana-pull}149832[#149832]

Cases

Adds support for file attachments in Cases {kibana-pull}154436[#154436]
Adds the Cases column to the alerts table {kibana-pull}150963[#150963]
Adds filtering and sorting for the case activity {kibana-pull}149396[#149396]
Adds the ability to filter user activities with pagination {kibana-pull}152702[#152702]

Dashboard

Pins the unified search bar and dashboard toolbar to the top of the dashboard page when scrolling {kibana-pull}145628[#145628]

Discover

Adds log pattern analysis {kibana-pull}153449[#153449]

Elastic Security

For the Elastic Security 8.8.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.8.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds audit logging for core CRUD operations {kibana-pull}152118[#152118]
Adds modal to display versions changelog {kibana-pull}152082[#152082]

Infrastructure

Adds the logs tab to the Hosts View {kibana-pull}152995[#152995]
Adds Alerts tab into Hosts View {kibana-pull}149579[#149579]
Adds refactoring to the Time and Position log stream state {kibana-pull}149052[#149052]

Machine Learning

Adds ELSER config to the Trained Models UI {kibana-pull}155867[#155867]
Adds support for custom URLs in jobs for Data Frame Analytics {kibana-pull}154287[#154287]
Adds support to filter fields from grouping in Explain Log Rate Spikes {kibana-pull}153864[#153864]
Adds log pattern analysis in Discover {kibana-pull}153449[#153449]

Management

Adds support for global settings {kibana-pull}148975[#148975]
Adds Custom Branding settings to Global settings {kibana-pull}150080[#150080]

Maps

Adds map.emsUrl to docker env variables {kibana-pull}153441[#153441]

Observability

Adds the ability to changes all SLO assets to managed, and indices to hidden {kibana-pull}154953[#154953]
Adds Exploratory View to a separate app {kibana-pull}153852[#153852]

Platform

Adds text {kibana-pull}151631[#151631]

Security

Adds CloudFormation agent install method {kibana-pull}155045[#155045]
Adds Vul mgmt flyout details panel {kibana-pull}154873[#154873]
Adds Vulnerabilities Table {kibana-pull}154388[#154388]
Adds the ability to select a theme preference for {kib} in the User Profile {kibana-pull}151507[#151507]

Uptime

Adds UUID to RuleAction {kibana-pull}148038[#148038]

For more information about the features introduced in 8.8.0, refer to What’s new in 8.8.

Enhancements and bug fixes

For detailed information about the 8.8.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Adds the ability to predefine IDs when you create connectors {kibana-pull}155392[#155392]
Adds the ability to allow the footer added to emails sent from {kib} alerting rules to NOT be added {kibana-pull}154919[#154919]
Adds conditional actions UI for timeframe {kibana-pull}153944[#153944]
Adds a single view in the app function for rule actions variables and UI page {kibana-pull}148671[#148671]

APM

Adds error grouping key filter in error count rule type {kibana-pull}155410[#155410]
Adds transaction name filter in failed transaction rate rule type {kibana-pull}155405[#155405]
Replaces most used charts with the Lens embeddable {kibana-pull}155026[#155026]
Adds transaction name filter in latency threshold rule {kibana-pull}154241[#154241]
Adds Unified Search for APM {kibana-pull}153842[#153842]
Adds migratation for the remaining tx-based visualizations {kibana-pull}153375[#153375]
Adds migration for the tx latency chart and group stats to rollups/service metrics {kibana-pull}153162[#153162]
Disables agent configuration creation for opentelemetry agents {kibana-pull}150697[#150697]

Cases

Adds the ability to set a new connector to default {kibana-pull}151884[#151884]
Improves the design of the description markdown editor on the Cases page {kibana-pull}155151[#155151]

Dashboard

Adds support to Dashboard for searching saved objects by tags {kibana-pull}154946[#154946]
Adds reset button {kibana-pull}154872[#154872]
Adds unified dashboard settings {kibana-pull}153862[#153862]
Adds the ability to scroll to a new panel {kibana-pull}152056[#152056]

Discover

Adds the ability to allow wildcards in field search {kibana-pull}155540[#155540]
Adds a loading indicator during Discover table updates {kibana-pull}155505[#155505]
Adds drag & drop capabilities for adding columns to the table {kibana-pull}153538[#153538]
Adds a progress indicator when a saved search embeddable is updating {kibana-pull}152342[#152342]
Adds inline data fetching errors {kibana-pull}152311[#152311]
Adds a loading indicator for the classic table embeddable {kibana-pull}152072[#152072]
Adds the ability to suppress "Missing index" toasts {kibana-pull}149625[#149625]

Elastic Security

For the Elastic Security 8.8.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.8.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds support for fields of type aggregate_metric_double {kibana-pull}154920[#154920]
Adds overview dashboards in fleet {kibana-pull}154914[#154914]
Adds raw status to Agent details UI {kibana-pull}154826[#154826]
Adds support for dynamic_namespace and dynamic_dataset {kibana-pull}154732[#154732]
Adds the ability to show pipelines and mappings editor for input packages {kibana-pull}154077[#154077]
Adds placeholder to integration select field {kibana-pull}153927[#153927]
Adds the ability to show integration subcategories {kibana-pull}153591[#153591]
Adds the ability to create and update the package policy API return 409 conflict when names are not unique {kibana-pull}153533[#153533]
Adds the ability to display policy changes in Agent activity {kibana-pull}153237[#153237]
Adds the ability to display errors in Agent activity with link to Logs {kibana-pull}152583[#152583]
Adds support for select type in integrations {kibana-pull}152550[#152550]
Adds the ability to make spaces plugin optional {kibana-pull}152115[#152115]
Adds proxy ssl key and certificate to agent policy {kibana-pull}152005[#152005]
Adds _meta field has_experimental_data_stream_indexing_features {kibana-pull}151853[#151853]
Adds the ability to create templates and pipelines when updating package of a single package policy from type integration to input {kibana-pull}150199[#150199]
Adds user’s secondary authorization to Transforms {kibana-pull}154665[#154665]

Infrastructure

Adds Memory Available Graph To Hosts View {kibana-pull}151863[#151863]

Lens & Visualizations

Adds the ability to sync the partition legend order with the filters order in Lens {kibana-pull}154820[#154820]
Adds support for icons in the new Lens metric {kibana-pull}154210[#154210]
Adds the ability to share with reports in Lens {kibana-pull}153429[#153429]
Adds show and hide heatmap ticks in Lens {kibana-pull}153425[#153425]
Adds the ability to remove empty headers when there is no x-axis in Lens {kibana-pull}153420[#153420]
Adds improvements to the Metric formatter to support bit format in Lens {kibana-pull}153389[#153389]
Adds the ability to prevent default behaviour from action callback in Lens {kibana-pull}152842[#152842]
Adds Random Sampling to Lens {kibana-pull}151749[#151749]

Machine Learning

Data Frame Analytics creation wizard: add ability to add time field to result data view {kibana-pull}155669[#155669]
Display info when no datafeed preview results are found {kibana-pull}155650[#155650]
Adding ignore unavailable indices option to anomaly detection job wizards {kibana-pull}155527[#155527]
Support multiple model deployments {kibana-pull}155375[#155375]
Uses two weeks before now for default start time in job start date picker {kibana-pull}155312[#155312]
AIOps: Adds filter action for the Change point detection results {kibana-pull}155256[#155256]
Adds search links for AIOps Labs pages {kibana-pull}155202[#155202]
AIOps: Adds field stats for metric and split fields {kibana-pull}155177[#155177]
AIOps: Link from Explain Log Rate Spikes to Log Pattern Analysis {kibana-pull}155121[#155121]
Explain Log Rate Spikes: adds popover to analysis table for viewing other field values {kibana-pull}154689[#154689]
Explain Log Rate Spikes: Makes use of random sampling for overall histogram chart {kibana-pull}154520[#154520]
Explain Log Rate Spikes: Adds table action to copy filter to clipboard {kibana-pull}154311[#154311]
Change point detection: support for multiple metric and split fields {kibana-pull}154237[#154237]
Enhances support for counter fields in data visualizer / field statistics {kibana-pull}153893[#153893]
Custom sorting by message level on Notifications page {kibana-pull}153462[#153462]
Adds log pattern analysis in Discover {kibana-pull}153449[#153449]
Explain Log Rate Spikes: Improves grouping using the include option of the frequent_item_sets agg {kibana-pull}153091[#153091]
Data Frame Analytics exploration: adds actions column with link to discover {kibana-pull}151482[#151482]
Allows row expansion for blocked anomaly detection jobs {kibana-pull}151351[#151351]
Enhances job and datafeed config editors in the Advanced anomaly detection job wizard to provide suggestions and documentation {kibana-pull}146968[#146968]

Management

Adds timezone support for Transforms date histogram pivot configuration {kibana-pull}155535[#155535]
Adds more system indices to store internal data when you upgrade to 8.8.0 {kibana-pull}154888[#154888]
Adds improvements for supporting counter fields in Transforms {kibana-pull}154171[#154171]
Adds _schedule_now action to transform list {kibana-pull}153545[#153545]
Adds link to Discover from Index Management so users can directly look at documents of their indices {kibana-pull}152640[#152640]
Adds health information for alerting rule in Transforms{kibana-pull}152561[#152561]
Adds improvements for index pattern input in the data view flyout {kibana-pull}152138[#152138]
Adds a new description for the metadata field in ingest pipelines {kibana-pull}150935[#150935]
Adds a _meta field to the Ingest pipelines form {kibana-pull}149976[#149976]
Adds option to Reauthorize transform on Management page {kibana-pull}154736[#154736]

Maps

Adds metrics mask {kibana-pull}154983[#154983]

Observability

Adds invalid license page {kibana-pull}154866[#154866]
Adds empty state page links {kibana-pull}154678[#154678]
Adds upload symbols instructions to add data page {kibana-pull}154670[#154670]
Adds new CPU incl and CPU excl names {kibana-pull}154560[#154560]
Adds symbols callout on frame information window {kibana-pull}154478[#154478]
Adds Co2 and dollar cost columns and show more information action to functions table {kibana-pull}154097[#154097]
Adds improvements to functions {kibana-pull}153873[#153873]
Adds improvements to Flamegraph {kibana-pull}153598[#153598]
Adds the ability to open the Traces view when you click on a series in stacked charts {kibana-pull}153325[#153325]
Adds CPU usage column to replace CPU count column {kibana-pull}151696[#151696]

Querying & Filtering

Adds the ability to avoid duplicate host IP mapping {kibana-pull}155353[#155353]
Adds improvements to the saved query terminology {kibana-pull}154517[#154517]

Bug Fixes

Alerting

Fixes Delete Schedule button padding issue {kibana-pull}154503[#154503]
Fixes error message flash and throttle value reset {kibana-pull}154497[#154497]
Fixes broken custom snooze recurrences with monthly frequency {kibana-pull}154251[#154251]
Fixes an issue where you were unable to use retry on updateAPIKey conflict {kibana-pull}151802[#151802]

APM

Fixes an issue where you were uneable to enable framework alerts as data by default {kibana-pull}154076[#154076]
Upgraded EUI to v76.0.0 {kibana-pull}152506[#152506]
Fixes an issue where the OpenTelemetry process and system metrics were unsupported {kibana-pull}151826[#151826]

Canvas

Fixes createElement callback {kibana-pull}154398[#154398]

Cases

Fixes the Lens visualization in the comment and description markdown on the New Case page {kibana-pull}155897[#155897]

Dashboard

Fixes unsaved changes bug on empty dashboard {kibana-pull}155648[#155648]
Removed Reload on Clone and Replace Panel {kibana-pull}155561[#155561]
Fixes z index of toolbar items {kibana-pull}154501[#154501]
Fixes inherited input race condition {kibana-pull}154293[#154293]
Fixes Changing label of a geospatial filter causes filter disappear from map {kibana-pull}154087[#154087]

Discover

Adds a "Temporary" badge for temporary data views in the Alerts flyout {kibana-pull}155717[#155717]
Adds the ability to exclude counter fields from Breakdown options {kibana-pull}155532[#155532]
Adds the ability to skip requests for the time series metric counter field {kibana-pull}154319[#154319]
Fixes KQL autocomplete suggestions, which now support IP-type fields when the `autocomplete:valueSuggestionMethod advanced setting is set to terms_enum {kibana-pull}154111[#154111]
Fixes an issue where saved search "Manage searches" button was unable to apply the "search" type filter {kibana-pull}152565[#152565]

Elastic Security

For the Elastic Security 8.8.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.8.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Fixes package license check to use new conditions.elastic.subscription field {kibana-pull}154831[#154831]
Fixes the OpenAPI spec from /agent/upload to /agent/uploads for Agent uploads API {kibana-pull}151722[#151722]

Infrastructure

Adds a 404 page for metrics and logs {kibana-pull}153005[#153005]

Integrations

Fixes the slow process event for queries + xterm.js {kibana-pull}155326[#155326]

Kibana Home & Add Data

Fixes the guided onboarding API prefix to indicate that it’s intended for internal use {kibana-pull}155643[#155643]

Lens & Visualizations

Adds a default label on field changes for counter rate in Lens {kibana-pull}155509[#155509]
Panel titles and descriptions are now transferred to the converted Lens panels in TSVB {kibana-pull}154713[#154713]
Adds the ability to use the empty label for / terms in TSVB {kibana-pull}154647[#154647]
Fixes the formatting for the legend actions title {kibana-pull}153747[#153747]
Adds support for negative filter ratios in TSVB {kibana-pull}152053[#152053]
Adds the ability to always retain source order for multi-metric partition chart layers in Lens {kibana-pull}151949[#151949]

Machine Learning

Data Frame Analytics/Anomaly Detection: Custom URLs - entity dropdown reflects Data View update {kibana-pull}155096[#155096]
AIOps: Fix race condition where stale url state would reset search bar {kibana-pull}154885[#154885]
Fixes anomalies table drilldown time range for longer bucket spans {kibana-pull}153678[#153678]
Do not match time series counter fields with aggs in wizards {kibana-pull}153021[#153021]
Anomaly Detection datafeed chart: ensure chart y axis minimum set correctly {kibana-pull}152051[#152051]

Management

Improves the display when there are many columns {kibana-pull}155119[#155119]
Fixes stale submit handler ref update {kibana-pull}154242[#154242]
Fixes terms aggregation support in wizard for Transforms {kibana-pull}151879[#151879]
Fixes an issue where you were unable to accept additional dynamic field values for an index template {kibana-pull}150543[#150543]

Maps

Fixes raster layer is missing in pdf/png exports {kibana-pull}154686[#154686]
Fixes RegionMap chart type does not work with reporting {kibana-pull}153492[#153492]
Fixes layers are not displayed in offline environment and map.includeElasticMapsService not set to false {kibana-pull}152396[#152396]

Monitoring

Removes usage for the stats endpoint {kibana-pull}151082[#151082]

Observability

Adds space-specific feature privileges {kibana-pull}154734[#154734]
Adds the ability to properly handle NO DATA with multiple conditions with a mix of aggregations and document count thresholds {kibana-pull}154690[#154690]
Adds additional types to the fields to be use with cardinality aggregation for Metric Threshold Rule {kibana-pull}154197[#154197]
Adds persistent normalization mode {kibana-pull}153116[#153116]
Fixes refresh every in the alert search bar {kibana-pull}152246[#152246]

Platform

Fixes badge counter for global settings {kibana-pull}150869[#150869]

Querying & Filtering

Adds the ability to unload a selected query when it is deleted {kibana-pull}154644[#154644]
Removes failures in wrong custom timerange {kibana-pull}154643[#154643]

Reporting

Fixes report generation when image panel is in the end of the layout {kibana-pull}153846[#153846]
Updates Chromium to 111.0.5555.0 (r1095492) and Puppeteer to 19.7.2 {kibana-pull}153033[#153033]

Uptime

Fixes default date range on errors page {kibana-pull}155661[#155661]
Removes the "Beta" labels in Synthetics {kibana-pull}155589[#155589]
Fixes ML job/rule edit error {kibana-pull}155212[#155212]

{kib} 8.7.1

Review the following information about the {kib} 8.7.1 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.7.1, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in the {kib} 8.7.1 release.

To review the breaking changes in the previous release, check {kibana-ref-all}/8.7/release-notes-8.7.0.html#breaking-changes-8.7.0[8.7.0].

Enhancement

Fleet: The agent policy "Host name format" selector is now enabled by default {kibana-pull}154563[#154563]

Bug fixes

APM

Scoring is now applied by ES {kibana-pull}154627[#154627]
Fixes the APM Java Agent download link {kibana-pull}154023[#154023]
Improves the overflow message text {kibana-pull}153676[#153676]

Canvas

Disables the Edit in Lens action for the legacy savedVisualization function {kibana-pull}154656[#154656]
Fixes the home page redirect loop {kibana-pull}154568[#154568]
Fixes an issue where the image upload component was unable to load for image elements {kibana-pull}154385[#154385]

Dashboard

Improves controls flyout performance for data views with a large number of fields {kibana-pull}154004[#154004]

Discover

Fixes aborted request handling in the saved search embeddable {kibana-pull}153822[#153822]

Elastic Security

For the Elastic Security 8.7.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Fixes an issue where the Advanced options toggle in the policy editor was always showing {kibana-pull}154612[#154612]
Fixes an issue where the warning icon was unable to display in 8.7 {kibana-pull}154119[#154119]
Adds updates to output logic {kibana-pull}153226[#153226]

Infrastructure

Fixes the inventory table pagination navigation {kibana-pull}153849[#153849]

Lens & Visualizations

Fixes the timezone that Lens uses in normalize by unit {kibana-pull}154472[#154472]

Machine Learning

Change point detection: Fixes applied filters and queries to the charts {kibana-pull}154707[#154707]
Change point detection: Fixes support for running over relative time range {kibana-pull}154313[#154313]
Reinstates cold and frozen tier filters for Linux and Windows security modules {kibana-pull}153222[#153222]

Maps

Fixes an issue where geographic filters were unable to work when courier:ignoreFilterIfFieldNotInIndex was enabled {kibana-pull}153816[#153816]

Monitoring

Fixes the CCR read_exceptions alert {kibana-pull}153888[#153888]

Querying & Filtering

Fixes the ability to copy and paste the comma delimeter for multifields {kibana-pull}153772[#153772]

{kib} 8.7.0

Review the following information about the {kib} 8.7.0 release.

Known issues

Observability Overview shows empty User Experience panel

Details
Release 8.7.0 has a bug causing the Observability Overview page to show an empty User Experience panel, even when there is RUM data (fixed in {kibana-pull}154419[#154419]).

Impact
While the User Experience panel on the Observability Overview page is empty, any RUM data will still be available from the User Experience Dashboard.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.7.0, review the breaking changes, then mitigate the impact to your application.

Removes the fields list sampling setting

Details
lens:useFieldExistenceSampling has been removed from Advanced Settings. The setting allowed you to enable document sampling to determine the fields that are displayed in Lens. For more information, refer to {kibana-pull}149482[#149482].

Impact
In 8.1.0 and later, {kib} uses the field caps API, by default, to determine the fields that are displayed in Lens.

Removes the legacy pie chart visualization setting

Details
visualization:visualize:legacyPieChartsLibrary has been removed from Advanced Settings. The setting allowed you to create aggregation-based pie chart visualizations using the legacy charts library. For more information, refer to {kibana-pull}146990[#146990].

Impact
In 7.14.0 and later, the new aggregation-based pie chart visualization is available by default. For more information, check Aggregation-based.

Removes the current_upgrades endpoint

Details
The api/fleet/current_upgrades endpoint has been removed. For more information, refer to {kibana-pull}147616[#147616].

Impact
When you upgrade to 8.7.0, use the /action_status endpoint.

Removes the preconfiguration API route

Details
The /api/fleet/setup/preconfiguration API, which was released as generally available by error, has been removed. For more information, refer to {kibana-pull}147199[#147199].

Impact
Do not use /api/fleet/setup/preconfiguration. To manage preconfigured agent policies, use kibana.yml. For more information, check Preconfigured settings.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.6/release-notes-8.6.0.html#breaking-changes-8.6.0[8.6.0] | {kibana-ref-all}/8.5/release-notes-8.5.0.html#breaking-changes-8.5.0[8.5.0] | {kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Features

{kib} 8.7.0 adds the following new and notable features.

Alerting

Alerts Table- Inspect Modal {kibana-pull}149586[#149586]
Updates Rule Action Form to add Summary UX {kibana-pull}149367[#149367]
Users can now search for Cases by ID {kibana-pull}149233[#149233]
Alerts table row loading state {kibana-pull}148874[#148874]
Adds default summary message {kibana-pull}148749[#148749]
AlertsTable - Add persistent controls that show even on empty state {kibana-pull}148735[#148735]
Connector logs view {kibana-pull}148291[#148291]
Make action retries configurable {kibana-pull}147876[#147876]
Adds summary capabilities to the API and execution logic {kibana-pull}147360[#147360]
Adds flapping state to alert context for action parameters {kibana-pull}147136[#147136]
Adds triggered actions list in task state {kibana-pull}146183[#146183]
Moves “Notify When” and throttle from rule to action {kibana-pull}145637[#145637]

APM

Increases maxTraceItems {kibana-pull}149062[#149062]
Disables navigation to _other bucket and show warning tooltip {kibana-pull}148641[#148641]
Show warning if transaction groups are dropped {kibana-pull}148625[#148625]
Show alert indicator on alerts tab {kibana-pull}148048[#148048]
Adds latency alert history chart on the Alert details page for APM {kibana-pull}148011[#148011]
Adds alert annotation and threshold shade on the APM latency chart on the Alert Details page {kibana-pull}147848[#147848]
Errors group sampler {kibana-pull}147571[#147571]
Show alert indicator on service inventory page {kibana-pull}147511[#147511]
Adds alertDetailAppSection to the APM Rule Details page {kibana-pull}143298[#143298]

Dashboard

Adds the ability to load more options list suggestions when you scroll {kibana-pull}148331[#148331]
Adds alert filters to the Detection page {kibana-pull}146989[#146989]
Adds the image embeddable {kibana-pull}146421[#146421]
Adds the "Convert to lens" action to Dashboard {kibana-pull}146363[#146363]
Adds a step size to the time slider control {kibana-pull}145033[#145033]
Adds the ability to sort the options list suggestions {kibana-pull}144867[#144867]

Elastic Security

For the Elastic Security 8.7.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.7.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds ability to show FQDN of agents {kibana-pull}150239[#150239]
Adds getStatusSummary query parameter to GET /api/fleet/agents API {kibana-pull}149963[#149963]
Enabling diagnostics feature flag and changed query for files to use upload_id {kibana-pull}149575[#149575]
Experimental toggles for doc-value-only {kibana-pull}149131[#149131]
We now display agent metrics, CPU and memory in the agent list table and agent details page {kibana-pull}149119[#149119]
Implement subcategories in integrations UI {kibana-pull}148894[#148894]
Added rollout period to upgrade action {kibana-pull}148240[#148240]
Adds per-policy inactivity timeout + use runtime fields for agent status {kibana-pull}147552[#147552]
Show dataset combo box for input packages {kibana-pull}147015[#147015]
Adds UI controls to setting/outputs to configure new shipper {kibana-pull}145755[#145755]

Infrastructure

Adds link to ingest pipeline dashboard from Stack Monitoring {kibana-pull}149721[#149721]

Integrations

User friendly UX added alongside advanced yaml editor {kibana-pull}147900[#147900]
Custom fleet policy UX for new integration (cloud defend v1) {kibana-pull}147300[#147300]

Kibana Home & Add Data

Self-managed {kib} instances now have a link to instructions for migrating self-managed clusters to Elastic Cloud {kibana-pull}145523[#145523]

Lens & Visualizations

Adds the share link feature in Lens {kibana-pull}148829[#148829]

Machine Learning

Adds change point detection feature {kibana-pull}150308[#150308]
Remove Technical Preview label from the Trained Models UI {kibana-pull}149715[#149715]
Adds a new memory usage by job and by model view {kibana-pull}149419[#149419]
Allow Anomaly Detection geo jobs to be created from maps dashboard {kibana-pull}147797[#147797]
Adds geo fields support for Unified field list, add statistics flyover to Anomaly detection job creation wizards {kibana-pull}147322[#147322]
Anomaly Detection wizards: adds geo job wizard {kibana-pull}147043[#147043]

Management

Adds field statistics popovers for Data Frame Analytics & Transform creation wizards {kibana-pull}149879[#149879]
Transforms: Shows health status of transform in UI {kibana-pull}150359[#150359]

Monitoring

Adds duration configuration to Stack Monitoring Cluster Health rule {kibana-pull}147565[#147565]

Observability

Adds alert summary widget to overview page {kibana-pull}149581[#149581]
Adds AlertSummaryWidget full-size on the Alerts page {kibana-pull}148539[#148539]
Additional context for log threshold rule {kibana-pull}148503[#148503]
Adds charts to Alert Summary Widget {kibana-pull}148143[#148143]
Adds rule details locator and make AlertSummaryWidget clickable {kibana-pull}147103[#147103]
Adds groupByKeys context to recovered alerts for Log Threshold Rule and Metric Threshold Rule {kibana-pull}146874[#146874]
Adds new context variable called groupByKeys {kibana-pull}146633[#146633]
Adds new context variable for group by keys {kibana-pull}145654[#145654]
Adds Platinum license check for SLO APIs and SLO pages {kibana-pull}149055[#149055]
Create SLO / Edit SLO Form - Custom KQL {kibana-pull}147843[#147843]
SLO List {kibana-pull}147447[#147447]

Platform

New trigger actions for chart legends and table cell actions {kibana-pull}146779[#146779]

Querying & Filtering

Insight filter builder form as markdown plugin {kibana-pull}150363[#150363]
Adds the ability to support complex filters with AND/OR relationships {kibana-pull}143928[#143928]

Security

Adds the ability to allow administrators to limit the number of concurrent user sessions with xpack.security.session.сoncurrentSessions.maxSessions {kibana-pull}147442[#147442]
API Keys can now be updated with new role descriptors and metadata in the API Keys Management screen {kibana-pull}146237[#146237]

For more information about the features introduced in 8.7.0, refer to What’s new in 8.7.

Enhancements and bug fixes

For detailed information about the 8.7.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Bring flapping status and settings in o11y {kibana-pull}150483[#150483]
RenderCustomActionsRow with named params instead of args {kibana-pull}149304[#149304]
Ram 145739 use bulk enable disable in UI {kibana-pull}145928[#145928]
Create generic retry if function {kibana-pull}145713[#145713]
Return rules from bulk enable {kibana-pull}145391[#145391]
Create bulk disable endpoint {kibana-pull}145179[#145179]
Adding group by options to ES query rule type {kibana-pull}144689[#144689]

APM

Adds APM alert status to the alerts table {kibana-pull}150500[#150500]
Promotes the Alerts tab in the APM UI to GA {kibana-pull}150528[#150528]
Switches get environment function to use terms_enum api {kibana-pull}150175[#150175]
Uses (rolled up) service metrics for service inventory {kibana-pull}149938[#149938]
Adds KQL filter bar to the service map page {kibana-pull}149900[#149900]
Integrates Alert search bar in the alerts tab {kibana-pull}149610[#149610]
Adds Azure Functions support in the APM UI {kibana-pull}149479[#149479]
Adds a 404 page {kibana-pull}149471[#149471]
Adds single-click setup from Kibana {kibana-pull}148959[#148959]
Updates sparklines to support the bar chart graph style {kibana-pull}148702[#148702]
Adds a flamegraph legend {kibana-pull}147910[#147910]
Adds API keys to APM package policies {kibana-pull}147650[#147650]
Only renders waterfall items up until 3 levels {kibana-pull}147569[#147569]
Improves span links navigation {kibana-pull}147426[#147426]
Updates default refresh interval to 60 seconds {kibana-pull}146791[#146791]
Adds pagination to source map API {kibana-pull}145959[#145959]
Adds ability to offset point labels on maps {kibana-pull}145773[#145773]

Cases

Adds new column `Updated on ` in `all cases list ` table. This column can be sorted and can persist sorting options {kibana-pull}149116[#149116]
Improves the design of all cases list select modal {kibana-pull}149851[#149851]
Adds a button to Case Detail and All Cases List to copy case UUIDs to the clipboard {kibana-pull}148962[#148962]
Adds the ability to persist sorting, severity filter, and status filter in the URL and local storage for the all cases list {kibana-pull}148549[#148549]
Adds the ability to allow sorting by status, severity, and title in the all-cases list {kibana-pull}148193[#148193]
See "My recently assigned cases" to the recent cases widget of Overview dashboard in Security {kibana-pull}147763[#147763]
Adds the ability to bulk edit assignees on multiple cases {kibana-pull}146907[#146907]
Adds the ability to save draft comments {kibana-pull}146327[#146327]

Dashboard

Add new panel settings option to change the title, description, and time range for panels {kibana-pull}148301[#148301]
Anchor time slider to start {kibana-pull}148028[#148028]
Show document count beside options list suggestions {kibana-pull}146241[#146241]

Discover

Show "Copy value" button for any grid cell {kibana-pull}149525[#149525]
Align field list filters UI between Discover and Lens {kibana-pull}148547[#148547]
Persist field list sections state in local storage {kibana-pull}148373[#148373]
Enable adhoc data views creation from no data views state {kibana-pull}147850[#147850]
Adds a way to quickly expand time range from "No results" screen {kibana-pull}147195[#147195]
Optimize checking for multifields during grid rendering {kibana-pull}145698[#145698]
Align field list sections between Discover and Lens {kibana-pull}144412[#144412]
Update Discover’s histogram to use Lens, and add support for breaking down the histogram by top values of a selected field {kibana-pull}143117[#143117]

Elastic Security

For the Elastic Security 8.7.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.7.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Fixes discard changes link taking user to "page not found" {kibana-pull}150174[#150174]
Adds filebeat_input index to agent policy default {kibana-pull}149974[#149974]
Bugfix: Apply namespace from agent policy if there is one when adding integration {kibana-pull}149949[#149949]
Agent List: Inform users when agents have become inactive since last page view {kibana-pull}149226[#149226]
Experimental toggles for doc-value-only {kibana-pull}149131[#149131]
Create index templates and ingest pipeline at package policy creation time for input packages {kibana-pull}148772[#148772]
Do not allow namespace or dataset to be edited for input only package policies {kibana-pull}148422[#148422]
Adds deprecation warning to unenrollment timeout agent policy setting {kibana-pull}147963[#147963]
Adds active filter count to agent status filter {kibana-pull}147821[#147821]

Kibana UI

The list view in Dashboard, Visualize Library, Maps, and Graph now stores the latest state of the table in the URL {kibana-pull}145517[#145517]

Lens & Visualizations

Enable nice rounding for scalar axis in Lens {kibana-pull}149388[#149388]
Don’t block render on missing field in Lens {kibana-pull}149262[#149262]
Enable previous time shift when using a date histogram in Lens {kibana-pull}149126[#149126]
Displays the annotation icon on the annotation dimension label in Lens {kibana-pull}147686[#147686]
Extend explore data in Discover/open in Discover drilldown to visualizations with annotations and reference lines in Lens {kibana-pull}147541[#147541]
Moves the mosaic/waffle charts into GA in Lens {kibana-pull}146261[#146261]
Color by slice for multi-metric partition chart in Lens {kibana-pull}145948[#145948]
Save function to integrate listing Inspector {kibana-pull}145381[#145381]
Absolute time shift support in formula in Lens {kibana-pull}144564[#144564]

Machine Learning

Adding multi-modal distribution to the explain anomaly results {kibana-pull}150014[#150014]
Adding anomaly explanation help link {kibana-pull}149674[#149674]
Data Frame Analytics results view: add link to custom visualizations for viewing scatterplot charts {kibana-pull}149647[#149647]
Explain Log Rate Spikes: highlight field pairs unique to groups in expanded row {kibana-pull}148601[#148601]
Adds delete annotations option to delete and reset job modals {kibana-pull}147537[#147537]
Adds override for data which doesn’t contain a time field {kibana-pull}147504[#147504]
Adds responsive layout to Index data visualizer, fix doc count chart margin {kibana-pull}147137[#147137]
Use anomaly score explanation for chart tooltip multi-bucket impact {kibana-pull}146866[#146866]
Remove beta badge for Field statistics table in Discover {kibana-pull}140991[#140991]

Management

Transforms: Adds "Use full data" button to transform creation wizard {kibana-pull}150030[#150030]
Adds override field to Dot expander processor form {kibana-pull}149599[#149599]
Adds fields to Append Ingest Pipeline processor form {kibana-pull}149520[#149520]
Adds support for S3 intelligent tiering in Snapshot and Restore {kibana-pull}149129[#149129]
Transforms: Adds date picker to transform wizard for data view with time fields {kibana-pull}149049[#149049]
Use data view formatter for fields preview in Edit field flyout {kibana-pull}148446[#148446]
Adds a new global ui settings client {kibana-pull}146270[#146270]
Update Transform installation mechanism to support upgrade paths {kibana-pull}142920[#142920]

Maps

Adds support for hex aggregation with geo_shape field {kibana-pull}143890[#143890]

Monitoring

Link to individual host page on hosts view {kibana-pull}147380[#147380]
Adds support for beats datastream patterns {kibana-pull}146184[#146184]

Observability

Custom equation editor for Metric Threshold Rule {kibana-pull}148732[#148732]
Adds context.originalAlertState to the Metric Threshold and Inventory Threshold recovery context {kibana-pull}147928[#147928]

Querying & Filtering

Allows case sensitive option on multiselection filters input {kibana-pull}149570[#149570]

Security

The default csp.disableUnsafeEval value is now true, so now the unsafe-eval source expression isn’t present by default in the Kibana Content Security Policy (CSP) {kibana-pull}150157[#150157]
Adds client IP address to Kibana audit log {kibana-pull}148055[#148055]
Adds Cross-Origin-Opener-Policy: same-origin HTTP header to Kibana default response headers {kibana-pull}147874[#147874]

Sharing

Enables multiple values filtering on tooltip actions {kibana-pull}148372[#148372]

Uptime

TLS rule allow monitors filtering {kibana-pull}150339[#150339]

Bug Fixes

Alerting

Event log failure message {kibana-pull}149355[#149355]
Optimize alerting task runner for persistent (non-lifecycle rule types) {kibana-pull}149043[#149043]
Failed test x-pack/plugins/triggers_actions_ui/public/application/lib/transformActionVariables {kibana-pull}147579[#147579]
Rule create/update form re-render {kibana-pull}147221[#147221]
Hiding all features in a space causes rules to stop running {kibana-pull}146188[#146188]
Send complete test data to xMatters, so it can create an alert {kibana-pull}145431[#145431]
Hiding all features in a space causes rules to stop running {kibana-pull}145372[#145372]

APM

Latency threshold rule’s threshold context variable should use milliseconds instead of microseconds {kibana-pull}150234[#150234]
Cannot read/write APM Settings Indices page with minimally-privileged user {kibana-pull}150107[#150107]
Adds service.environment log correlation {kibana-pull}150065[#150065]
Remove host.name correlation {kibana-pull}150005[#150005]
Fixes display of stacktrace with EuiCodeBlocks {kibana-pull}149911[#149911]
Alert rules: The transaction type and environment options are not filtered by the selected service {kibana-pull}149849[#149849]
Unable to create Latency threshold rule for All services or All Transaction types {kibana-pull}149735[#149735]
Adds language specific headers {kibana-pull}149400[#149400]
Adds stacktrace support for php {kibana-pull}149122[#149122]
Tech preview feature on General settings {kibana-pull}148996[#148996]
Fixes APM sourcemap upload route {kibana-pull}148508[#148508]
Change order of tabs {kibana-pull}147518[#147518]
Show values of highlighted sample in TopN chart {kibana-pull}147431[#147431]
Synchronous Anomaly detection jobs creation {kibana-pull}145969[#145969]
Change default refresh interval to 60 seconds {kibana-pull}144389[#144389]

Dashboard

Retain maximized panel on link/unlink from library {kibana-pull}150405[#150405]
Fixes Unlink from Library / Save to Library for Maximized Panel {kibana-pull}150338[#150338]
Fixes Darktheme is missing from add drilldowns panel {kibana-pull}147270[#147270]
Removes options list "Allow <x>" toggles {kibana-pull}147216[#147216]

Design

Fixes a11y issue with dev tool tabs {kibana-pull}149349[#149349]
Fixes a11y issues with cross cluster replication flyouts {kibana-pull}149069[#149069]
Fixes a11y for snapshot policy flyout {kibana-pull}148972[#148972]

Discover

Fixes Phrase_filter query for scripted fields {kibana-pull}148943[#148943]
Use Discover locator for alert results link {kibana-pull}146403[#146403]
Validate if Data View time field exists on Alert creation / editing {kibana-pull}146324[#146324]

Elastic Security

For the Elastic Security 8.7.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.7.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Truncate long names in agents table {kibana-pull}150069[#150069]
Update kubernetes templates for elastic-agent {kibana-pull}143275[#143275]

Infrastructure

Remove ts-ignore annotation {kibana-pull}145759[#145759]

Lens & Visualizations

Always use resolved time range when computing Top values order agg with timeshifts in Lens {kibana-pull}150418[#150418]
Fixes problem with timeshift in formula and breakdown in Lens {kibana-pull}150406[#150406]
Fixes nested other bucket for empty string {kibana-pull}150321[#150321]
Fixes chart padding on reference lines/annotations icon on the left side in Lens {kibana-pull}149573[#149573]
Fixes the partition legend actions header format problem in Lens {kibana-pull}149114[#149114]
Automatically enable show array values for non-numeric runtime fields in Lens {kibana-pull}149025[#149025]
Always display the major label {kibana-pull}148999[#148999]
Adds multi fields support to selected fields list in Lens {kibana-pull}148899[#148899]
Allows cleaning up of the filters aggregatiob custom label in Lens {kibana-pull}148535[#148535]
Order date fields first on discover drilldown in Lens {kibana-pull}146786[#146786]
Fixes the syncing of other series color in Lens {kibana-pull}146785[#146785]

Machine Learning

Data Frame Analytics creation wizard: ensure includes table is populated correctly on job type change {kibana-pull}150112[#150112]
Data Frame Analytics maps view: Fix update of map when selecting results index node {kibana-pull}149993[#149993]
Fixes Typical to actual connector lines in AnomalyLayer have dot halfway {kibana-pull}149270[#149270]
Fixes responsive behaviour of page header with date picker {kibana-pull}149073[#149073]
Delayed data visualization: ensure y-axis count is visible {kibana-pull}148982[#148982]
Allow dedicated index override in JSON editor {kibana-pull}148887[#148887]
Anomaly Detection: Fix button switch issue with unmounted component {kibana-pull}148239[#148239]
Anomaly Detection: Fix Anomaly Explorer context handling {kibana-pull}148231[#148231]
Fixes modal titles {kibana-pull}147855[#147855]

Management

Replace global GET /_mapping request with GET <index>/_mapping {kibana-pull}147770[#147770]
Fixes form validation UX when the same data view name already exists {kibana-pull}146126[#146126]
The field preview in the data view field editor now works for all fields, whether or not they are in the document’s _source {kibana-pull}145943[#145943]

Maps

Fixes Kibana maps should not override the sort field if not provided by the user {kibana-pull}150400[#150400]
Show embeddable filters in spatial layer {kibana-pull}150078[#150078]
Fixes Kibana Maps UI upload geojson failure should be received as such {kibana-pull}149969[#149969]
Verify CRS for geojson upload {kibana-pull}148403[#148403]

Monitoring

Use UI time range filter in logstash pipeline details query {kibana-pull}150032[#150032]

Observability

Adds ALERT_RULE_PARAMETERS to the common fields in Rule Registry {kibana-pull}147458[#147458]

Platform

Support cgroup v2 in core metric collection {kibana-pull}147082[#147082]

{kib} 8.6.1

Review the following information about the {kib} 8.6.1 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.6.1.

{kibana-ref-all}/8.5/release-notes-8.5.0.html#breaking-changes-8.5.0[8.5.0] | {kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancements

Alerting

Create OAS for get rule types and get alerting framework health {kibana-pull}148774[#148774]
Create open API specification for create/update connector {kibana-pull}148691[#148691]
Create open API specification for disable/enable rule and mute/unmute all alerts {kibana-pull}148494[#148494]

Elastic Security

For the Elastic Security 8.6.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Bug fixes

Canvas

Replaces React.lazy and withSuspense with async imports in expressions plugins {kibana-pull}147693[#147693]

Dashboard

Adds styling to allow clickable TSVB markdown images {kibana-pull}147802[#147802]
Changes the visibility of the panel filters action {kibana-pull}146335[#146335]

Discover

Adds support for case-insensitive search in Document Viewer {kibana-pull}148312[#148312]
Fixes the field stats for the epoch time format {kibana-pull}148288[#148288]

Elastic Security

For the Elastic Security 8.6.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Fixes missing policy Id in installation URL for cloud integrations {kibana-pull}149243[#149243]
Fixes package installation APIs to install packages without a version {kibana-pull}149193[#149193]
Fixes issue where the latest GA version could not be installed if there was a newer prerelease version in the registry {kibana-pull}149133[#149133] and {kibana-pull}149104[#149104]

Infrastructure

Fixes an issue where the summary request piled up {kibana-pull}148670[#148670]

Machine Learning

Fixes the bucket span estimator in the advanced wizard {kibana-pull}149008[#149008]
Fixes the transforms JSON display {kibana-pull}147996[#147996]

Management

Fixes the runtime field format editor {kibana-pull}148497[#148497]
Improves the check for response size in the /autocomplete_entities endpoint {kibana-pull}148328[#148328]

Maps

Fixes an issue where Maps was unable to initialize the time range from URLs {kibana-pull}148465[#148465]

Platform

Fixes the server-side import of the contract CloudStart {kibana-pull}149203[#149203]

Uptime

ssl fields are now omitted when ssl is disabled {kibana-pull}149087[#149087]
Adds the ability to disable throttling for project monitors {kibana-pull}148669[#148669]

{kib} 8.6.0

Review the following information about the {kib} 8.6.0 release.

Known issues

Attempting to create APM latency threshold rules from the Observability rules page fail

Details
When you attempt to create an APM latency threshold rule in Observability > Alerts > Rules for all services or all transaction types, the request will fail with a params invalid error.

Impact
This known issue only impacts the Observability Rules page. To work around this issue, create APM latency threshold rules in the APM Alerts and Rules dialog. See {kibana-ref}/apm-alerts.html[Alerts and rules] for detailed instructions.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.6.0, review the breaking changes, then mitigate the impact to your application.

Changes the histogram:maxBars default setting

Details
To configure higher resolution data histogram aggregations without changing the Advanced Settings, the default histogram:maxBars setting is now 1000 instead of 100. For more information, refer to {kibana-pull}143081[#143081].

Impact
For each {kibana-ref}/xpack-spaces.html[space], complete the following to change histogram:maxBars to the previous default setting:

Open the main menu, then click Stack Management > Advanced Settings.
Scroll or search for histogram:maxBars.
Enter 100, then click Save changes.

CSV reports use PIT instead of Scroll

Details
CSV reports now use PIT instead of Scroll. Previously generated CSV reports that used an index alias with alias-only privileges, but without privileges on the alias referenced-indices will no longer generate. For more information, refer to {kibana-pull}158338[#158338].

Impact
To generate CSV reports, grant read privileges to the underlying indices.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.5/release-notes-8.5.0.html#breaking-changes-8.5.0[8.5.0] | {kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Features

{kib} 8.6.0 adds the following new and notable features.

Alerting

Notify users by email when assigned to a case {kibana-pull}144391[#144391]
Adds flapping state object and interface in AAD index and Event Log {kibana-pull}143920[#143920]
Change Alerts > Actions execution order {kibana-pull}143577[#143577]
Adds the ability to remove alerts attached to a case {kibana-pull}143457[#143457]
This feature allows users to create and close alerts within Opsgenie {kibana-pull}142411[#142411]
Adds filter field to index threshold rule type {kibana-pull}142255[#142255]
Allow users to see event logs from all spaces they have access to {kibana-pull}140449[#140449]

Elastic Security

For the Elastic Security 8.6.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.6.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Differentiate kubernetes integration multipage experience {kibana-pull}145224[#145224]
Adds prerelease toggle to Integrations list {kibana-pull}143853[#143853]
Adds link to allow users to skip multistep add integration workflow {kibana-pull}143279[#143279]

Infrastructure

Adds support for the the Unified Search Bar for Query input {kibana-pull}143222[#143222]

Lens & Visualizations

Adds support for trend lines in Lens metric visualizations {kibana-pull}141851[#141851]

Machine Learning

Trained model testing with index data {kibana-pull}144629[#144629]
Adding anomaly score explanations {kibana-pull}142999[#142999]

Monitoring

Collect metrics about the active/idle connections to ES nodes {kibana-pull}141434[#141434]

Observability

Integrate alert search bar on rule details page {kibana-pull}144718[#144718]
Adds additional context to recovered alerts of Infrastructure rules {kibana-pull}144683[#144683]
Adds list of containers in context variable of Inventory rule {kibana-pull}144526[#144526]
Adds new contextual attributes to Infrastructure - Metric threshold rule {kibana-pull}143001[#143001]
Adds alert details page feature flag by App {kibana-pull}142839[#142839]
Adds new contextual attributes to Infrastructure - Inventory Rule {kibana-pull}140598[#140598]

Osquery

Allows users to deploy Osquery across all {agent} policies or on specified policies only {kibana-pull}143948[#143948]

Platform

Adds notifications plugin, offering basic email service {kibana-pull}143303[#143303]

Security

Adds the ability to show sub-feature privileges when using the Basic license {kibana-pull}142020[#142020]

Uptime

Adds created_at field in saved objects {kibana-pull}143507[#143507]

For more information about the features introduced in 8.6.0, refer to What’s new in 8.6.

Enhancements and bug fixes

For detailed information about the 8.6.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Clone rule {kibana-pull}144741[#144741]
Remove errors and warning in triggers_actions_ui jest test {kibana-pull}144443[#144443]
Increase the default table size of the cases table to 10 {kibana-pull}144228[#144228]
Bulk enable rules api {kibana-pull}144216[#144216]
Create bulk delete on rules front {kibana-pull}144101[#144101]
Improve Task Manager’s retry logic for ad-hoc tasks {kibana-pull}143860[#143860]
Increases the max length limit of the case title to 160 characters {kibana-pull}143664[#143664]
Adds the ability to bulk edit tags in the cases table {kibana-pull}143450[#143450]
Filter cases without assignees {kibana-pull}143390[#143390]
Make actions retry when encountering failures {kibana-pull}143224[#143224]
Adds a backlink to cases when pushing in external services {kibana-pull}143174[#143174]
Move Connectors to own page {kibana-pull}142485[#142485]
142183 create bulk delete on rules {kibana-pull}142466[#142466]
Allow _source field for ES DSL query rules {kibana-pull}142223[#142223]
Update rule status {kibana-pull}140882[#140882]

APM

Adds pie charts displaying the most used mobile devices, operating systems, etc. {kibana-pull}144232[#144232]
Adds the ability to filter mobile APM views {kibana-pull}144172[#144172]
Adds average latency map to the mobile service overview {kibana-pull}144127[#144127]
Adds new options to APM central configuration {kibana-pull}143668[#143668]
Adds a trace waterfall to the dependency operation detail view {kibana-pull}143257[#143257]
Adds a configuration table above code sample in getting started guide {kibana-pull}143178[#143178]
Adds improvements to the AWS Lambda metrics view {kibana-pull}143113[#143113]
Adds total APM size and perecent of disk space used to storage explorer {kibana-pull}143179[#143179]
[Technical preview] Adds the ability to display a critical path for a single trace {kibana-pull}143735[#143735]
[Technical preview] Adds the agent explorer inventory and detail page {kibana-pull}143844[#143844]

Dashboard

Adds unmapped runtime field support to options list {kibana-pull}144947[#144947]
Adds "Exists" functionality to options list {kibana-pull}143762[#143762]
Adds excludes toggle to options list {kibana-pull}142780[#142780]
Adds support for IP field to options list {kibana-pull}142507[#142507]
Adds option to disable cursor sync on dashboards {kibana-pull}143355[#143355]

Discover

Adds the ability to edit ad hoc data views without permissions {kibana-pull}142723[#142723]
Enables esQuery alert for adhoc data views {kibana-pull}140885[#140885]

Elastic Security

For the Elastic Security 8.6.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.6.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds ?full option to get package info endpoint to return all package fields {kibana-pull}144343[#144343]

Infrastructure

Use the Unified Search Bar for date range selection {kibana-pull}144351[#144351]
Adds network traffic to Hosts table {kibana-pull}142137[#142137]

Kibana UI

Updates the Dashboard, Visualize Library, and Maps pages with enhanced tag filtering {kibana-pull}142108[#142108]

Lens & Visualizations

Rearranges the options in Lens {kibana-pull}144891[#144891]
Adds the ability to open TSVB tables in Lens {kibana-pull}143946[#143946]
Adds advanced params to the formula API in Lens {kibana-pull}143876[#143876]
Adds the ability to display value labels on histogram and stacked charts in Lens {kibana-pull}143635[#143635]
Distinguishes the adhoc data views from the permanent data views in the dropdowns {kibana-pull}143525[#143525]
Adds the ability to filter metrics in the Lens data table {kibana-pull}143219[#143219]
Adds support for navigate Variance aggregations in Lens {kibana-pull}143209[#143209]
Adds selected field accordion to the fields list in Lens {kibana-pull}143175[#143175]
Adds the ability to open aggregation-based xy charts in Lens {kibana-pull}142936[#142936]
Adds the ability to open aggregation-based Gauge and Goal visualizations in Lens {kibana-pull}142838[#142838]
Enables cursor syncronization in Lens heatmaps {kibana-pull}142821[#142821]
Adds a reduced time range option for formula in Lens {kibana-pull}142709[#142709]
Adds the ability to open aggregation-based metric visualization in Lens {kibana-pull}142561[#142561]
Adds the ability to edit data views in the Lens flyout {kibana-pull}142362[#142362]
Adds conditional operations in the Lens formula {kibana-pull}142325[#142325]
Adds the ability to explore fields in Discover from Lens {kibana-pull}142199[#142199]
Adds the ability to open TSVB Gauge visualizations in Lens {kibana-pull}142187[#142187]
Adds new defaults function in Lens {kibana-pull}142087[#142087]
Adds support for mustache context variables with periods {kibana-pull}143703[#143703]
Adds explore matching indices to data view menu {kibana-pull}141807[#141807]
Adds control in the Lens annotations layer menu for global filters {kibana-pull}141615[#141615]
Adds field filter to popover in Lens {kibana-pull}141582[#141582]
Improves the performance for large formulas in Lens {kibana-pull}141456[#141456]
Improves the Quick function in-product assistance in Lens {kibana-pull}141399[#141399]
Adds bit formatter in Lens {kibana-pull}141372[#141372]
Adds the ability to open aggregation-based pie visualizations in Lens {kibana-pull}140879[#140879]
Adds the ability to open TSVB metric visualizations in Lens {kibana-pull}140878[#140878]
Adds the ability to open aggregation-based table visualizations in Lens {kibana-pull}140791[#140791]
Adds the ability to allow date functions in formula {kibana-pull}143632[#143632]

Machine Learning

Data Frame Analytics: Highlight filtered data in scatterplot charts {kibana-pull}144871[#144871]
Allow updates for number of allocations and priority for trained model deployments {kibana-pull}144704[#144704]
Switch from normal sampling to random sampler for Index data visualizer table {kibana-pull}144646[#144646]
Explain Log Rate Spikes: Replace chunks of queries with concurrent queue {kibana-pull}144220[#144220]
Explain Log Rate Spikes: Allow to continue failed stream {kibana-pull}143301[#143301]
Entity filter for the Notifications page {kibana-pull}142778[#142778]
Show an info callout for new notifications {kibana-pull}142245[#142245]
Adding dashboard custom url to lens created jobs {kibana-pull}142139[#142139]
Adds ML open API output to appendix {kibana-pull}141556[#141556]

Management

Adds missing geo aggs to autocomplete in Console {kibana-pull}141504[#141504]

Maps

Adds the ability to invert color ramp and size {kibana-pull}143307[#143307]
Adds layer groups {kibana-pull}142528[#142528]
Adds the ability to hide or show all layers {kibana-pull}141495[#141495]

Observability

Adds kibana.alert.time_range field to Alert-As-Data mappings and populate it {kibana-pull}141309[#141309]
Alert summary widget new design {kibana-pull}141236[#141236]
Adds histogram support for avg, max, min, sum and percentiles {kibana-pull}139770[#139770]

Platform

Adds maxIdleSockets and idleSocketTimeout to Elasticsearch config {kibana-pull}142019[#142019]

Security

Adds a read-only mode to the User management screen for users with read_security cluster privilege {kibana-pull}143438[#143438]
Adds a read-only mode to the API keys management screen for users with read_security cluster privilege {kibana-pull}144923[#144923]
Adds user.id field to Kibana audit log {kibana-pull}141092[#141092]

Uptime

Allow using AND for tags filtering {kibana-pull}145079[#145079]
Adds monitor detail flyout {kibana-pull}136156[#136156]

Bug fixes

Alerting

Fixes logger text and fix bulk error type {kibana-pull}144598[#144598]
Flaky bulkDisable tasks functional test {kibana-pull}144405[#144405]
Adding back unknown outcome filter {kibana-pull}143546[#143546]
Fixing flaky test in x-pack/test/functional_with_es_ssl/apps/triggers_actions_ui/alerts_list·ts {kibana-pull}142855[#142855]
Rule run history displays success with a message when the rule status is warning {kibana-pull}142645[#142645]
Elasticsearch query rule type allows SIZE: 0, but flags as error on re-edit {kibana-pull}142225[#142225]
Rules and Connectors: Current page in breadcrumbs shows as link {kibana-pull}141838[#141838]
Move save button into connector config form {kibana-pull}141361[#141361]

APM

Show a recommended minimum size when going below 5 minutes {kibana-pull}144170[#144170]
Fixes ML permissions by removing usage of canAccessML {kibana-pull}143631[#143631]
Fallback to terms aggregation search if terms enum doesn’t return results {kibana-pull}143619[#143619]
Fixes bug that causes alert expression to not close {kibana-pull}143531[#143531]
Fixes apm.transaction_duration alert to aggregrate over service environment {kibana-pull}143238[#143238]
Fixes broken latency and services layout {kibana-pull}143453[#143453]
Fixes metadata API environment filter {kibana-pull}144472[#144472]

Dashboard

The extra reload caused by Controls is now skipped {kibana-pull}142868[#142868]
Modifies the state shared in dashboard permalinks {kibana-pull}141985[#141985]

Discover

Fixes theme for Alerts popover {kibana-pull}145390[#145390]
Improves the no data views state for esQuery alert {kibana-pull}145052[#145052]
Updates the data view id on adhoc data view change {kibana-pull}142069[#142069]
Improves the error and fix app state when updating data view ID in the URL to an invalid ID {kibana-pull}141540[#141540]

Elastic Security

For the Elastic Security 8.6.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.6.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Only show fleet managed data streams on data streams list page {kibana-pull}143300[#143300]

Infrastructure

Adds disk latency metrics to hosts table {kibana-pull}144312[#144312]

Kibana Home & Add Data

Updates the examples {kibana-pull}141265[#141265]

Lens & Visualizations

All saved queries are now returned on the list instead of only the first 50 {kibana-pull}145554[#145554]
The baseTheme is now always included with the charts theme {kibana-pull}145401[#145401]
Do not throw on undefined sorting column referenced in Lens {kibana-pull}144716[#144716]
Fixes suggestion bug in Lens {kibana-pull}144708[#144708]
The reference layer is now excluded from the cursor sync hook in Lens {kibana-pull}144384[#144384]
Improves the embeddable warnings placement in Lens metric visualizations {kibana-pull}144368[#144368]
Fixes the list control popover background color in dark mode {kibana-pull}144204[#144204]
The unused dimension label from the tooltip in Lens is now hidden {kibana-pull}143721[#143721]
Improves the default text for the controls options list {kibana-pull}143413[#143413]
Fixes styling issues in Vega {kibana-pull}143168[#143168]
Fixes an issue where the shard failure notices made Lens unusable {kibana-pull}142985[#142985]
Fixes the syncing for colors and tooltips {kibana-pull}142957[#142957]
Updates the label for Time field annotations in TSVB {kibana-pull}142452[#142452]
Fixes an issue where empty annotation query strings in TSVB and Lens displayed different results {kibana-pull}142197[#142197]
Drag and drop capabilities of a single element in Lens is no longer allowed {kibana-pull}141793[#141793]
Fixes the ability to close the settings popover with a click in Lens {kibana-pull}141272[#141272]

Machine Learning

Fixes the default time range on the Notifications page {kibana-pull}145578[#145578]
Data Frame Analytics maps view: ensure nodes reload correctly after using timepicker refresh {kibana-pull}145265[#145265]
Explain Log Rate Spikes: Fix applying overall params to histogram queries {kibana-pull}144219[#144219]
Calculate model memory limit for Lens created jobs {kibana-pull}143456[#143456]
Explain Log Rate Spikes: fix chart showing as empty when filter matches field/value pair in hovered row {kibana-pull}142693[#142693]

Management

Fixes nested formatter for terms {kibana-pull}144543[#144543]
Cache ad-hoc data views to avoid repeated field list calls {kibana-pull}144465[#144465]
In the case of 2 or more panels on the dashboard, TSVB renderComplete fires 2 times {kibana-pull}143999[#143999]
Shard failure notifications have been reduced when many queries fail at the same time {kibana-pull}131776[#131776]

Maps

Fixes an issue where the Time Slider text was not working properly with Dark Mode {kibana-pull}145612[#145612]
Adds ungroup layers action {kibana-pull}144574[#144574]

Observability

Fixes alerts' blank page in case of invalid query string {kibana-pull}145067[#145067]

Observability Home

Use bucketSize from request options for overview query {kibana-pull}145032[#145032]
Solution nav with no data page {kibana-pull}144280[#144280]

Querying & Filtering

Fixes an issue with autocomplete value suggestions where the date range was sometimes incorrectly applied {kibana-pull}144134[#144134]
Fixes Moment.js timezone error when defining a range filter {kibana-pull}143213[#143213]

Reporting

Fixed a bug with CSV export in Discover, where searching over hundreds of shards would result in an incomplete CSV file {kibana-pull}144201[#144201]
Fixes an issue where downloading a report caused a new browser tab to open with the report content, rather than receiving a downloaded file {kibana-pull}144136[#144136]
Fixed an issue with CSV exports from Discover, where using the _id field in an export, when _id is a very high numeric value, the value could lose precision {kibana-pull}143807[#143807]

{kib} 8.5.2

Review the following information about the {kib} 8.5.2 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.5.2.

{kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancement

Security

Adds a Content-Security-Policy header to all /api/* responses {kibana-pull}144902[#144902]

Bug fixes

APM

Limits the number of source map artifacts {kibana-pull}144963[#144963]
Fixes an incorrect documentation link {kibana-pull}145077[#145077]
Suppresses error toast when data view cannot be created {kibana-pull}143639[#143639]

Dashboard

Fixes unexpected suggestions for text/keyword multi-fields {kibana-pull}145177[#145177]

Discover

Fixes % for field stats calculations (edge cases) {kibana-pull}144962[#144962]

Management

Fixes autocomplete_entities API crash when response size is too big {kibana-pull}140569[#140569]

Uptime

Adjust formula for synthetics monitor availability {kibana-pull}144868[#144868]

{kib} 8.5.1

Review the following information about the {kib} 8.5.1 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.5.1.

{kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancements

Elastic Security: For the Elastic Security 8.5.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Bug fixes

APM

Fixes a bug where Metadata API does not filter by environment {kibana-pull}144472[#144472]
Fixes a bug where AWS lambda checks for an undefined value {kibana-pull}143987[#143987]
Limits the number of source map artifacts {kibana-pull}144963[#144963]
Fixes an incorrect documentation link {kibana-pull}145077[#145077]

Dashboard

Removes support for scripted fields in options list {kibana-pull}144643[#144643]
Fixes help documentation link for dashboard {kibana-pull}143894[#143894]

Elastic Security

For the Elastic Security 8.5.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Make asset tags space aware {kibana-pull}144066[#144066]

Machine Learning

Correcting the size of the free ML node on cloud {kibana-pull}144512[#144512]
Fixes model testing flyout reload {kibana-pull}144318[#144318]
Explain Log Rate Spikes: Wrap analysis in try/catch block {kibana-pull}143651[#143651]
Explain Log Rate Spikes: Fix uncompressed streams and backpressure handling {kibana-pull}142970[#142970]

Osquery

Fixes a bug that prevented users from viewing Osquery results if they were in a non-default {kib} space {kibana-pull}144210[#144210]

Platform

Fixes the execution pipeline not to stop on a flaky subexpression {kibana-pull}143852[#143852]

Uptime

Adjust forumla for synthetics monitor availability {kibana-pull}144868[#144868]
TLS alert - do not alert when status cannot be determined {kibana-pull}144767[#144767]

{kib} 8.5.0

Review the following information about the {kib} 8.5.0 release.

Known issues

Due to a recent change in the Red Hat scan verification process, {kib} 8.5.0 is not available in the Red Hat Ecosystem Catalog. This known issue will be fixed in the next release. To download the {kib} 8.5.0 image, use the Elastic docker registry.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.5.0, review the breaking changes, then mitigate the impact to your application.

Updates bulk action API to return actionId instead of agent success

Details
To make bulk action responses consistent, returns actionId instead of agent ids with success: True or success: False results. For more information, refer to {kibana-pull}141757[#141757].

Impact
When you use FleetBulkResponse, you now receive only actionId responses.

Removes filter validation for ad-hoc data views

Details
Filters associated with unknown data views, such as deleted data views, are no longer automatically disabled. For more information, refer to {kibana-pull}139431[#139431].

Impact
Filters associated with unknown data views now display a warning message instead of being automatically disabled.

Removes the package_policies field from the agent policy saved object

Details
The bidirectional foreign key between agent policy and package policy has been removed. For more information, refer to {kibana-pull}138677[#138677].

Impact
The agent policy saved object no longer includes the package_policies field.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.4/release-notes-8.4.0.html#breaking-changes-8.4.0[8.4.0] | {kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Features

{kib} 8.5.0 adds the following new and notable features.

Alerting

Adds dynamic field selection to the alerts table {kibana-pull}140516[#140516]
Show alerts count {kibana-pull}140473[#140473]
Adds the ability to allows users to assign other users to cases {kibana-pull}140208[#140208]
Ability run a rule on-demand {kibana-pull}139848[#139848]
Ability to bulk update API keys for alerting rules {kibana-pull}139036[#139036]
Index threshold alert can’t use unsigned long data type {kibana-pull}138452[#138452]
Category fields endpoint {kibana-pull}138245[#138245]
Index threshold alert UI does not fill index picker with data streams {kibana-pull}137584[#137584]

APM

Display kubernetes metadata in service icons popup and instance accordion {kibana-pull}139612[#139612]
AWS lambda metrics api {kibana-pull}139041[#139041]

Discover

Adds support for storing time with saved searches {kibana-pull}138377[#138377]
Enables tags for saved searches {kibana-pull}136162[#136162]

Elastic Security

For the Elastic Security 8.5.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Adds agent activity flyout {kibana-pull}140510[#140510]
Adds a new event toggle to capture terminal output in endpoint {kibana-pull}139421[#139421]
Makes batch actions asynchronous {kibana-pull}138870[#138870]
Adds ability to tag integration assets {kibana-pull}137184[#137184]
Adds support for input only packages {kibana-pull}140035[#140035]

Infrastructure

Inital hosts page {kibana-pull}138173[#138173]

Lens & Visualizations

Adds query-based annotations in Lens {kibana-pull}138753[#138753]
Enables ad-hoc data views in Lens {kibana-pull}138732[#138732]

Machine Learning

Notifications page {kibana-pull}140613[#140613]
Explain Log Rate Spikes: Add option to view grouped analysis results {kibana-pull}140464[#140464]
Stubs out UI for the ML Inference Pipeline panel {kibana-pull}140456[#140456]
Attach the anomaly charts embeddable to Case {kibana-pull}139628[#139628]
Log pattern analysis UI {kibana-pull}139005[#139005]
Attach the anomaly swim lane embeddable to Case {kibana-pull}138994[#138994]

Management

Adds the ability to allow variables in URL Drilldown titles {kibana-pull}140076[#140076]
Enables time series downsampling action in ILM configurations {kibana-pull}138748[#138748]
Adds the composite runtime field editor {kibana-pull}136954[#136954]

Observability

Feat(slo): Create basic SLO route {kibana-pull}139490[#139490]

Osquery

Adds Osquery results to cases {kibana-pull}139909[#139909]
Add support for differential logs {kibana-pull}140660[#140660]

Security

Adds the ability to set a default Access Agreement for all xpack.security-level authentication providers {kibana-pull}139217[#139217]

For more information about the features introduced in 8.5.0, refer to What’s new in 8.5.

Enhancements and bug fixes

For detailed information about the 8.5.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

141189 alerts table performance {kibana-pull}141385[#141385]
141119 remove visibility toogle + use_columns refactor {kibana-pull}141250[#141250]
Adds Stats on top of execution logs {kibana-pull}140883[#140883]
Adds the Logs tab to Rules and Connectors UI {kibana-pull}138852[#138852]
Adds "exclude previous hits" check box to ESQuery rule form {kibana-pull}138781[#138781]
The ES Query Rule Type now supports Runtime Mappings and the Fields parameters when using an Elasticsearch DSL query {kibana-pull}138427[#138427]

APM

Adds option to power APM inventory with service metrics {kibana-pull}140868[#140868]
Adds a sort order to the trace samples on the transaction details page {kibana-pull}140589[#140589]
Adds a tail-based sampling storage limit (APM integration) {kibana-pull}140567[#140567]
Adds AWS Lambda metrics to the "Metrics" tab {kibana-pull}140550[#140550]
Adds an experimental mode to the APM app {kibana-pull}139553[#139553]
Renames JVMs to Metrics {kibana-pull}138437[#138437]
Changes how partial data buckets are displayed {kibana-pull}137533[#137533]

Dashboard

Adds the ability to view panel-level filters and queries {kibana-pull}136655[#136655]

Discover

Enables Explore in Discover for adhoc data views in Lens {kibana-pull}140726[#140726]
Adds the ability to show actions inline in the Expanded Document view for quick access {kibana-pull}140085[#140085]
Updates the layout for unified histogram {kibana-pull}139446[#139446]
Adds new field stats in sidebar popover {kibana-pull}139072[#139072]
Adds ad-hoc data views {kibana-pull}138283[#138283]
Updates the formatter for aggregate_metric_double field values {kibana-pull}138205[#138205]

Elastic Security

For the Elastic Security 8.5.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Adds toggle for experimental synthetic _source support in Fleet data streams {kibana-pull}140132[#140132]
Enhances the package policy API to create or update a package policy API with a simplified way to define inputs {kibana-pull}139420[#139420]
Support new subscription and license fields {kibana-pull}137799[#137799]

Infrastructure

Adds log-* index pattern support on SM UI {kibana-pull}139121[#139121]
Adds health API support for data ingested from package {kibana-pull}138964[#138964]
Adds support for integration package {kibana-pull}138224[#138224]
Adds the inital hosts page {kibana-pull}138173[#138173]

Lens & Visualizations

Adds the Collapse by option for partition charts in Lens {kibana-pull}140336[#140336]
Adds the ability to show the metric name if there are multiple layers with breakdowns in Lens {kibana-pull}140314[#140314]
Adds time scaling without date histogram in Lens {kibana-pull}140107[#140107]
Improves the field drag defaults in Lens {kibana-pull}140050[#140050]
Adds the time marker setting for time axis in Lens {kibana-pull}139950[#139950]
Adds the ability to make sure shard size stays stable for low number of sizes in TSVB, Lens, and Agg based visualizations {kibana-pull}139791[#139791]
Adds the one click filter to the Lens table {kibana-pull}139701[#139701]
Improves the metric palette behavior in Lens {kibana-pull}139596[#139596]
Adds separate dimension groups for mosaic rows and columns in Lens {kibana-pull}139214[#139214]
Adds display-infinity option to custom palette editor in Lens {kibana-pull}139061[#139061]
Adds TSDB support for Lens, TSVB and Timelion {kibana-pull}139020[#139020]
Adds the format selector to the new metric visualization in Lens {kibana-pull}139018[#139018]
Shows the edit/delete button while field stats are loading in Lens {kibana-pull}138899[#138899]
Adds auto mode for secondary metric prefix in Lens {kibana-pull}138167[#138167]
Adds open in Lens extendability {kibana-pull}136928[#136928]
Adds TSDB warning handling support for Lens, Agg based, and TSVB {kibana-pull}136833[#136833]
Adds reduced time range option in Lens {kibana-pull}136706[#136706]
Migrates xy visualization type to new unified xy expression {kibana-pull}136475[#136475]
Adds the ability to duplicate layers in Lens {kibana-pull}140603[#140603]

Machine Learning

Explain Log Rate Spikes: add main chart sync on row hover at group level {kibana-pull}141138[#141138]
Show "No anomalies found" message instead of empty swim lane {kibana-pull}141098[#141098]
Explain Log Rate Spikes: Group results API {kibana-pull}140683[#140683]
Match Data Visualizer/Field stats table content with the popover {kibana-pull}140667[#140667]
Explain Log Rate Spikes: Adds discover link to analysis table {kibana-pull}139877[#139877]
Adding ecs_compatibility setting for find structure calls {kibana-pull}139708[#139708]
Improves messaging when an anomaly detection forecast errors {kibana-pull}139345[#139345]
Anomaly Detection: adds maps link when source data contains geo fields {kibana-pull}139333[#139333]
Quickly create ML jobs from lens visualizations {kibana-pull}136421[#136421]

Management

Url drilldown date helper now allows rounding up relative dates {kibana-pull}137874[#137874]
In CSV reports, an error message now appears on the job when fewer CSV rows are generated than expected {kibana-pull}137800[#137800]

Maps

Adds support for adhoc data views {kibana-pull}140858[#140858]
Timeslider control {kibana-pull}139228[#139228]
Support Vector tile runtime geo_point fields {kibana-pull}139047[#139047]
Show data view name in UI {kibana-pull}138928[#138928]
Adds ability to disable tooltips for layer {kibana-pull}138275[#138275]
Cancel button when editing by value from dashboard {kibana-pull}137880[#137880]

Security

Adds audit events to "login-less" authentication flows (e.g. PKI, Kerberos) {kibana-pull}139492[#139492]

Uptime

Project monitors - support lightweight project monitors {kibana-pull}141066[#141066]
Adds Actions popover menu {kibana-pull}136992[#136992]

Bug fixes

Alerting

Render the grid only if we have alerts {kibana-pull}142481[#142481]
Alerts Table browser field - fix siem browser fields call {kibana-pull}141431[#141431]
Adds getActionsHealth method to return permanent encryption key existence {kibana-pull}140535[#140535]
Clarify rule notification values {kibana-pull}140457[#140457]
Actions are not able to configure a max number of attempts {kibana-pull}138845[#138845]
Elasticsearch Query Rule doesn’t have 'dark mode' view for query {kibana-pull}138631[#138631]
Getting error about secrets not being saved when import a SO (Connector Saved Object) {kibana-pull}138019[#138019]
Provide indication of how many rules are using connector on Connector List view {kibana-pull}137181[#137181]

APM

Remove check for infra data {kibana-pull}142835[#142835]
Prefer span metrics over span events {kibana-pull}141519[#141519]
Fixes search bar suggestions {kibana-pull}141101[#141101]
Sort trace samples {kibana-pull}140589[#140589]

Dashboard

Fixes pinned filters that backed up in Session Storage {kibana-pull}142262[#142262]

Discover

Adds support for line breaks in Document explorer {kibana-pull}139449[#139449]
Cancelled request errors for embeddables are now hidden {kibana-pull}137690[#137690]
Fixes legacy sort saved search stored in Dashboard saved objects {kibana-pull}137488[#137488]
Fixes column width handling {kibana-pull}137445[#137445]

Elastic Security

For the Elastic Security 8.5.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.5.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Refresh search results when clearing category filter {kibana-pull}142853[#142853]
Respect default_field: false when generating index settings {kibana-pull}142277[#142277]
Fixes repeated debug logs when bundled package directory does not exist {kibana-pull}141660[#141660]

Graph

Fixes query bar autocomplete {kibana-pull}140963[#140963]

Infrastructure

Adds support for Logstash datastream in standalone query {kibana-pull}138689[#138689]

Lens & Visualizations

Fixes the detailed tooltip wrap problem {kibana-pull}142818[#142818]
Fixes an issue where columns normalized by unit were unable to display properly on Dashboards for Lens metric visualizations {kibana-pull}142741[#142741]
Adds back ticks on bands in Lens {kibana-pull}142702[#142702]
Fixes guidance panel appearing for a moment when saving Graph {kibana-pull}141228[#141228]
Fixes pie filter without slice {kibana-pull}141227[#141227]
Fixes an issue where using annotations from different data views than the visualizations created panel breaks in TSVB {kibana-pull}141104[#141104]
Fixes drilldown url templates for sample data {kibana-pull}141079[#141079]
Fixes time shift with reduced time range tabification in Lens {kibana-pull}141076[#141076]
Fixes the time shifted pipeline agg in Lens {kibana-pull}140723[#140723]
Fixes an A11y issue where the query input doesn’t react to escape button in Lens {kibana-pull}140382[#140382]
Boolean values are now correctly formatted by default in TSVB {kibana-pull}140308[#140308]
All data views are no longer loaded on broken data view reference in Lens {kibana-pull}139690[#139690]
Removes the exclamation circle icon in TSVB {kibana-pull}139686[#139686]
Theme is now passed to visualize save modal {kibana-pull}139685[#139685]
Push-out behavior is now preserved for table cells when possible in Lens {kibana-pull}139619[#139619]
The metric visualization state is now cleared in Lens {kibana-pull}139154[#139154]
Adds the ability to set minimum table width for column split tables {kibana-pull}139004[#139004]
Adds the ability to scroll tall metric visualizations in Lens {kibana-pull}138178[#138178]

Machine Learning

Explain Log Rate Spikes: update more groups badge for clarity {kibana-pull}142793[#142793]
Fixes Index data visualizer doc count when time field is not defined {kibana-pull}142409[#142409]
Explain Log Rate Spikes: Fix error handling {kibana-pull}142047[#142047]
Fixes date picker not allowing unpause when refresh interval is 0 {kibana-pull}142005[#142005]
Fixes expanded row layout in the Nodes table {kibana-pull}141964[#141964]
Fixes links to Discover and Maps and custom URLs for jobs with a query in the datafeed {kibana-pull}141871[#141871]

Management

The progress bar is now visible in Expression renderer {kibana-pull}142699[#142699]
Transforms: Preserves the field for unsupported aggs {kibana-pull}142106[#142106]
Removes unnecessary time units in ILM policy dialog {kibana-pull}140815[#140815]
Fixes search query builder to generate wildcard query for keyword fields {kibana-pull}140629[#140629]
Updates "Copy as cURL" to interpolate variables and strip request-body comments {kibana-pull}140262[#140262]
Fixes previewing data streams in template editor {kibana-pull}140189[#140189]
Fixes an issue where selecting requests with characters ending with '{}' was not possible {kibana-pull}140068[#140068]
Filters that are associated with an unknown data view, such as deleted data views, are no longer automatically disabled, but now instead display a warning message {kibana-pull}139431[#139431]
Watches no longer get stuck in a "Firing" state in Watcher {kibana-pull}138563[#138563]
Fixes an issue where data view search results were not showing the value of mapped fields that shared a name with a runtime field {kibana-pull}138471[#138471]

Maps

Fixes Go To - lat/long values outside expected range cause blank Maps app {kibana-pull}141873[#141873]
Fixes scaling and term join in product help popover width {kibana-pull}139120[#139120]
Fixes legacy tile_map and region_map visualizations do not display title in Map embeddable action modals {kibana-pull}139054[#139054]
Fixes Filters applied to map visualization not preserved when added to dashboard {kibana-pull}138188[#138188]

Monitoring

Health api: account for ccs in indices regex {kibana-pull}137790[#137790]

Observability

Fixes Alert tab goes blank in APM because of Alert Details page feature flag {kibana-pull}142188[#142188]
Update links to Observability rule management {kibana-pull}140009[#140009]

Platform

Fixes an issue where the expressions executor stopped on failing partially emitted results {kibana-pull}142105[#142105]
A 0 is now returned when there are no overdue tasks for capacity estimation {kibana-pull}140720[#140720]
The task health calculation now never returns Error or Warning, but logs the HealthStatus {kibana-pull}139274[#139274]

Uptime

Fixes Next and Previous button on step screenshot carousel {kibana-pull}141422[#141422]
Fixes disrupted UI on Browser Test Results` step screenshots {kibana-pull}139017[#139017]

{kib} 8.4.3

Review the following information about the {kib} 8.4.3 release.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.4.3.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fixes

Cases

Fixes an issue where the recent cases widget shows cases from other solutions {kibana-pull}141221[#141221]

Discover

Fixes scrolling prevented by saved search embeddable on touch devices {kibana-pull}141718[#141718]
Fixes columns management for saved search embeddable {kibana-pull}140799[#140799]

Elastic Security

For the Elastic Security 8.4.3 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Graph

Fixes the position of Add fields popover {kibana-pull}141040[#141040]
Fixes responsive styles of field manager {kibana-pull}140948[#140948]

Machine Learning

Fixes an issue where Data visualizer was unable to update distribution when changing shard size, forbidden error with recognize modules on basic license {kibana-pull}141313[#141313]

Management

Fixes the removal of a single field formatter {kibana-pull}141078[#141078]

Observability

Fixes an alert summary widget issue in non-default space {kibana-pull}140842[#140842]

{kib} 8.4.2

Review the following information about the {kib} 8.4.2 release.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.4.2.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancements

Security: Logs a hash of the saved objects encryption key (xpack.encryptedSavedObjects.encryptionKey) when {kib} starts to assist in identifying mismatched encryption keys {kibana-pull}139874[#139874]

Bug Fixes

Connectors

The connectors table now uses "compatibility" rather than "availability" {kibana-pull}139024[#139024]

Discover

Fixes saved search embeddable rendering {kibana-pull}140264[#140264]

Elastic Security

For the Elastic Security 8.4.2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Applies fixes for package policy upgrade API with multiple ids {kibana-pull}140069[#140069]
Improves performance for many integration policies {kibana-pull}139648[#139648]

Lens & Visualizations

Fixes "Collapse by" for table and XY visualizations with multiple metrics in Lens {kibana-pull}140381[#140381]
Fixes action menu in Lens {kibana-pull}139588[#139588]

Machine Learning

Explain Log Rate Spikes: Histogram fixes {kibana-pull}139933[#139933]
Explain Log Rate Spikes: Improve streaming headers for certain proxy configs {kibana-pull}139637[#139637]
Fixes navigation for the Basic licence {kibana-pull}139469[#139469]
Corrects file.path field name in v3_windows_anomalous_script job {kibana-pull}139109[#139109]

Management

Bfetch` response headers now include X-Accel-Buffering: no {kibana-pull}139534[#139534]

Maps

Fixes issue where percentile aggregation was not working with vector tiles {kibana-pull}140318[#140318]
Fixes Map app crashing on file upload request timeout {kibana-pull}139760[#139760]

Monitoring

Ensures GlobalState class has it’s destroy() method called on unmount {kibana-pull}139908[#139908]
Adds KibanaThemeProvider to Stack Monitoring UI {kibana-pull}139839[#139839]

Uptime

Fixes an issue where decryption errors caused the entire suite of monitors to fail syncing {kibana-pull}140549[#140549]

{kib} 8.4.1

Review the following information about the {kib} 8.4.1 release.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.4.1.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fixes

Alerting

Fixes alert tab crash on rule details page {kibana-pull}139372[#139372]
Fixes issue where some 8.3.x clusters failed to upgrade with a saved object migration failure {kibana-pull}139427[#139427]

Lens & Visualizations

Fixes table pagination in Lens and Aggregation-based visualization editors {kibana-pull}139160[#139160]

{kib} 8.4.0

Review the following information about the {kib} 8.4.0 release.

Known issues

If you have alerting rules that have been snoozed, do not upgrade {kib} to 8.4.0. Upgrade to 8.4.1 instead.

To determine if you have snoozed alerting rules, open the main menu, then click {stack-manage-app} → {rac-ui}. Filter the rule list by selecting View → Snoozed. If you must upgrade to 8.4.0, for each space, cancel the snooze for all affected rules before you upgrade.

To identify snoozed rules in all Spaces using Dev Tools, run the following query:

GET /.kibana/_search
{
  "query": {
    "exists": {
      "field": "alert.isSnoozedUntil"
    }
  }
}

If you upgraded {kib} to 8.4.0 and you have alerting rules configured to snooze notifications, you will receive the following error message:

FATAL  Error: Unable to complete saved object migrations for the [.kibana] index.

To fix that problem, restore your previous version, then upgrade to 8.4.1 instead.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.4.0, review the breaking changes, then mitigate the impact to your application.

xpack.agents.* are uneditable in UI when defined in kibana.yml

Details
When you configure setxpack.fleet.agents.fleet_server.hosts and xpack.fleet.agents.elasticsearch.hosts in kibana.yml, you are unable to update the fields on the Fleet UI.

For more information, refer to {kibana-pull}135669[#135669].

Impact
To configure setxpack.fleet.agents.fleet_server.hosts and xpack.fleet.agents.elasticsearch.hosts on the Fleet UI, avoid configuring the settings in kibana.yml.

Removes the legacy charts library

Details
The legacy implementation of the Timelion visualization charts library has been removed. All Timelion visualizations now use the elastic-charts library, which was introduced in 7.15.0.

For more information, refer to {kibana-pull}134336[#134336].

Impact
In 8.4.0 and later, you are unable to configure the Timelion legacy charts library advanced setting. For information about visualization Advanced Settings, check Visualization.

{kibana-ref-all}/8.3/release-notes-8.3.0.html#breaking-changes-8.3.0[8.3.0] | {kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Deprecations

The following functionality is deprecated in 8.4.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.4.0.

Deprecates ApiKey authentication for interactive users

Details
The ability to authenticate interactive users with ApiKey via a web browser has been deprecated, and will be removed in a future version.

For more information, refer to {kibana-pull}136422[#136422].

Impact
To authenticate interactive users via a web browser, use another authentication method. Use API keys only for programmatic access to {kib} and {es}.

Features

{kib} 8.4.0 adds the following new and notable features.

Alerting

Adds the "updated at" feature in new alerts table {kibana-pull}136949[#136949]
Adds a rule detail table with bulk actions {kibana-pull}136601[#136601]
Adds bulk Actions for Alerts Table {kibana-pull}135797[#135797]
Adds the Alerting stack-monitoring PoC {kibana-pull}135365[#135365]
Adds custom inline/row actions for alerts table {kibana-pull}134015[#134015]

Cases

Adds the ability to customize permissions to prevent users from deleting Cases entities, such as Cases themselves, attachments, and comments {kibana-pull}135487[#135487]

Connectors

The {webhook-cm} connector allows users to build a custom connector for any third-party case/ticket management system {kibana-pull}131762[#131762]

Discover

Adds the ability to add a custom number of rows in the results and save the specified number with a Saved Search {kibana-pull}135726[#135726]

Elastic Security

For the Elastic Security 8.4.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Enables package signature verification feature {kibana-pull}137239[#137239]
Modal to allow user to force install an unverified package {kibana-pull}136108[#136108]
Display package verification status {kibana-pull}135928[#135928]
Tag rename and delete feature {kibana-pull}135712[#135712]
Bulk update agent tags ui {kibana-pull}135646[#135646]
Adds API to bulk update tags {kibana-pull}135520[#135520]
Adds and remove agent tags {kibana-pull}135320[#135320]
Support sorting agent list {kibana-pull}135218[#135218]
Promote Logstash output support to GA {kibana-pull}135028[#135028]
Create new API to manage download_source setting {kibana-pull}134889[#134889]

Machine Learning

Adds random sampler to Data visualizer document count chart {kibana-pull}136150[#136150]
Adds explain log rate spikes feature to the ML plugin {kibana-pull}135948[#135948]

Management

Run packs live {kibana-pull}132198[#132198]
Ability to set human readable title of data view & ability to edit data view {kibana-pull}124191[#124191]

Monitoring

Adds stale status reporting for Kibana {kibana-pull}132613[#132613]

Observability

Adds Beta label to Infrastructure tab {kibana-pull}136710[#136710]
Creates and adds Rule Alerts Summary as a sharable component to the O11y Rule Details {kibana-pull}135805[#135805]
Rule Details Page - Use RuleStatusPanel from triggersActionsUI {kibana-pull}135643[#135643]
Adds Top erroneous transactions to errors details page {kibana-pull}134929[#134929]
Introduces Alerts tab on service overview page {kibana-pull}134350[#134350]
Adds single metric report type {kibana-pull}132446[#132446]

Platform

Adds new bulkUpdatesSchedules method to Task Manager {kibana-pull}132637[#132637]

Security

Adds the ability to create personal avatars {kibana-pull}132522[#132522]

Sharing

Adds the new metric visualization {kibana-pull}136567[#136567]

For more information about the features introduced in 8.4.0, refer to What’s new in 8.4.

Enhancements and bug fixes

For detailed information about the 8.4.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Adds snooze state UI to Rule Details page {kibana-pull}135146[#135146]
Adds Snooze Scheduling UI and API {kibana-pull}134512[#134512]
Adds recovery context for ES query rule type {kibana-pull}132839[#132839]
Visualize alerting metrics in Stack Monitoring {kibana-pull}123726[#123726]

Canvas

Markdown element auto-applies text changes {kibana-pull}133318[#133318]
Lines operations keybindings {kibana-pull}132914[#132914]
Detailed tooltip {kibana-pull}131116[#131116]

Cases

Improved the cases search bar functionality. The search functionality will only consider the title and description fields {kibana-pull}136776[#136776]
Performance improvements were made to reduce the time required to create, update, and delete cases and comments. In our testing we saw around a half second reduction in the round trip time for the UI requests {kibana-pull}136452[#136452]

Dashboard

Hide controls callout when the hideAnnouncements setting is true {kibana-pull}136410[#136410]

Design

Adds an H1 tag with the workpad title when viewing workpads {kibana-pull}135504[#135504]
Improve keyboard navigation in Discover top nav menu {kibana-pull}134788[#134788]

Discover

Improves the HTML formatting of fields with a list of values {kibana-pull}136684[#136684]
Adds support for accessing the edit field flyout from the document explorer column popover {kibana-pull}135277[#135277]
Adds support for copying the query from the add rule flyout {kibana-pull}135098[#135098]
Adds focus to h1 on navigate for single document and surrounding document views {kibana-pull}134942[#134942]
Improves the creation and editing of "Elasticsearch query" rule in Management {kibana-pull}134763[#134763]
Adds data view changed warning after alert rule created {kibana-pull}134674[#134674]
Make 'Test query' button pretty {kibana-pull}134605[#134605]
Improves the document explorer timestamp tooltip accessibility {kibana-pull}134411[#134411]
Adds focus to h1 element when client side routing is executed {kibana-pull}133846[#133846]
Adds an option to copy column values to Clipboard in Document Explorer {kibana-pull}132330[#132330]

Elastic Security

For the Elastic Security 8.4.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Remove Kubernetes Package granularity {kibana-pull}136622[#136622]
Elastic-agent manifests: align with elastic-agent repo; add comments {kibana-pull}136394[#136394]
Configure source URI in global settings and in agent policy settings {kibana-pull}136263[#136263]
Adds Kubernetes in platforms selection list && update managed agent installation steps {kibana-pull}136109[#136109]
That PR will enable user to write custom ingest pipeline for Fleet installed datastream {kibana-pull}134578[#134578]
Update manifests for agent on kubernetes with new permissions {kibana-pull}133495[#133495]
Adds support for a textarea type in integrations {kibana-pull}133070[#133070]

Kibana Home & Add Data

Adds AnalyticsNoDataPage {kibana-pull}134172[#134172]

Lens & Visualizations

Adds supports for include and exclude terms in Lens {kibana-pull}136179[#136179]
Adds the ability to set top values limit to 10,000 in Lens {kibana-pull}136399[#136399]
Addss value count to Lens {kibana-pull}136385[#136385]
Adds standard deviation function in Lens {kibana-pull}136323[#136323]
Adds the ability to set the font size for mosaic outer level in Lens {kibana-pull}135911[#135911]
Adds the ability to rank top values by custom metric in Lens {kibana-pull}134811[#134811]
Adds the ability to convert TSVB series agg to Lens configuration {kibana-pull}134681[#134681]
Adds the ability to allow multiple split accessors {kibana-pull}134566[#134566]
Adds the ability to render newlines in data table in Lens {kibana-pull}134441[#134441]
Extends Axis bounds for XY chart when using Interval operation in Lens {kibana-pull}134020[#134020]
Adds the ability to use pick_max instead of clamp for positive only {kibana-pull}133460[#133460]
Adds a new pick_min/max operation and clamp fixes in Lens {kibana-pull}132449[#132449]
Adds support for percentile_ranks aggregation in Lens {kibana-pull}132430[#132430]
Implements the ability to drag and drop between layers in Lens {kibana-pull}132018[#132018]
Adds optimization for percentiles fetching in Lens {kibana-pull}131875[#131875]

Machine Learning

Adds tooltips for disabled actions in the Trained Models list {kibana-pull}137176[#137176]
Data visualizer: Add field types in-product help {kibana-pull}137121[#137121]
Plot zero scores on the Overall anomaly swim lane {kibana-pull}136951[#136951]
One-way cursor sync added from Anomaly detection swimlane to other charts {kibana-pull}136775[#136775]
Adds action to view datafeed counts chart to jobs list rows {kibana-pull}136274[#136274]
Data Visualizer: Remove duplicated geo examples, support 'version' type, add filters for boolean fields, and add sticky header to Discover {kibana-pull}136236[#136236]
Adds a link to ML trained models list from ID in Stack Management app table {kibana-pull}135700[#135700]
Adds information callouts to trained model testing flyout {kibana-pull}135566[#135566]
Limit Use full data button in anomaly detection job wizards to past data only {kibana-pull}135449[#135449]
Replace a fixed Y-axis width with a max width setting for Anomaly Swim Lane Embeddable {kibana-pull}135436[#135436]
Adds support for setting threading params when starting a trained model deployment {kibana-pull}135134[#135134]
Refactors Management page to focus on space management tasks {kibana-pull}134893[#134893]
Disable the Single Metric Viewer button for not viewable jobs {kibana-pull}134048[#134048]
Anomaly Detection: allow snapshot to be reverted from the view datafeed flyout {kibana-pull}133842[#133842]

Management

Transforms: Adds per-transform setting for num_failure_retries to creation wizard and edit flyout and authorization info {kibana-pull}135486[#135486]
Transforms: Adds sorting to audit messages tab {kibana-pull}135047[#135047]
Console now supports saving the state of folding/unfolding of commands {kibana-pull}134810[#134810]
Render most severe response status code from Console response pane {kibana-pull}134627[#134627]
You can now create variables in Console {kibana-pull}134215[#134215]
Make index template previews copyable {kibana-pull}134060[#134060]
Console now supports adding comments in the body of a request by using // for a single line and /…./ for multiline comments {kibana-pull}133852[#133852]
Surface HTTP status badges next to each response in Console {kibana-pull}132494[#132494]
Adds updated essql expression function {kibana-pull}132332[#132332]
Adds a "get all" REST API for data views: GET /api/data_views {kibana-pull}131683[#131683]

Maps

Automatically display the maps legend {kibana-pull}136872[#136872]
Custom raster source example plugin {kibana-pull}136761[#136761]
Label zoom range style property {kibana-pull}136690[#136690]
Adjust icon size when cluster resolution changes {kibana-pull}136573[#136573]
Adds context for 'No longer contained' geo-containment alert {kibana-pull}136451[#136451]
Keydown+scroll to zoom {kibana-pull}135330[#135330]
Synchronize map views in dashboard and canvas {kibana-pull}134272[#134272]
Adds spatial filter from cluster {kibana-pull}133673[#133673]
Customizable colors in basemaps {kibana-pull}131576[#131576]

Observability

Prefer DataView client over SavedObjects client when possible {kibana-pull}136694[#136694]
Use proper header nesting {kibana-pull}136559[#136559]
Removes "no data" redirects for observability overview {kibana-pull}136442[#136442]
Allow connectors to explicitly register which features they will be available in {kibana-pull}136331[#136331]
Display node details metrics for kubernetes containers {kibana-pull}135585[#135585]
Replace sourceId with mandatory logView prop in LogStream component {kibana-pull}134850[#134850]
Backend operation distribution chart {kibana-pull}134561[#134561]
Display top spans for operation {kibana-pull}134179[#134179]
Show descriptive loading, empty and error states in the metrics table {kibana-pull}133947[#133947]
Backend operations detail view + metric charts {kibana-pull}133866[#133866]
Backend operations list view {kibana-pull}133653[#133653]

Platform

Upgrade Kibana logs to ECS 8.4 {kibana-pull}136362[#136362]
Adds error messaging to the report contents when there is a timeout in page setup {kibana-pull}134868[#134868]
Adds migrations.discardCorruptObjects flag {kibana-pull}132984[#132984]
Adds migrations.discardUnknownObjects flag {kibana-pull}132167[#132167]

Querying & Filtering

Hides the tour component when the hideAnnouncements uiSetting is on {kibana-pull}135990[#135990]

Security

Eliminates the need for a full page reload when navigating to a user profile page {kibana-pull}135543[#135543]

Bug fixes

Alerting

Error message hidden after closing action accordion {kibana-pull}136570[#136570]
Allow wildcard search on rule’s name and tags {kibana-pull}136312[#136312]

Canvas

Fixes Filter not saving the selected Sort field option {kibana-pull}136085[#136085]
Fixes "Element status" is inaccurate for grouped elements {kibana-pull}135829[#135829]
Fixes Canvas filter behaviour on table {kibana-pull}134801[#134801]
Fixes Uploaded asset not being saved {kibana-pull}133166[#133166]
Lines operations keybindings {kibana-pull}132914[#132914]
Fixes pointseries don’t get updated on datasource change {kibana-pull}132831[#132831]

Connectors

Fixing ES index connector so that it can index into data streams as well as indices {kibana-pull}136011[#136011]
Verify emails when creating an email connector, even if allowedDomain {kibana-pull}133859[#133859]

Dashboard

Fixes Copy to dashboard includes filters {kibana-pull}136275[#136275]

Discover

Fixes hiding histogram for rollup data views {kibana-pull}137157[#137157]
Fixes filtering out custom meta fields of Elasticsearch plugins enhanced documents {kibana-pull}137147[#137147]
Disables refresh interval for data views without time fields and rollups {kibana-pull}137134[#137134]
Fixes Discover breadcrumb losing context after page refresh or when opening in a new tab {kibana-pull}136749[#136749]
Improves support for pinned filters in surrounding documents {kibana-pull}135722[#135722]
Fixes flaky accessibility functional tests {kibana-pull}135596[#135596]
Improves alerts popover accessibility and semantics {kibana-pull}135270[#135270]
Migrate from savedObjectsClient to dataViews and fix the displayed data view name {kibana-pull}135142[#135142]
Removes _type of metaFields to remove of sidebar {kibana-pull}134453[#134453]
Fixes legacy sort parameter provided by URL {kibana-pull}134447[#134447]
Make footer visible under Document Explorer if sample size is less than hits number {kibana-pull}134231[#134231]
Do not update defaultIndex in case of insufficient permissions {kibana-pull}134202[#134202]
Fixes flaky test for "allows editing of a newly created field" {kibana-pull}132812[#132812]
Fixes flaky test for "context encoded URL params" {kibana-pull}132808[#132808]

Elastic Security

For the Elastic Security 8.4.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Using point in time for agent status query to avoid discrepancy {kibana-pull}135816[#135816]

Lens & Visualizations

Make reference line chart more robust in Lens {kibana-pull}137101[#137101]
Format the label with the right default formatter in TSVB {kibana-pull}136934[#136934]
Removes extra space from the legend when it is positioned on top/bottom {kibana-pull}135982[#135982]
Display Y-axis tick labels {kibana-pull}135976[#135976]
Fixes Date histogram bounds calculation doesn’t update "now" {kibana-pull}135899[#135899]
Fixes internal links in Vega {kibana-pull}135890[#135890]
Do not set non-unique id for legend action popovers in Lens {kibana-pull}135656[#135656]
Fixes non-editable Lens panel when using prefix wildcard in Lens {kibana-pull}135654[#135654]
Removes saved search references from all places on unlink in Visualize {kibana-pull}135628[#135628]
Fix multi-field top values for Heatmap visualizations in Lens {kibana-pull}135581[#135581]
Fixes styling issues in Lens {kibana-pull}135406[#135406]
Show badge for read-only in Lens {kibana-pull}135313[#135313]
Don’t let reference line fills on different axes collide in Lens {kibana-pull}135299[#135299]
Fixes css specificity issue in TSVB {kibana-pull}135245[#135245]
Always show palette on first dimension for mosaic in Lens {kibana-pull}135198[#135198]
Wrong visType for horizontal_bar visualization {kibana-pull}135013[#135013]
Unlinking Some Agg Based Visualizations Results in Unsaved Changes in Visualize {kibana-pull}134229[#134229]
Fixes an issue where ellipsis truncation is not visible in table visualization cells, and letters are cut off in Lens {kibana-pull}134065[#134065]
Switching dashboard mode doesn’t update missing data view prompt in Visualize {kibana-pull}133873[#133873]
Fixes application of suffix formats in Lens {kibana-pull}133780[#133780]
Error messages not centered in TSVB {kibana-pull}133288[#133288]
Use correct time zone for time shifting {kibana-pull}133141[#133141]

Machine Learning

Lock the delete annotation button on click {kibana-pull}137306[#137306]
Fixes globally pinned filters in Data visualizer and query search bar not clearing properly for saved searches {kibana-pull}136897[#136897]
Fixes overflow in start datafeed modal {kibana-pull}136292[#136292]
Fixes error in categorization wizard summary step {kibana-pull}134228[#134228]
Fixes flaky job selection on the Anomaly Explorer page {kibana-pull}137596[#137596]
Fixes query in the Anomaly Explorer when viewing a job with no influencers {kibana-pull}137670[#137670]
Fixes the Dashboard saving indicator with Anomaly Swim Lane embeddable {kibana-pull}137989[#137989]
Anomaly detection job wizards now use data view names {kibana-pull}138255[#138255]

Management

The ILM UI now supports configuring policies with rollover based on max_primary_shard_docs {kibana-pull}137364[#137364]
Fixes a bug in Console when sending a request with encoded characters resulted in an error {kibana-pull}136788[#136788]
Fixes a bug where the autocomplete popup remains open when navigating away from Console {kibana-pull}136268[#136268]
Fixes a bug in Index Management where the number of documents for an index could appear wrong {kibana-pull}135748[#135748]
Fixes a bug in the Painless code editor that was incorrectly handling expressions with multiple division operators {kibana-pull}135423[#135423]
Transforms: Fixes unsupported boolean filter when cloning {kibana-pull}137773[#137773]
Transforms: Fixes restoring a field name with the exists filter aggregation {kibana-pull}138630[#138630]
Transforms: Fixes data view error on cloning due to missing indices {kibana-pull}138756[#138756]
Fixes Watcher stuck firing state {kibana-pull}138563[#138563]

Maps

Fixes "other" is always shown in legend for category styling rules {kibana-pull}137008[#137008]
Fixes Tooltip loses pages on refresh {kibana-pull}135593[#135593]
Fixes Pinned filters should be visible on new maps without user having to do any action on layers {kibana-pull}135465[#135465]
Keep timeframe when editing a map from a dashboard {kibana-pull}135374[#135374]
Reduce precision of coordinates for geo imports {kibana-pull}135133[#135133]
Fixes onDataLoadEnd and onDataLoadError event handler callbacks only called for source data requests {kibana-pull}134786[#134786]
Fixes sort not applied to vector tile search request {kibana-pull}134607[#134607]
Fixes array values out of order in tooltips {kibana-pull}134588[#134588]

Monitoring

Removes beta icon from logstash pipeline {kibana-pull}131752[#131752]

Observability

Invalid array value is permitted in Origin Headers for RUM configuration {kibana-pull}137228[#137228]
When comparison feature is disabled, we still see the shaded area {kibana-pull}137223[#137223]
Fixes responsivity Alert Summary chart in the Rule details page {kibana-pull}137175[#137175]
Fixes custom link filter select value {kibana-pull}137025[#137025]
Fixes Spark plots loading state when there are no data {kibana-pull}136817[#136817]
Adds support for metrics for latency distribution histogram {kibana-pull}136594[#136594]
Navigation from Span to Service breaks due to wrong transactionType {kibana-pull}136569[#136569]
Breadcrumbs not updating from service jump on service map {kibana-pull}136144[#136144]
Adds support for metrics for latency distribution histogram {kibana-pull}136083[#136083]
Disallow spaces in index pattern {kibana-pull}135977[#135977]
WrappedElasticsearchClientError: Request aborted {kibana-pull}135752[#135752]
Fixes waterfall skew due to accordion left margins {kibana-pull}135544[#135544]
Service inventory: detailed stats fetched for all services {kibana-pull}134844[#134844]
Update network fields {kibana-pull}134471[#134471]
Fixes Metrics Table Pod link to Details Page {kibana-pull}134354[#134354]
Adds last updated at label and fix started at label {kibana-pull}134254[#134254]
Adds event module filter to metrics table {kibana-pull}133872[#133872]
APM Correlations: Fixes chart errors caused by inconsistent histogram range steps {kibana-pull}138259[#138259]

Platform

Migrations wait for index status green if create index returns acknowledged=false or shardsAcknowledged=false {kibana-pull}136605[#136605]
Fixes CSV generator to include unmapped fields in the search source {kibana-pull}132972[#132972]

Security

Fixes keyboard and screen reader navigation for the spaces selector {kibana-pull}134454[#134454]

{kib} 8.3.3

Review the following information about the {kib} 8.3.3 release.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.3.3.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fixes

Dashboard

Fixes z-index of embPanel__header—floater {kibana-pull}136463[#136463]
Filter out experimental visualizations when labs setting is disabled {kibana-pull}136332[#136332]

Discover

Fixes filter in / filter out buttons for empty values {kibana-pull}135919[#135919]

Elastic Security

For the Elastic Security 8.3.3 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Pass start_time to actions when the maintenance window for rolling upgrades is set to immediately {kibana-pull}136384[#136384]
Allow agent bulk actions without specific licence restrictions {kibana-pull}136334[#136334]
Adds reinstall button to integration settings page {kibana-pull}135590[#135590]

Lens & Visualizations

Fixes normalizeTable performance bottleneck in Lens {kibana-pull}135792[#135792]

{kib} 8.3.2

Review the following information about the {kib} 8.3.2 release.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.3.2.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fixes

Alerting

Fixes an issue where alerting rules that were created or edited in 8.2.0 stopped running when you upgraded {kib} to 8.3.0 or 8.3.1 {kibana-pull}135663[#135663]

Discover

Hide Alerts menu item when user does not have access to Stack Rules {kibana-pull}135655[#135655]
Fixes loading of a single doc JSON when using index alias based data views {kibana-pull}135446[#135446]

Elastic Security

For the Elastic Security 8.3.2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Keep all agents selected in query selection mode {kibana-pull}135530[#135530]

Machine Learning

Fixes put anomaly detection job endpoint when payload contains datafeed {kibana-pull}134986[#134986]
Fixes trained model map associating wrong model to job {kibana-pull}134849[#134849]
Use time range when validating datafeed preview {kibana-pull}134073[#134073]

Maps

Do not show layer error for term joins when terms aggregation does not return results {kibana-pull}135564[#135564]
Fixes Vector map layers will not render when runtime field has '%' {kibana-pull}135491[#135491]

{kib} 8.3.1

Review the following information about the {kib} 8.3.1 release.

Known issues

URL arguments cause API requests in Dev Tools to fail

Details
When you add any URL arguments, such as ?v or ?pretty, to API requests, the requests fail {kibana-issue}133965[#133965]

Impact
The known issue only impacts {kib} Dev Tools. All other sources of API requests are unaffected, such as curl and Elastic Cloud API console.

Alerting rules stop running when you upgrade to 8.3.0 or 8.3.1

Details
In 8.3.0 and 8.3.1, there is a known issue where alerting rules that were created or edited in 8.2.0 stop running when you upgrade {kib}. When you upgrade to 8.3.0 or 8.3.1, and your alerting rules have stopped running, the following error appears:

<rule-type>:<UUID>: execution failed - security_exception: [security_exception] Reason: missing authentication credentials for REST request [/_security/user/_has_privileges], caused by: ""

Impact
If you have upgraded to 8.3.0 or 8.3.1, and your alerting rules fail, reset the rules by disabling, then re-enabling them. When you disable, then re-enable your alerting rules, {kib} generates a new API key using the credentials of the user that manages the rules.

To disable, then re-enable your alerting rules:

Open the main menu, then click {stack-manage-app} > {rac-ui}.
Select the failed alerting rules.
Click Manage rules > Disable, then click Manage rules > Enable.

For more details about API key authorization, refer to [alerting-authorization].

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.3.1.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancements

Operations: Adds EsArchiver datastream support {kibana-pull}132853[#132853]

Bug fixes

Alerting

Prevent negative snooze intervals {kibana-pull}134935[#134935]

Elastic Security

For the Elastic Security 8.3.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Fixes dropping select all {kibana-pull}135124[#135124]
Improves bulk actions for more than 10k agents {kibana-pull}134565[#134565]

Infrastructure

Query persistent queue size for metricbeat documents {kibana-pull}134569[#134569]

Observability

Fixes a bug that displayed a toast error when deleting a rule {kibana-pull}135132[#135132]
Fixes viewInAppUrl for custom metrics for Inventory Threshold Rule {kibana-pull}134114[#134114]

Platform

Fixes an issue where importing/copying the same saved object to the same space multiple times using the "Check for existing objects" option could fail or cause duplicates to be created {kibana-pull}135358[#135358]
Fixes a bug where {es} nodes that stopped, then started again, were unreachable by {kib} for a given amount of requests when {kib} was configured to connect to multiple {es} nodes {kibana-pull}134628[#134628]

{kib} 8.3.0

Review the following information about the {kib} 8.3.0 release.

Known issues

Alerting users who are running 8.2 should not upgrade to either 8.3.0 or 8.3.1. Both 8.3.0 and 8.3.1 have a bug where alerting rules that were created or edited in 8.2 will stop running on upgrade. If you have upgraded to 8.3.0 or 8.3.1 and your alerting rules have stopped running with an error similar to the following example, you will need to go to {stack-manage-app} > {rac-ui}, multi-select the failed rules, click on Manage rules > Disable and then click on Manage rules > Enable. Disabling and re-enabling the rule will generate a new API key using the credentials of the user performing these actions and reset the rule state. For more details about API key authorization, refer to [alerting-authorization].

Example error message

<rule-type>:<UUID>: execution failed - security_exception: [security_exception] Reason: missing authentication credentials for REST request [/_security/user/_has_privileges], caused by: ""

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

Removes Quandl and Graphite integrations

Details
The experimental .quandl and .graphite functions and advanced settings are removed from Timelion. For more information, check {kibana-pull}129581[#129581].

Impact
When you use the vis_type_timelion.graphiteUrls kibana.yml setting, {kib} successfully starts, but logs a [WARN ][config.deprecation] You no longer need to configure "vis_type_timelion.graphiteUrls". warning.

To leave your feedback about the removal of .quandl and .graphite, go to the discuss forum.

Makes Osquery All with All base privilege

Details
The Osquery {kib} privilege has been updated, so that when the Privileges for all features level is set to All, this now applies All to Osquery privileges as well. Previously, users had to choose the Customize option to grant any access to Osquery. For more information, refer to {kibana-pull}130523[#130523].

Impact
This impacts user roles that have Privileges for all features set to All. After this update, users with this role will have access to the Osquery page in {kib}. However, to use the Osquery feature fully, these requirements remain the same: users also need Read access to the logs-osquery_manager.result* index and the Osquery Manager integration must be deployed to Elastic Agents.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Deprecations

The following functionality is deprecated in 8.3.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.3.0.

Removes apm_user

Details
Removes the apm_user role. For more information, check {kibana-pull}132790[#132790].

Impact
In the APM documentation, the apm_user`role is replaced with the `viewer and editor built-in roles.

Deprecates input controls

Details
The input control panels, which allow you to add interactive filters to dashboards, are deprecated. For more information, check {kibana-pull}132562[#132562].

Impact
To add interactive filters to your dashboards, use the new controls.

Deprecates anonymous authentication credentials

Details
The apiKey, including key and ID/key pair, and elasticsearch_anonymous_user credential types for anonymous authentication providers are deprecated. For more information, check {kibana-pull}131636[#131636].

Impact
If you have anonymous authentication provider configured with apiKey or elasticsearch_anonymous_user credential types, a deprecation warning appears, even when the provider is not enabled.

Deprecates v1 and v2 security_linux and security_windows jobs

Details
The v1 and v2 job configurations for security_linux and security_windows are deprecated. For more information, check {kibana-pull}131166[#131166].

Impact
The following security_linux and security_windows job configurations are updated to v3:

security_linux:
- v3_linux_anomalous_network_activity
- v3_linux_anomalous_network_port_activity_ecs
- v3_linux_anomalous_process_all_hosts_ecs
- v3_linux_anomalous_user_name_ecs
- v3_linux_network_configuration_discovery
- v3_linux_network_connection_discovery
- v3_linux_rare_metadata_process
- v3_linux_rare_metadata_user
- v3_linux_rare_sudo_user
- v3_linux_rare_user_compiler
- v3_linux_system_information_discovery
- v3_linux_system_process_discovery
- v3_linux_system_user_discovery
- v3_rare_process_by_host_linux_ecs
security_windows:
- v3_rare_process_by_host_windows_ecs
- v3_windows_anomalous_network_activity_ecs
- v3_windows_anomalous_path_activity_ecs
- v3_windows_anomalous_process_all_hosts_ecs
- v3_windows_anomalous_process_creation
- v3_windows_anomalous_script
- v3_windows_anomalous_service
- v3_windows_anomalous_user_name_ecs
- v3_windows_rare_metadata_process
- v3_windows_rare_metadata_user
- v3_windows_rare_user_runas_event
- v3_windows_rare_user_type10_remote_login

Updates the default legend size

Details
In the Lens visualization editor, the Auto default for Legend width has been deprecated. For more information, check {kibana-pull}130336[#130336].

Impact
When you create Lens visualization, the default for the Legend width is now Medium.

Deprecates xpack.data_enhanced.*

Details
In kibana.yml, the xpack.data_enhanced.* setting is deprecated. For more information, check {kibana-pull}122075[#122075].

Impact
Use the data.* configuration parameters instead.

Features

{kib} 8.3.0 adds the following new and notable features.

Alerting

Adds circuit breaker for max number of actions by connector type {kibana-pull}128319[#128319]
Adds bulkEdit method to alerting rulesClient and internal _bulk_edit API, that allow bulk editing of rules {kibana-pull}126904[#126904]

Cases

Adds average time to close metric in Cases {kibana-pull}131909[#131909]
View all alerts attached to a case in the alerts table. The feature is experimental {kibana-pull}131883[#131883]
Adds severity field to Cases {kibana-pull}131626[#131626]
Adds the ability to delete comments in Cases {kibana-pull}130254[#130254]

Dashboard

Enables the new controls by default {kibana-pull}131341[#131341]

Discover

To enable Threshold Alerts, adds the ability to edit dataView, query, & filters {kibana-pull}131688[#131688]
To enable Threshold Alerts, extended the {es} query rule with search source-based data fetching {kibana-pull}124534[#124534]

Elastic Security

For the Elastic Security 8.3.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Changes to agent upgrade modal to allow for rolling upgrades {kibana-pull}132421[#132421]

Lens & Visualizations

Adds method to re-link visualizations with missing SavedSearch {kibana-pull}132729[#132729]
Adds support of Data View switching for Agg-Based visualizations {kibana-pull}132184[#132184]

Machine Learning

Adds the ability to create anomaly detection jobs from Lens visualizations {kibana-pull}129762[#129762]
Adds trained model testing for additional pytorch models {kibana-pull}129209[#129209]

Management

Adds saved object relationships to data view management {kibana-pull}132385[#132385]
Adds support for feature_states {kibana-pull}131310[#131310]

Monitoring

Adds the Stack monitoring health API {kibana-pull}132705[#132705]

Observability

Adds the ability to bulk attach multiple alerts to a Case {kibana-pull}130958[#130958]
Adds rule details page {kibana-pull}130330[#130330]
Adds span link {kibana-pull}126630[#126630]
Adds ML expected model bounds as an option to Comparison controls {kibana-pull}132456[#132456]

Platform

Adds xyVis and layeredXyVis {kibana-pull}128255[#128255]

Querying & Filtering

Improves the current filter/search experience {kibana-pull}128401[#128401]

Sharing

Adds method to re-link visualizations with missing index-pattern {kibana-pull}132336[#132336]

For more information about the features introduced in 8.3.0, refer to What’s new in 8.3.

Enhancements and bug fixes

For detailed information about the 8.3.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Adds helper text in the edit rule form about the change in privileges when saving the rule {kibana-pull}131738[#131738]
Display rule API key owner to users who can manage API keys {kibana-pull}131662[#131662]

Canvas

Fixes reference line overlay {kibana-pull}132607[#132607]

Cases

Show a warning for deprecated preconfigured connectors {kibana-pull}132237[#132237]
Reduce space taken by the reporter column in the all cases table {kibana-pull}132200[#132200]
Adds a tooltip to show truncate tags in Cases {kibana-pull}132023[#132023]
Adds the ability to create a case from within the selection case modal {kibana-pull}128882[#128882]

Content Management

The list view for Dashboard, Visualize Library, Maps, and Graph has a new "Last updated" column to easily access content that has been recently modified {kibana-pull}132321[#132321]

Dashboard

Improves the banner {kibana-pull}132301[#132301]
Adds Analytics No Data Page {kibana-pull}132188[#132188]
Adds field first control creation {kibana-pull}131461[#131461]
Make text field based Options list controls case Insensitive {kibana-pull}131198[#131198]
Allow existing controls to change type {kibana-pull}129385[#129385]

Discover

Adds an option to hide specified filter actions from SearchBar filter panels {kibana-pull}132037[#132037]
Adds Analytics No Data Page {kibana-pull}131965[#131965]
Adds close button to field popover using Document Explorer {kibana-pull}131899[#131899]
Adds monospace font in Document Explorer {kibana-pull}131513[#131513]
Adds a tour for Document Explorer {kibana-pull}131125[#131125]
Display current interval setting {kibana-pull}130850[#130850]
Adds a direct link from sample data to Discover {kibana-pull}130108[#130108]

Elastic Security

For the Elastic Security 8.3.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Move integration labels below title and normalise styling {kibana-pull}134360[#134360]
Adds First Integration Multi Page Steps Flow MVP (cloud only) {kibana-pull}132809[#132809]
Optimize package installation performance, phase 2 {kibana-pull}131627[#131627]
Adds APM instrumentation for package install process {kibana-pull}131223[#131223]
Adds "Label" column + filter to Agent list table {kibana-pull}131070[#131070]
Adds cache-control headers to key /epm endpoints in Fleet API {kibana-pull}130921[#130921]
Optimize package installation performance, phase 1 {kibana-pull}130906[#130906]
Adds experimental features (feature flags) config to fleet plugin {kibana-pull}130253[#130253]
Adds redesigned Fleet Server flyout {kibana-pull}127786[#127786]

Lens & Visualizations

Renders no data component if there is no {es} data or dataview in Visualize {kibana-pull}132223[#132223]
Swaps dimensions for mosaic in Lens {kibana-pull}131945[#131945]
Adds log and sqrt scale in Lens {kibana-pull}131940[#131940]
Adds collapse fn to table and xy chart in Lens {kibana-pull}131748[#131748]
Allow filtering on metric vis in Lens {kibana-pull}131601[#131601]
Improved interval input in Lens {kibana-pull}131372[#131372]
Adds the Discover drilldown to Lens {kibana-pull}131237[#131237]
Update defaults for metric vis in Lens {kibana-pull}129968[#129968]
Adds range event annotations in Lens {kibana-pull}129848[#129848]
Adds accuracy mode for Top Values in Lens {kibana-pull}129220[#129220]
Adds type murmur3 into the Lens fields list {kibana-pull}129029[#129029]

Machine Learning

Optimize resize behaviour for the Anomaly Explorer page {kibana-pull}132820[#132820]
Wizard validation improvements {kibana-pull}132615[#132615]
Support version fields in anomaly detection wizards {kibana-pull}132606[#132606]
Context for recovered alerts {kibana-pull}132496[#132496]
Adding UI for question_answering model testing {kibana-pull}132033[#132033]
Adds recognized modules links for Index data visualizer {kibana-pull}131342[#131342]
Anomaly Detection: Adds View in Maps item to Actions menu in the anomalies table {kibana-pull}131284[#131284]
Adding v3 modules for Security_Linux and Security_Windows and Deprecating v1 + v2 {kibana-pull}131166[#131166]
Data Frame Analytics creation wizard: add support for filters in saved searches {kibana-pull}130744[#130744]
Edit job selection on data frame analytics results and map pages {kibana-pull}130419[#130419]
Resizable/Collapsible Top Influencers section {kibana-pull}130018[#130018]

Management

Adds context for recovered alerts {kibana-pull}132707[#132707]
Adds warnings for managed system policies {kibana-pull}132269[#132269]
Skip empty prompt screen {kibana-pull}130862[#130862]
Console now supports properly handling multiple requests. For es errors such as 400, 405 exception results are displayed with successful request results in the order they called {kibana-pull}129443[#129443]
Display vector tile API response in Console {kibana-pull}128922[#128922]
Adds option to disable keyboard shortcuts {kibana-pull}128887[#128887]

Maps

Show marker size in legend {kibana-pull}132549[#132549]
Fixes marker size scale issue for counts {kibana-pull}132057[#132057]
Scale marker size by area {kibana-pull}131911[#131911]
Localized basemaps {kibana-pull}130930[#130930]
Support term joins for Elasticsearch document source with vector tile scaling {kibana-pull}129771[#129771]
Allow feature editing for document layers with "applyGlobalTime", "applyGlobalQuery", and joins {kibana-pull}124803[#124803]

Observability

Bumps synthetics integration package to 0.9.4 {kibana-pull}133423[#133423]
Immediately re-run monitors in the synthetics service when they’re edited {kibana-pull}132639[#132639]
Enables log flyouts on APM logs tables {kibana-pull}132617[#132617]
Adds logging to Metric Threshold Rule {kibana-pull}132343[#132343]
Adds Page load distribution chart to overview page {kibana-pull}132258[#132258]
Show experimental locations only when a particular flag is enabled {kibana-pull}132063[#132063]
Trace explorer {kibana-pull}131897[#131897]
Static Java agent version list becomes stale quickly {kibana-pull}131759[#131759]
Adds recovery context to Log Threshold rule {kibana-pull}131279[#131279]
Adds recovery context to the Metric Threshold rule {kibana-pull}131264[#131264]
Adds context variables to recovery alerts for Inventory Threshold rule {kibana-pull}131199[#131199]
Copy alert state to alert context and implement alert recovery {kibana-pull}128693[#128693]
Progressive fetching (experimental) {kibana-pull}127598[#127598]
Replace environment dropdown with SuggestionsSelect in landing pages and service overview page {kibana-pull}126679[#126679]
Store Logs UI settings in a dedicated infrastructure-monitoring-log-view saved object {kibana-pull}125014[#125014]

Platform

The saved objects management table has a new "Last updated" column to easily access recently modified saved objects {kibana-pull}132525[#132525]
Sync panels tooltips on dashboard level {kibana-pull}130449[#130449]

Querying & Filtering

Support fields custom label on filter editor {kibana-pull}130533[#130533]
Allows comma delimiter on the filters multiple selections dropdowns {kibana-pull}130266[#130266]

Security

Disallows creating a role with an existing name in the role management page. Introduces an optional boolean createOnly parameter in the create role API to prevent overwriting existing roles; the default value is false, preserving the original API behavior {kibana-pull}132218[#132218]
Adds experimental csp.disableUnsafeEval config option. Set this to true to remove the unsafe-eval source expression from the script-src Content Security Policy (CSP) directive. The default value is false, which is identical to the original Kibana behavior {kibana-pull}124484[#124484]

Bug fixes

Alerting

Don’t load connectors and connector types when there isn’t an encryptionKey {kibana-pull}133335[#133335]
Adds cloud icon "ess-icon" at the end of the config keys in "alerting" {kibana-pull}131735[#131735]
Fixes optional spaceId in rules_client {kibana-pull}130704[#130704]

Content Managment

Fixes the listingLimit settings url {kibana-pull}129701[#129701]

Dashboard

Adds Fatal Error Handling {kibana-pull}133579[#133579]
Hide in Print Mode {kibana-pull}133446[#133446]
Send Control State to Reporting Via Locator {kibana-pull}133425[#133425]
Fixes new controls causing unsaved changes bug {kibana-pull}132850[#132850]

Design

Keyboard shortcut popup {kibana-pull}133069[#133069]
Adding aria-label for discover data grid select document checkbox {kibana-pull}131277[#131277]
Adds item descriptions to edit button screen reader labels in TableListView {kibana-pull}125334[#125334]

Discover

Hide "Add a field", "Edit" and "Create a data view" buttons in viewer mode {kibana-pull}134582[#134582]
Unify definition of field names and field descriptions {kibana-pull}134463[#134463]
Address "Don’t call Hooks" React warnings {kibana-pull}134339[#134339]
Include current filters into "Test query" request {kibana-pull}134184[#134184]
Prevent rule flyout from being open simultaneously with other popovers like search suggestions {kibana-pull}132108[#132108]
Fixes link to open new window {kibana-pull}131930[#131930]
Discover Classic View Filter In/Out placement when truncate:maxHeight is set to 0 {kibana-pull}129942[#129942]
Fixes inconsistent usage of arrow icons on Surrounding documents page {kibana-pull}129292[#129292]
Show a fallback empty message when no results are found {kibana-pull}128754[#128754]

Elastic Security

For the Elastic Security 8.3.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Bulk reassign kuery optimize {kibana-pull}134673[#134673]
Fixes flickering tabs layout in add agent flyout {kibana-pull}133769[#133769]
Adds $ProgressPreference to windows install command in flyout {kibana-pull}133756[#133756]
Fixes sorting by size on data streams table {kibana-pull}132833[#132833]

Infrastructure

Pass decorated server to routes {kibana-pull}133264[#133264]

Lens & Visualizations

Hide null cells in Heatmap {kibana-pull}134450[#134450]
Fixes formula generate error in Lens {kibana-pull}134434[#134434]
Better default for date_range agg in Visualize {kibana-pull}134220[#134220]
Keep suggestions stable in Lens {kibana-pull}134212[#134212]
Fixes voiceover drag and drop in Lens {kibana-pull}134196[#134196]
Fixes palette bug {kibana-pull}134159[#134159]
Fixes multi index pattern load on the server in TSVB {kibana-pull}134091[#134091]
Fixes axis title visibility bug in Lens {kibana-pull}134082[#134082]
Fixes broken drilldowns for gauges and heatmaps in Lens {kibana-pull}134008[#134008]
Fixes application of suffix formats in Lens {kibana-pull}133780[#133780]
Do not show edit field for record field in Lens {kibana-pull}133762[#133762]
Fixes discover drilldown for non-time field case in Lens {kibana-pull}133334[#133334]
Do not reset session on Lens load with filters in Lens {kibana-pull}133191[#133191]
Fixes transition issue in Lens {kibana-pull}132956[#132956]
Escape label in lodash set command in TSVB {kibana-pull}132932[#132932]
Changing the Data View logic with an initially missed Data View does not work in TSVB {kibana-pull}132796[#132796]
Terms with keyword field with "numbers" is displayed with a weird date in TSVB {kibana-pull}132226[#132226]
TSVB] Chart is failing when the user tries to add a percentile_rank {kibana-pull}132105[#132105]
Fixes metric label font size in Visualize {kibana-pull}132100[#132100]
Datatable: Do not apply truncation in value popover in Lens {kibana-pull}132005[#132005]
Fixes percentile rank math in TSVB {kibana-pull}132003[#132003]
Fixes timezone bucket shift in Timelion {kibana-pull}131213[#131213]
Fixes vega controls layout in Vega {kibana-pull}130954[#130954]
Fixes requesting not permitted or used data views in Timelion {kibana-pull}130899[#130899]
Fixed bugs when using include/exclude options for Terms in TSVB {kibana-pull}130884[#130884]
Make series agg work after math in TSVB {kibana-pull}130867[#130867]
Use elastic-charts axis calculation in Lens {kibana-pull}130429[#130429]
Make suggestions depend on active data in Lens {kibana-pull}129326[#129326]
Adds back setMapView function in Vega {kibana-pull}128914[#128914]
Fixes the Order by setting for split chart in metric and custom metric visualizations {kibana-pull}128185[#128185]

Machine Learning

Fixes creation of the custom URLs for Kibana Dashboard {kibana-pull}134248[#134248]
Fixes expanded row stats not loading all correctly whenever sort by cardinality {kibana-pull}134113[#134113]
Fixes Data visualizer showing 0 count in the doc count chart even though documents do exist {kibana-pull}134083[#134083]
Fixes querying anomalies for the Single Metric Viewer {kibana-pull}133419[#133419]
Fixes Anomaly Charts filtering based on the swim lane job selection {kibana-pull}133299[#133299]
Fixes handling of unrecognised URLs {kibana-pull}133157[#133157]
Prevent duplicate field selection in detector modal {kibana-pull}133018[#133018]
Fixes single metric job with doc_count field {kibana-pull}132997[#132997]
Hide job messages clear notifications tooltip on click {kibana-pull}132982[#132982]
Filtering category runtime fields in advanced wizard {kibana-pull}132916[#132916]
Fixes trained model testing so it is available for users with ML read permissions {kibana-pull}132698[#132698]
Adding type for job summary state {kibana-pull}131643[#131643]

Management

Fixes linebreaks (\r\n) mis-applied from history {kibana-pull}131037[#131037]
Fixes Kibana DevTool Copy as CURL does not url encode special chars in indice date math {kibana-pull}130970[#130970]
Fixes cat APIs returning as escaped string {kibana-pull}130638[#130638]
Fixes Elasticsearch doc VIEW IN CONSOLE will clean local Kibana console form history {kibana-pull}127430[#127430]

Maps

Fixes icon markers fail to load when browser zoomed out {kibana-pull}134367[#134367]
Hide create filter UI in canvas {kibana-pull}133943[#133943]
Use label features from ES vector tile search API to fix multiple labels {kibana-pull}132080[#132080]
Fixes Map panels should not show the user controls in a dashboard report {kibana-pull}131970[#131970]
Show "no results" found for vector tile aggregations when there are no results {kibana-pull}130821[#130821]

Monitoring

Prevent exceptions in rule when no data present {kibana-pull}131332[#131332]
Fixes displaying ES version for external collection {kibana-pull}131194[#131194]
Fixes node type detection for external collection {kibana-pull}131156[#131156]
Use server.publicBaseUrl in Alert links {kibana-pull}131154[#131154]

Observability

Fixes x-axis on error charts {kibana-pull}134193[#134193]
Display ENVIRONMENT_ALL label instead of value {kibana-pull}133616[#133616]
Fixes normalizers to not parse list values if they are already parsed {kibana-pull}133563[#133563]
Change bucket_scripts to use params for thresholds {kibana-pull}133214[#133214]
Use Observability rule type registry for list of rule types {kibana-pull}132484[#132484]
APM anomaly rule type should appear in observability rules page {kibana-pull}132476[#132476]
Fixes monitors details page errors {kibana-pull}132196[#132196]
Set a valid service_name for python APM onboarding {kibana-pull}131959[#131959]
Rename service groups template titles and links {kibana-pull}131381[#131381]
Show service group icon only for service groups {kibana-pull}131138[#131138]
Refactor Metric Threshold rule to push evaluations to Elasticsearch {kibana-pull}126214[#126214]
Ellipsis truncation issue - dependencies and service section {kibana-pull}122203[#122203]
Fixes lookback window for anomalies for anomaly alert {kibana-pull}93389[#93389]

Operations

Fixes error handling on precommit hook {kibana-pull}132998[#132998]

Platform

Prevents Kibana from bootlooping during migrations when Elasticsearch routing allocation settings are incompatible {kibana-pull}131809[#131809]

Querying & Filtering

Allows the negative character on the number type fields {kibana-pull}130653[#130653]

Reporting

Remove controls from reports {kibana-pull}134240[#134240]

Security

Session view process events index will now match on prefixed index {kibana-pull}133984[#133984]
Timestamp issue fix + updated Jest to include mock date format {kibana-pull}132290[#132290]
Session view alerts loading improvements, and other polish / bug fixes {kibana-pull}131773[#131773]

{kib} 8.2.3

Review the following information about the {kib} 8.2.3 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.2.2.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fixes

Elastic Security

For the Elastic Security 8.2.3 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Elastic Agent integration now installs automatically if agent monitoring is turned on in the agent policy {kibana-pull}133530[#133530]
Removes {beats} tutorials from the Elastic Stack category {kibana-pull}132957[#132957]

Management

Fixes an edge case in the Inspector request selector where duplicate request names could result in a UI bug {kibana-pull}133511[#133511]

Operations

Fixes an issue where node.options was reset between upgrades in deb and rpm packages {kibana-pull}133249[#133249]

Platform

defaultIndex attribute was migrated for config saved object {kibana-pull}133339[#133339]

{kib} 8.2.2

Review the following information about the {kib} 8.2.2 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.2.2.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fix

Machine Learning: Fixes width of icon column in Messages table {kibana-pull}132444[#132444]

{kib} 8.2.1

Review the following information about the {kib} 8.2.1 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.2.1.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.2/release-notes-8.2.0.html#breaking-changes-8.2.0[8.2.0] | {kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancements

Elastic Security

For the Elastic Security 8.2.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Monitoring

Adds the ability collect Telemetry {kibana-pull}130498[#130498]
Adds the ability to report panels in dashboards by type {kibana-pull}130166[#130166]

Bug fixes

Discover

Fixes Document Explorer infinite height growth {kibana-pull}131723[#131723]
Fixes links in helper callouts {kibana-pull}130873[#130873]

Elastic Security

For the Elastic Security 8.2.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Removes legacy component templates on package install {kibana-pull}130758[#130758]

Lens & Visualizations

Fixes time shift bug in Lens {kibana-pull}132000[#132000]
Fixes single color palette configuration {kibana-pull}131128[#131128]

Machine Learning

Removes alerting_rules from general job list items {kibana-pull}131936[#131936]
Fixes management app docs links {kibana-pull}130776[#130776]

Management

Restores data view management field type conflict detail modal {kibana-pull}132197[#132197]
Fixes test data for import and export between versions tests {kibana-pull}131470[#131470]
Fixes condition auto-completion for templates in Console {kibana-pull}126881[#126881]

Maps

Fixes background tiles in a map panel might not load in a screenshot report {kibana-pull}131185[#131185]

Observability

Services without application metrics display an error {kibana-pull}131347[#131347]
Correctly interprets the resetting and reverting job states {kibana-pull}129570[#129570]

Platform

Migrations incorrectly detects cluster routing allocation setting as incompatible {kibana-pull}131712[#131712]
Fixes resetting image values {kibana-pull}131610[#131610]
Fixes a bug causing the newsfeed to not be properly displayed in locales other than english {kibana-pull}131315[#131315]

{kib} 8.2.0

Review the following information about the {kib} 8.2.0 release.

Known issue

Lens & visualizations: A change in the Markdown library that {kib} uses to create TSVB Markdown visualizations and Text dashboard panels renders some tables differently. For more information, check out #767.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.2.0.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.1/release-notes-8.1.0.html#breaking-changes-8.1.0[8.1.0] | {kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Features

{kib} 8.2.0 adds the following new and notable features.

Alerting

Keep the number_of_scheduled_actions in event log {kibana-pull}128438[#128438]
Remove defaultRuleTaskTimeout and set ruleType specific timeout from kibana.yml {kibana-pull}128294[#128294]
Limit the executable actions per rule execution {kibana-pull}128079[#128079] and {kibana-pull}126902[#126902]

Cases

Adds Cases to the Stack Management page as a technical preview feature {kibana-pull}125224[#125224]

Dashboard

Adds time slider control {kibana-pull}128305[#128305]
Adds Control group search settings {kibana-pull}128090[#128090]
Adds hierarchical chaining setting to Controls {kibana-pull}126649[#126649]
Adds options list API and validation system {kibana-pull}123889[#123889]

Discover

Enables document explorer by default {kibana-pull}125485[#125485]
Adds Copy to clipboard ability for column name of Document Explorer {kibana-pull}123892[#123892]

Elastic Security

For the Elastic Security 8.2.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Lens & Visualizations

Adds manual annotations in Lens {kibana-pull}126456[#126456]
Adds multi-field group by in TSVB {kibana-pull}126015[#126015]
Adds ability to navigate to Lens with your current TSVB configuration {kibana-pull}114794[#114794]

Machine Learning

Add link to maps in charts section of Anomaly Explorer {kibana-pull}128697[#128697]
Testing trained models in UI {kibana-pull}128359[#128359]
Space aware trained models {kibana-pull}123487[#123487]

Management

Adds support for auto-complete for data streams {kibana-pull}126235[#126235]
Adds ability to filter Data View UI for runtime fields {kibana-pull}124114[#124114]
Adds ability to share data views across spaces via data view management {kibana-pull}123991[#123991]

Observability

Adds button which allows users to signup for the Synthetics service public beta {kibana-pull}128798[#128798]
Adds "View in App URL" {{context.viewInAppUrl}} variable to the rule templating language {kibana-pull}128281[#128281]
Adds "View in App URL" {{context.viewInAppUrl}} variable to the rule templating language {kibana-pull}128243[#128243]
Adds "View in App URL" {{context.viewInAppUrl}} variable to the rule templating language {kibana-pull}127890[#127890]
Adds view in app url as an action variable in the alert message for uptime app {kibana-pull}127478[#127478]

For more information about the features introduced in 8.2.0, refer to What’s new in 8.2.

Enhancements and bug fixes

For detailed information about the 8.2.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Adds error logs in rule details page {kibana-pull}128925[#128925]
Simplify error banner on rules {kibana-pull}128705[#128705]
Adds Previous Snooze button {kibana-pull}128539[#128539]
Adds Snooze UI and Unsnooze API {kibana-pull}128214[#128214]
Adds aggs to know how many rules are snoozed {kibana-pull}128212[#128212]
Adds a connector for xMatters {kibana-pull}122357[#122357]

Dashboard

Adds option to open dashboard drilldowns in new tab or window {kibana-pull}125773[#125773]
Adds range slider Control {kibana-pull}125584[#125584]

Discover

Adds ability to edit histogram as vis {kibana-pull}125705[#125705]

Elastic Security

For the Elastic Security 8.2.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.2.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Merge settings & mappings component template in @package {kibana-pull}128498[#128498]
Redesign agent flyout {kibana-pull}128381[#128381]
Adds a link from agent details page to agent dashboard {kibana-pull}127882[#127882]
Update add agent instructions in fleet managed mode for Kubernetes {kibana-pull}127703[#127703]
Added time_series_metric mapping for metric_type package field {kibana-pull}126322[#126322]
Added support for dimension field {kibana-pull}126257[#126257]
Refactor auto upgrade package policies logic {kibana-pull}125909[#125909]
Move mappings from index template to component template {kibana-pull}124013[#124013]

Lens & Visualizations

Adds normalize_by_unit function and option in Lens {kibana-pull}128303[#128303]
Adds suffix formatter in Lens {kibana-pull}128246[#128246]
Adds Xy gap settings in Lens {kibana-pull}127749[#127749]
Implements null instead of zero switch in Lens {kibana-pull}127731[#127731]
Adds ability to include empty rows setting for date histogram in Lens {kibana-pull}127453[#127453]
Adds support for multi rows headers for the table visualization in Lens {kibana-pull}127447[#127447]
Adds ability to open Lens visualizations in Discover from dashboards {kibana-pull}127355[#127355]
Auto-set exists filtering for last value in Lens {kibana-pull}127251[#127251]
Adds ability to include number of values in default terms field label in lens {kibana-pull}127222[#127222]
Adds ability to drop partial buckets option in Lens {kibana-pull}127153[#127153]
Addds ability to allow top metric for last value in Lens {kibana-pull}127151[#127151]
Improves Datatable content height with custom row height in Lens {kibana-pull}127134[#127134]
Adds ability to set legend pixel width in Lens {kibana-pull}126018[#126018]
Adds underlying data editor navigation in Lens {kibana-pull}125983[#125983]
Adds top metrics aggregation to AggConfigs, Expressions, and Visualize {kibana-pull}125936[#125936]
Adds the ability to detach from global time range in Lens {kibana-pull}125563[#125563]
Adds last value, min and max on dates, allow last value on ip_range, number_range, and date_range in Lens {kibana-pull}125389[#125389]
Adds version-aware sorting to data table in Lens {kibana-pull}125361[#125361]
Cancel discarded searches in Timelion {kibana-pull}125255[#125255]
Cancel discarded searches in TSVB {kibana-pull}125197[#125197]
Adds the ability to allow users to disable auto-apply in Lens {kibana-pull}125158[#125158]
Adds Filter custom label for kibanaAddFilter in Vega {kibana-pull}124498[#124498]
Adds metric Viz config options, title position, and sizing in Lens {kibana-pull}124124[#124124]
Adds the ability to make graph edges easier to click {kibana-pull}124053[#124053]
Adds "Show empty rows" options to intervals function in Lens {kibana-pull}118855[#118855]

Machine Learning

Combines annotations into one block if multiple annotations overlap {kibana-pull}128782[#128782]
Adds throughput_last_minute to the deployment stats {kibana-pull}128611[#128611]
Adds new API endpoint to improve anomaly chart performance {kibana-pull}128165[#128165]
Utilize ML memory stats endpoint for the memory overview chart {kibana-pull}127751[#127751]
Deleting trained model space checks {kibana-pull}127438[#127438]
Show at least one correlation value and consolidate correlations columns {kibana-pull}126683[#126683]
Include fields not in docs in Data Visualizer field name control {kibana-pull}126519[#126519]
Anomaly Explorer performance enhancements {kibana-pull}126274[#126274]
Fixes Index data visualizer reaching Elasticsearch rate request limits {kibana-pull}124898[#124898]
Adds cache for data recognizer module configs to reduce number of privilege checks {kibana-pull}126338[#126338]

Management

Extend Transform Health alerting rule with error messages check {kibana-pull}128731[#128731]
Enable opening queries from any UI {kibana-pull}127461[#127461]
No Data Views Component {kibana-pull}125403[#125403]

Maps

Remove usage of max file size advanced setting 1GB limit in geo file upload {kibana-pull}127639[#127639]
Adds support for geohex_grid aggregation {kibana-pull}127170[#127170]
Lens choropleth chart {kibana-pull}126819[#126819]
Register GeoJson upload with integrations page {kibana-pull}126350[#126350]
Support custom icons in maps {kibana-pull}113144[#113144]

Observability

Guided setup progress {kibana-pull}128382[#128382]
Enable check for public beta {kibana-pull}128240[#128240]
Guided setup button on the overview page {kibana-pull}128172[#128172]
Show warning when users exceed a Synthetics Node throttling limits {kibana-pull}127961[#127961]
Adds logging to Inventory Threshold Rule {kibana-pull}127838[#127838]
O11y rules page {kibana-pull}127406[#127406]
Enrich documents generated by the synthetics service with port information {kibana-pull}127180[#127180]
Make UI indices space aware (support for spaces) {kibana-pull}126176[#126176]
Setting for default env for service inventory {kibana-pull}126151[#126151]
Alerts in overview page {kibana-pull}125337[#125337]
Adds log rate to Exploratory View {kibana-pull}125109[#125109]
Support switching between log source modes {kibana-pull}124929[#124929]
Overview style updates {kibana-pull}124702[#124702]
Adds full screen/copy button ability in browser inline script editing {kibana-pull}124500[#124500]
Update position of legend and it’s controls {kibana-pull}115854[#115854]

Platform

Allow customizing {es} client maxSockets {kibana-pull}126937[#126937]

Bug Fixes

Alerting

Fixes bug when providing a single value to the fields query parameter of the Cases find API {kibana-pull}128143[#128143]
Fixes the count of alerts in the cases table. Only unique alerts are being counted {kibana-pull}127721[#127721]
Do not show the lens action if Visualize feature is not enabled {kibana-pull}127613[#127613]

Dashboard

Fixes control removal {kibana-pull}128699[#128699]
Select televant data view ID {kibana-pull}128440[#128440]
Close controls flyouts on unmount, save, and view mode change {kibana-pull}128198[#128198]

Discover

Account for hidden time column in default sort {kibana-pull}129659[#129659]
Make field icons consistent across field list and doc tables {kibana-pull}129621[#129621]
Fixes Filter for field present in expanded document view of Document Explorer {kibana-pull}129588[#129588]
Cancel long running request after navigating out from Discover {kibana-pull}129444[#129444]
Fixes height of JSON tab in Document flyout when using Document explorer in Safari {kibana-pull}129348[#129348]
Fixes stuck action menu in expanded document sidebar {kibana-pull}127588[#127588]

Elastic Security

For the Elastic Security 8.2.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Lens & Visualizations

Fixes multi index pattern load bug in TSVB {kibana-pull}130428[#130428]
Handle empty values for range formatters {kibana-pull}129572[#129572]
Apply pinned filters to Lens {kibana-pull}129503[#129503]
Imported vislib pie triggers unsaved viz warning when embedded on a dashboard in Visualize {kibana-pull}129336[#129336]
Fixes auto session-renewal on non-timebased data views in Lens {kibana-pull}129313[#129313]
Fixes steps behavior to happen at the change point in TSVB {kibana-pull}128741[#128741]
Improve check for 0 opacity in TSVB {kibana-pull}128630[#128630]
Fixes firefox scrollbars in Vega {kibana-pull}128515[#128515]
Log data tables properly in Lens {kibana-pull}128297[#128297]
Fixes annotation bounds bug in TSVB {kibana-pull}128242[#128242]
Make sure x axis values are always strings in Lens {kibana-pull}128160[#128160]
Use default number formatter as fallback if nothing else is specified in Timelion {kibana-pull}128155[#128155]
Enable Save&Return button for canvas when dashboard permissions are off in Visualize {kibana-pull}128136[#128136]
Fixes permission problem for "Save and return" button in Lens {kibana-pull}127963[#127963]
Restore operation auto switch based on field type in Lens {kibana-pull}127861[#127861]
Fixes mosaic color syncing in Lens {kibana-pull}127707[#127707]
Make edge selection work {kibana-pull}127456[#127456]
Remove opacity for fitting line series {kibana-pull}127176[#127176]
Handle line/area fitting function when the editor has started with bar configuration in Visualize {kibana-pull}126891[#126891]
Preserve custom label when changing with multi-terms settings in Lens {kibana-pull}126773[#126773]
Fixes multi terms fields validation in Lens {kibana-pull}126618[#126618]
Make Embeddable resilient when toggling actions in Lens {kibana-pull}126558[#126558]
Make graph app resilient to no fields or missing data views {kibana-pull}126441[#126441]
Fixes Formula to Quick functions does not preserve custom formatting in Lens {kibana-pull}124840[#124840]
Inspector displays only visible content {kibana-pull}124677[#124677]
Coloring tooltips in Heatmap are not properly positioned in Visualize {kibana-pull}124507[#124507]
Adds rison helper and URL encoding for drilldown urls in TSVB {kibana-pull}124185[#124185]

Machine Learning

Fixes alignment of Anomaly Explorer swim lane annotations label on Firefox {kibana-pull}130274[#130274]
Fixes Single Metric Viewer chart failing to load if no points during calendar event {kibana-pull}130000[#130000]
Fixes Single Metric Viewer for jobs that haven’t been run {kibana-pull}129063[#129063]
Fix outlier detection results exploration color legend display {kibana-pull}129058[#129058]
Fixes new anomaly detection job from saved search with no query filter {kibana-pull}129022[#129022]
Fixes data frame analytics map saved object sync warning {kibana-pull}128876[#128876]
Adds error toast to Data visualizer when using unpopulated time field {kibana-pull}127196[#127196]

Management

Transforms: Fix to not pass on default values in configurations {kibana-pull}129091[#129091]
Encode + sign in ISO8601 time range in query {kibana-pull}126660[#126660]

Maps

Fixes lens region map visualization throws a silent error {kibana-pull}129608[#129608]
Fixes double click issue when deleting a shape {kibana-pull}124661[#124661]

Monitoring

Exclude Malwarescore + Ransomware EP alerts from DRule telemetry {kibana-pull}130233[#130233]
Rename "APM & Fleet Server" to "Integrations Server" {kibana-pull}128574[#128574]
Fixes sorting by node status on nodes listing page {kibana-pull}128323[#128323]

Observability

Service environment should be selected when you edit the agent configuration {kibana-pull}129929[#129929]
Adds migration to include synthetics and heartbeat indices on 8.2.0 {kibana-pull}129510[#129510]
Rules summary on the Alerts view is not showing the count of rules {kibana-pull}129052[#129052]
Fixes shadow for overview panels {kibana-pull}128878[#128878]
Ensure rum_allow_origins setting only saves valid YAML strings {kibana-pull}128704[#128704]
Standardize NOW as startedAt from executor options {kibana-pull}128020[#128020]
Fixes synthetics recorder file upload {kibana-pull}127614[#127614]
Service Maps popover detail metrics are aggregates over all transaction types {kibana-pull}125580[#125580]

Platform

Fixes an issue where duplicate data appears in the inspector datatable in Lens for heatmap visualizations, and stale data persists in the inspector datatable when you remove layers {kibana-pull}126786[#126786]
Fixes an issue that caused {kib} to become unresponsive while generating a PDF report {kibana-pull}124787[#124787]
Fixes an issue where an unfriendly notification title displays after you create a report {kibana-pull}123607[#123607]

Security

Fixes styles for "You do not have permission" screen {kibana-pull}129715[#129715]
Change session expiration to override on app leave behavior {kibana-pull}129384[#129384]

{kib} 8.1.3

Review the following information about the {kib} 8.1.3 release.

Security update

The 8.1.3 release contains a fix to a potential security vulnerability. For more information, check Security Announcements.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.1.3.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Bug fix

Discover

Fixes toggle table column for classic table {kibana-pull}128603[#128603]

{kib} 8.1.2

Review the following information about the {kib} 8.1.2 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.1.2.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancement

Dashboard: Improve controls management UX {kibana-pull}127524[#127524]

Bug fixes

Discover

Fixes toggle table column for classic table {kibana-pull}128603[#128603]
Fixes selection popover close action without making a selection in Document Explorer {kibana-pull}128124[#128124]

Elastic Security

For the Elastic Security 8.1.2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Management

Handle scenario when user has no indices {kibana-pull}128066[#128066]

Monitoring

Rename "APM & Fleet Server" to "Integrations Server" {kibana-pull}128574[#128574]

Platform

Fixes KQL typeahead missing description and improve display for long field names {kibana-pull}128480[#128480]

{kib} 8.1.1

Review the following information about the {kib} 8.1.1 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.1.1, review the breaking changes, then mitigate the impact to your application.

There are no breaking changes in {kib} 8.1.1.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Enhancement

Dashboard: Improves controls empty state {kibana-pull}125728[#125728]

Bug fixes

Data ingest

The dot expander processor in the Ingest Pipelines UI now allows setting a wildcard (*) for the field parameter {kibana-pull}123522[#123522]

Elastic Security

For the Elastic Security 8.1.1 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.1.1 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Adds a new validation message {kibana-pull}127239[#127239]
Fixes empty assets on package install {kibana-pull}127070[#127070]
Hide enroll command when user creates a new agent policy in the Add agent flyout {kibana-pull}126431[#126431]
Makes input IDs unique in agent policy yaml {kibana-pull}127343[#127343]
Fixes links to Agent logs for APM, Endpoint, Synthetics, and OSQuery {kibana-pull}127480[#127480]

{kib} 8.1.0

Review the following information about the {kib} 8.1.0 release.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.1.0, review the breaking changes, then mitigate the impact to your application.

Removes legacy CSV export type

Details
The /api/reporting/generate/csv endpoint has been removed. For more information, refer to {kibana-pull}121435[#121435].

Impact
If you are using 7.13.0 and earlier, {kibana-ref-all}/8.1/automating-report-generation.html[regenerate the POST URLs] that you use to automatatically generate CSV reports.

Removes legacy PDF shim

Details
The POST URLs that you generated in {kib} 6.2.0 no longer work. For more information, refer to {kibana-pull}121369[#121369].

Impact
{kibana-ref-all}/8.1/automating-report-generation.html[Regenerate the POST URLs] that you use to automatatically generate PDF reports.

To review the breaking changes in previous versions, refer to the following:

{kibana-ref-all}/8.0/release-notes-8.0.0.html#breaking-changes-8.0.0[8.0.0] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc2.html#breaking-changes-8.0.0-rc2[8.0.0-rc2] | {kibana-ref-all}/8.0/release-notes-8.0.0-rc1.html#breaking-changes-8.0.0-rc1[8.0.0-rc1] | {kibana-ref-all}/8.0/release-notes-8.0.0-beta1.html#breaking-changes-8.0.0-beta1[8.0.0-beta1] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha2.html#breaking-changes-8.0.0-alpha2[8.0.0-alpha2] | {kibana-ref-all}/8.0/release-notes-8.0.0-alpha1.html#breaking-changes-8.0.0-alpha1[8.0.0-alpha1]

Features

{kib} 8.1.0 adds the following new and notable features.

Canvas

Adds Heatmap {kibana-pull}120239[#120239]
Adds the Filters panel for element settings {kibana-pull}117270[#117270] and {kibana-pull}116592[#116592]

Discover

Adds document explorer callout {kibana-pull}123814[#123814]
Adds ability to create data views from the sidebar {kibana-pull}123391[#123391]
Adds redirect if there are no data views {kibana-pull}123366[#123366]
Adds row height options {kibana-pull}122087[#122087]

Elastic Security

For the Elastic Security 8.1.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Lens & Visualizations

Adds the waffle visualization type to Lens {kibana-pull}119339[#119339]
Adds the gauge visualization type to Lens {kibana-pull}118616[#118616]
Adds multi terms support to Top Values in Lens {kibana-pull}118600[#118600]
Adds a new heatmap implementation with elastic-charts to Visualize Library {kibana-pull}118338[#118338]
Adds the Mosaic or mekko visualization type to Lens {kibana-pull}117668[#117668]
Adds the ability to configure the Metric visualization type color palette in Lens {kibana-pull}116170[#116170]

Machine Learning

Enable Field statistics table on by default {kibana-pull}124046[#124046]
Adds grouping to the side nav {kibana-pull}123805[#123805]
Integration part 1: Create anomalies layer in maps {kibana-pull}122862[#122862]
Replace navigation bar with a side nav {kibana-pull}121652[#121652]
Overview page redesign {kibana-pull}120966[#120966]

Management

Support suggesting index templates v2 {kibana-pull}124655[#124655]
Console now supports autocompletion for index templates and component templates introduced in {es} 7.8.0.
Transforms: Support to set destination ingest pipeline {kibana-pull}123911[#123911]
Transforms: Adds reset action to transforms management {kibana-pull}123735[#123735]
Transforms: Support for terms agg in pivot configurations {kibana-pull}123634[#123634]

Observability

Adds Tail-based sampling settings {kibana-pull}124025[#124025]
APM UI changes for serverless services / AWS lambda {kibana-pull}122775[#122775]

For more information about the features introduced in 8.1.0, refer to What’s new in 8.1.

Enhancements and bug fixes

For detailed information about the 8.1.0 release, review the enhancements and bug fixes.

Enhancements

Alerting

Adds P50/95/99 for rule execution duration in the rules table {kibana-pull}123603[#123603]
Adds dropdown for number of executions in Rule Details view {kibana-pull}122595[#122595]

Canvas

Adds titles to the heatmap axis {kibana-pull}123992[#123992]
Adds the esql Monaco editor {kibana-pull}118531[#118531]
Adds expression metrisVis workpad arguments {kibana-pull}114808[#114808]

Dashboard

Adds the ability to always allow internal URLs in Vega {kibana-pull}124705[#124705]

Data ingest

Adds the ability to create ingest pipelines from a CSV upload that enables mapping custom data source into ECS {kibana-pull}101216[#101216]

Discover

Improves the document explorer flyout {kibana-pull}120116[#120116]
Adds the ability to preserve Discover main route state in breadcrumb links {kibana-pull}119838[#119838]
Adds error state if chart loading fails {kibana-pull}119289[#119289]
Enable Field statistics table on by default {kibana-pull}124046[#124046]

Elastic Security

For the Elastic Security 8.1.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Adds shipper label {kibana-pull}122491[#122491]
Adds support for non-superuser access to Fleet and Integrations {kibana-pull}122347[#122347]
Adds support for bundling packages as zip archives with {kib} source {kibana-pull}122297[#122297]
Makes the default integration install explicit {kibana-pull}121628[#121628]

Lens & Visualizations

Addx suport for timefilter/min/max in Vega URLs {kibana-pull}124077[#124077]
The filtered field list now uses field caps API in Lens {kibana-pull}122915[#122915]
Updates the Lens empty state copy {kibana-pull}122174[#122174]
Adds a global filter for formulas in Lens {kibana-pull}121768[#121768]
Adds rare terms in Lens {kibana-pull}121500[#121500]
Adds previous time shift back in Lens {kibana-pull}121284[#121284]
Adds the size ratio setting to pie and donut charts in Lens {kibana-pull}120101[#120101]
Adds multi terms dnd support in Lens {kibana-pull}119841[#119841]
Improves the color stop UI in Lens {kibana-pull}119165[#119165]
Enables table pagination in Lens {kibana-pull}118557[#118557]
Adds support for ephemeral sort to the data table embeddable {kibana-pull}117742[#117742]
Debounce duplicate error messages in Vega {kibana-pull}116408[#116408]
Replaces EUICodeEditor with Monaco in Vega {kibana-pull}116041[#116041]

Machine Learning

Adds missing document titles {kibana-pull}124125[#124125]
Synchronize Anomaly charts cursor position for X-axis with Lens visualizations in Dashboard {kibana-pull}123951[#123951]
Adds grouping to the side nav {kibana-pull}123805[#123805]
Adds empty states for the Jobs list pages {kibana-pull}123462[#123462]
Adds error messages to Index data visualizer and improve distribution charts for fields with low cardinality {kibana-pull}123306[#123306]
Standardize Add embeddable flow from the Anomaly Explorer page {kibana-pull}123199[#123199]
Integration part 1: Create anomalies layer in Maps* {kibana-pull}122862[#122862]
Adds options to exclude or include frozen data tier for Anomaly detection and Index data visualizer {kibana-pull}122306[#122306]
Editing semi-structured text fields in grok pattern {kibana-pull}122274[#122274]
Adds extra search deep links for nodes overview and file upload {kibana-pull}121740[#121740]
Replace navigation bar with a side nav {kibana-pull}121652[#121652]
File data visualizer reduce chunk size for slow processors {kibana-pull}121353[#121353]
Adds ability to save session to Index data visualizer {kibana-pull}121053[#121053]
Overview page redesign {kibana-pull}120966[#120966]
Adds Maps UI action to Index data visualizer/Discover Field statistics {kibana-pull}120846[#120846]
Adds auto generated drill down link to Discover for Anomaly explorer table {kibana-pull}120450[#120450]
Adds multilayer time axis style to Data visualizer doc count chart {kibana-pull}117398[#117398]

Management

Transforms: Add call out warning & delete option if a task exists for a transform without a config {kibana-pull}123407[#123407]
Adds warnings for actions for managed Anomaly detection jobs and Transforms {kibana-pull}122305[#122305]
Refresh frequency refinements {kibana-pull}122125[#122125]
Configure refresh frequency {kibana-pull}121874[#121874]
Geo point field formatter {kibana-pull}121821[#121821]
Adds links to docs {kibana-pull}121066[#121066]
Highlight the tutorial example text with console syntax {kibana-pull}120474[#120474]
Compress mappings response size for autocomplete {kibana-pull}120456[#120456]
Handle binary data response {kibana-pull}119586[#119586]
Improve error handling when local storage quota is full {kibana-pull}118495[#118495]
Error handling {kibana-pull}109233[#109233]

Maps

Adds Shapefile import {kibana-pull}123764[#123764]
Should be able to zoom in on selected range of timeslider {kibana-pull}122131[#122131]
Delete button should be toggleable in Edit Features {kibana-pull}122017[#122017]
Change "show as" from EuiSelect to EuiButtonGroup {kibana-pull}121960[#121960]
Format counts {kibana-pull}119646[#119646]
Convert maki icons to SDF sprites on-the-fly {kibana-pull}119245[#119245]
Convert HeatmapLayer to vector tiles and add support for high resolution grids {kibana-pull}119070[#119070]
Make the icon for max results limit more evident {kibana-pull}118044[#118044]
Enable on-prem for Vega {kibana-pull}104422[#104422]

Monitoring

Compatibility for agent data streams {kibana-pull}119112[#119112]

Observability

Adds Tail-based sampling settings {kibana-pull}124025[#124025]
UI Monitor Management - Add namespace field {kibana-pull}123248[#123248]
Default alert connectors email settings {kibana-pull}123244[#123244]
Only show span.sync badge when relevant {kibana-pull}123038[#123038]
Optimize waffle map {kibana-pull}122889[#122889]
APM UI changes for serverless services / AWS lambda {kibana-pull}122775[#122775]
Update the style of the service/backend info icons in the selected service/backend header {kibana-pull}122587[#122587]
Adds basic infra metrics config {kibana-pull}120881[#120881]
Adds comparision to service maps popover {kibana-pull}120839[#120839]
Link originating service in traces list table {kibana-pull}120768[#120768]
Prefer service.name for logs correlation {kibana-pull}120694[#120694]
Query numerator & denominator simultaneously for log threshold alerts {kibana-pull}107566[#107566]

Operations

Improves the file logging capabilities so that missing directories in the configured file path are now created before {kib} attempts to write to the file {kibana-pull}117666[#117666]

Platform

Add a new elasticsearch.compression configuration property to enable compression for communications between {kib} and {es} {kibana-pull}124009[#124009]
Adds support of comments {kibana-pull}122457[#122457]
Adds support for PNG and PDF reports on Darwin Arm64 architecture {kibana-pull}122057[#122057]
Short URL client is now accessible on the frontend through plugin contract. Dashboard and Discover shared short URLs now contain a three word, human-readable slug {kibana-pull}121886[#121886]
Adds the ability to add URL drilldowns to Dashboard panels {kibana-pull}121801[#121801]
Adds a new structure to the report details flyout to help you find information faster {kibana-pull}120617[#120617]
Adds HTML tag and impact level to axe-core CI violation reporter {kibana-pull}119903[#119903]
Exposes {es} accuracy warnings to the user {kibana-pull}116632[#116632]

Querying & Filtering

Improves the version field type {kibana-pull}123739[#123739]

Security

Audit logs now include records for individual saved objects when an entire space is deleted {kibana-pull}124145[#124145]
User login audit events now include the session ID for better correlation, and single sign-on flows no longer result in an extra user_logout event {kibana-pull}124299[#124299]

Bug Fixes

Alerting

Fixes the pagination results for fetching existing alerts {kibana-pull}122474[#122474]
Running disabled rules are now skipped {kibana-pull}119239[#119239]

Canvas

Fixes an issue where the image repeat element was not updating {kibana-pull}118701[#118701]
Fixes an issue where Canvas validated values before saving variables {kibana-pull}118694[#118694]

Dashboard

Adds the listing page callout when new dashboards are in progress {kibana-pull}117237[#117237]

Discover

Adds the ability to close the expanded document sidebar when you change data views {kibana-pull}119736[#119736]
Fixes search on page load tests {kibana-pull}119087[#119087]

Elastic Security

For the Elastic Security 8.1.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Enterprise Search

For the Elastic Enterprise Search 8.1.0 release information, refer to {enterprise-search-ref}/changelog.html[Elastic Enterprise Search Documentation Release notes].

Fleet

Readded missing packages to keep up to date list {kibana-pull}125787[#125787]
Trimmed whitespace from package policy names {kibana-pull}125400[#125400]

Lens & Visualizations

Fixes some dashboard visualizations that could show "Could not located index pattern" errors when copied from one space to another {kibana-pull}126499[#126499]
Rarity is not allowed in some cases in Lens {kibana-pull}125523[#125523]
Fixes formatting logic for terms in Lens {kibana-pull}125408[#125408]
Fixes focus on submitting filter popover in Lens {kibana-pull}125247[#125247]
Fixes agg filter for sibling pipeline aggs {kibana-pull}125227[#125227]
Panel intervals are now used for annotations in TSVB {kibana-pull}125222[#125222]
Outdated inspector data is now hidden in Vega {kibana-pull}125051[#125051]
Vega visualizations are no longer missing in sample data reports {kibana-pull}124886[#124886]
Lucene queries on dashboards are now accepted on annotations and tables in TSVB {kibana-pull}124802[#124802]
Top values now work for custom numeric formatters in Lens {kibana-pull}124566[#124566]
Coloring tooltip in Heatmap is now working for ">= n" values in Visualize Library {kibana-pull}124521[#124521]
Fixes a metric contrast issue in TSVB {kibana-pull}124509[#124509]
Do not refresh session on "now" drift on incoming data in Lens {kibana-pull}124389[#124389]
Coloring tooltips in Pie are not properly positioned in Visualize {kibana-pull}124330[#124330]
Label placeholder always defaults to the lens proposed text in Lens {kibana-pull}124222[#124222]
Show warning for completely static formula in Lens {kibana-pull}124213[#124213]
Adds step value to make Safari validation work properly in Lens {kibana-pull}124210[#124210]
Guard against parse failures in Visualize {kibana-pull}124209[#124209]
Fixes heatmap suggestions in Lens {kibana-pull}124099[#124099]
Fixes the percentage format for percentiles series {kibana-pull}124098[#124098]
Displays custom bounds error for right axis when lower bound is above 0 in Lens {kibana-pull}124037[#124037]
Clicking a series agg timeseries chart split by terms should not create a filter in TSVB {kibana-pull}124031[#124031]
Save default data view in TSVB {kibana-pull}123997[#123997]
Switch default bar width to 0px in TSVB {kibana-pull}123926[#123926]
Formatting in the left axis is not respected when I have two separate axis in TSVB {kibana-pull}123903[#123903]
Fixes series containing colon in TSVB {kibana-pull}123897[#123897]
Fixes records field name and migrate in Lens {kibana-pull}123894[#123894]
Hides ticks on the y axis for layers with the same format and different template in TSVB {kibana-pull}123598[#123598]
Various fixes for Lens embeddables in Lens {kibana-pull}123587[#123587]
Make sure session is updated and passed to the embeddable in Visualize {kibana-pull}123538[#123538]
Fixes time range issue on save in Lens {kibana-pull}123536[#123536]
Report override data views to the dashboard in TSVB {kibana-pull}123530[#123530]
Handle ignore daylight time correctly and fix shift problem in TSVB {kibana-pull}123398[#123398]
AggConfigs: Make base id check more stable {kibana-pull}123367[#123367]
TSVB fix flickering {kibana-pull}122921[#122921]
Hide tooltips while dragging dimensions in Lens {kibana-pull}122198[#122198]
Make sure saved search id is carried over to saved object {kibana-pull}121082[#121082]
Paginate through index patterns {kibana-pull}120972[#120972]
Show generic error for invalid time shift string in Lens {kibana-pull}120077[#120077]
Improves column type detection in table for alignment in Lens {kibana-pull}120007[#120007]
Fixes the broken "aggregate function" in TSVB table {kibana-pull}119967[#119967]
Hide fit from suggestions in Timelion {kibana-pull}119568[#119568]
Match visualization type to first series type when available {kibana-pull}119377[#119377]
Timelion & vega apply dataview from first filter in Vega {kibana-pull}119209[#119209]
Reset filter state whenever group-by changed in TSVB {kibana-pull}118953[#118953]
Prevent KQL Popovers From Stacking in Lens {kibana-pull}118258[#118258]
Improves outside label placement for pie/donut charts in Lens {kibana-pull}115966[#115966]

Machine Learning

Fixes permission check for 'View examples' link from Anomaly detection explorer page {kibana-pull}125090[#125090]
Fixes auto-refresh interval {kibana-pull}124851[#124851]
Fixes permission check for Discover/data view redirect from Anomaly detection explorer page {kibana-pull}124408[#124408]
Fixes breadcrumbs inconsistencies and titles capitalisation {kibana-pull}123019[#123019]

Management

Update painless antlr grammar for fields API $-syntax {kibana-pull}125818[#125818]
Adds permission check for 'Set as default data view' button on data view detail page {kibana-pull}124897[#124897]
In Index Management, index details now display previously missing values for the number of deleted documents and the primary storage size {kibana-pull}124731[#124731]
Transforms: Fix retention policy reset {kibana-pull}124698[#124698]
Transforms: Fix sort on field names containing dots not applied in wizard preview grid {kibana-pull}124587[#124587]
Transforms: Fix refresh when transform list is filtered {kibana-pull}124267[#124267]
Fixes autocomplete inserting comma in triple quotes {kibana-pull}123572[#123572]
Encode pathname {kibana-pull}122080[#122080]
Autocomplete missing comma on correct location {kibana-pull}121611[#121611]
Fixes wrong values in field format editor; fix wrong value formatting in field preview {kibana-pull}121300[#121300]
Fixes autocomplete suggestions for lowercase methods and other related bug {kibana-pull}121033[#121033]
Fixes autocomplete suggestions for repository of type fs (typo) {kibana-pull}120775[#120775]
Fixes editor error while adding second request {kibana-pull}120593[#120593]
Dev Tools Console: Expose the error_trace parameter for completion {kibana-pull}120290[#120290]
Auto complete for script suggests deprecated query type {kibana-pull}120283[#120283]
Fixes "Expected one of GET/POST/PUT/DELETE/HEAD" for lowercase methods {kibana-pull}120209[#120209]
Make the Define script label non clickable {kibana-pull}119947[#119947]
Fixes error markers in editor output {kibana-pull}119831[#119831]
Change suggestions for Sampler and Diversified sampler aggregations {kibana-pull}119355[#119355]
Adds Autocompletion for boxplot aggregation in Kibana Dev tools {kibana-pull}117024[#117024]
Adds overrides for request parameters for Logstash PUT Pipeline API {kibana-pull}116450[#116450]
@timestamp as default for timestamp field name in index pattern {kibana-pull}116126[#116126]

Maps

Fixes vector tile URL not properly encoded {kibana-pull}126208[#126208]
Allows feature editing with vector tile scaling {kibana-pull}123409[#123409]
Fixes Error rendering cluster layer of geoshape documents styled by category {kibana-pull}123308[#123308]
Fetch geometry from fields API {kibana-pull}122431[#122431]
Fixes vector tile double counting geo_shapes that cross tile boundaries {kibana-pull}121703[#121703]
Refactor map telemetry to incrementally calculate usage stats {kibana-pull}121467[#121467]
Fixes creating filter from array fields {kibana-pull}119548[#119548]

Monitoring

Stronger typing for monitoring configs {kibana-pull}125467[#125467]
Fixes Alerts and Rules menu persisting to other apps {kibana-pull}124291[#124291]
Fixes Logstash Pipeline hover timestamp isn’t visible {kibana-pull}123091[#123091]
Fixes date picker range options {kibana-pull}121295[#121295]

Observability

Set display names for columns and fix reason message {kibana-pull}124570[#124570]
Rename Backend to Dependency {kibana-pull}124067[#124067]
Enable parseTechnicalFields to accept partial alert documents {kibana-pull}123983[#123983]
Include error documents in fallback query for services {kibana-pull}123554[#123554]
Rewrite the data fetching for Inventory Threshold rule {kibana-pull}123095[#123095]
Optimizations for Inventory Threshold Alerts {kibana-pull}122460[#122460]
Increase composite size to 10K for Metric Threshold Rule and optimize processing {kibana-pull}121904[#121904]
Fixes missing EUI theme in context {kibana-pull}121796[#121796]
Rename alerting types in triggers_actions_ui {kibana-pull}121107[#121107]
Fixes loading message for correlations table {kibana-pull}120921[#120921]
Prefer host.name over host.hostname {kibana-pull}119952[#119952]

Platform

Improve bfetch error handling {kibana-pull}123455[#123455]
Fixes a CSV export Reporting issue where expensive queries were used to collect the data when they were not needed {kibana-pull}123412[#123412]
Fixes URL drilldown placeholder text and add placeholder capability to Monaco {kibana-pull}121420[#121420]
Consider expired tasks invalid {kibana-pull}119664[#119664]
columns. Fixes Bugs caused by using name instead of ID {kibana-pull}118470[#118470]

Security

User login audit events now include the session ID for better correlation, and single sign-on flows no longer result in an extra user_logout event {kibana-pull}124299[#124299]

{kib} 8.0.0

Review the {kib} 8.0.0 changes, then use the {kibana-ref-all}/7.17/upgrade-assistant.html[Upgrade Assistant] to complete the upgrade.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.0.0, review the breaking change, then mitigate the impact to your application.

Removes the console.ssl setting

Details
The console.ssl setting has been removed. For more information, refer to {kibana-pull}123754[#123754].

Impact
Before you upgrade to 8.0.0, remove console.ssl from kibana.yml.

To review the breaking changes in previous versions, refer to the following:

8.0.0-rc2 | 8.0.0-rc1 | 8.0.0-beta1 | 8.0.0-alpha2 | 8.0.0-alpha1

Deprecation

The following functionality is deprecated in 8.0.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.0.0.

Removes support for monitoring.cluster_alerts.allowedSpaces

Details
The monitoring.cluster_alerts.allowedSpaces setting, which {kib} uses to create Stack Monitoring alerts, has been removed. For more information, refer to {kibana-pull}123229[#123229].

Impact
Before you upgrade to 8.0.0, remove monitoring.cluster_alerts.allowedSpaces from kibana.yml.

To review the deprecations in previous versions, refer to the following:

8.0.0-rc1 | 8.0.0-alpha1

Known issue

Importing and copying saved objects causes weak links to break

Details
{kib} supports weak links in some saved objects. For example, a dashboard may include a Markdown panel that contains a relative URL to another dashboard. Weak links are defined by free text, not the saved object’s relationships, and can break if both of the following conditions are true:

You are importing saved objects into multiple spaces, OR you are copying saved objects into another space
Before you upgraded to 8.0.0, the saved objects did not already exist in the destinations

In 8.0.0 and later, weak links break because saved object IDs can change during import or copy. This applies to both the UI and the API. This issue will be fixed 8.0.1 and 8.1.0. For more information, refer to {kibana-issue}123550[#123550].

Impact
Saved objects in 7.x that are migrated during upgrade are not impacted. Only new saved objects that are imported or copied multiple times (causing object IDs to change) are impacted. If you are impacted, you can re-import or re-copy your saved objects after the fix is implemented to preserve the weak links.

Features

For information about the features introduced in 8.0.0, refer to What’s new in 8.0.

Elastic Security: For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

To review the features in previous versions, refer to the following:

8.0.0-rc2 | 8.0.0-rc1 | 8.0.0-beta1 | 8.0.0-alpha2

Enhancements and bug fixes

For detailed information about the 8.0.0 release, review the enhancements and bug fixes.

Enhancements

Dashboard: Clone ReferenceOrValueEmbeddables by value {kibana-pull}122199[#122199]
Elastic Security: For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Bug Fixes

APM: Restrict aggregated transaction metrics search to date range {kibana-pull}123445[#123445]
Elastic Security: For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].
Fleet: Allow empty strings for required text fields in package policies {kibana-pull}123610[#123610]
Maps: Fixes Label border color is not removed from legend when disabled {kibana-pull}122705[#122705]
Monitoring: Ensure logstash getNodes always contains a uuid {kibana-pull}124201[#124201]
Security: Long-running requests no longer cause sporadic logouts in certain cases, even when user sessions are active {kibana-pull}122155[#122155]

{kib} 8.0.0-rc2

For information about the {kib} 8.0.0-rc2 release, review the following information.

Breaking change

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking change, then mitigate the impact to your application.

Removes the ability to use elasticsearch.username: elastic in production

Details
In production, you are no longer able to use the elastic superuser to authenticate to {es}. For more information, refer to {kibana-pull}122722[#122722].

Impact
When you configure elasticsearch.username: elastic, {kib} fails.

To review the breaking changes in previous versions, refer to the following:

8.0.0-rc1 | 8.0.0-beta1 | 8.0.0-alpha2 | 8.0.0-alpha1

Features

{kib} 8.0.0-rc2 adds the following new and notable features.

Dashboard

Dashboard Integration {kibana-pull}115991[#115991]

Elastic Security

For the Elastic Security 8.0.0-rc2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Monitoring

Enterprise Search Stack Monitoring {kibana-pull}114303[#114303]

Observability

Adds Agent Keys in APM settings - Create agent keys {kibana-pull}120373[#120373]
Adds Agent Keys in APM settings - Agent key table {kibana-pull}119543[#119543]
Allows users to set Download Speed, Upload Speed, and Latency for their synthetic monitors in Uptime {kibana-pull}118594[#118594]

Platform

Changes saved objects management inspect view to a read-only JSON view of the whole saved object {kibana-pull}112034[#112034]

Enhancements and bug fixes

For detailed information about the 8.0.0-rc2 release, review the enhancements and bug fixes.

Enhancements

Elastic Security: For the Elastic Security 8.0.0-rc2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].
Security: Adds session cleanup audit logging {kibana-pull}122419[#122419]
Observability: Make a monitor’s steps details page work on mobile resolutions in Uptime {kibana-pull}122171[#122171]

Bug Fixes

Alerting

Fixes PagerDuty timestamp validation {kibana-pull}122321[#122321]

Dashboard

Creates Explicit Diffing System {kibana-pull}121241[#121241]
Fixes blank panel save and display issue {kibana-pull}120815[#120815]
Fixes full screen error when pressing back arrow on browser {kibana-pull}118113[#118113]

Elastic Security

For the Elastic Security 8.0.0-rc2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Maps

Fixes Point to point and Tracks layers label properties not showing in the legend {kibana-pull}122993[#122993]
Fixes Color ramp UI for percent of a top term in join layer is broken {kibana-pull}122718[#122718]

Observability

Updates index pattern permission error in APM {kibana-pull}122680[#122680]
Honor time unit for Inventory Threshold in Metrics {kibana-pull}122294[#122294]
Adds locator to aid other plugins in linking properly to Uptime {kibana-pull}123004[#123004]
Fixes a bug in which headers would be incorrectly centered on desktop in Uptime {kibana-pull}122643[#122643]

{kib} 8.0.0-rc1

Review the {kib} 8.0.0-rc1 changes, then use the Upgrade Assistant to complete the upgrade.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

Splits package policy upgrade endpoint for Fleet

Details
For package policy upgrades, the packagePolicy upgrade endpoint format supports a mutative upgrade operation (when dryRun: false) and a read-only dry run operation (when dryRun: true):

 POST /package_policies/upgrade
 {
   packagePolicyIds: [...],
   dryRun: false
 }

For more information, refer to {kibana-pull}118854[#118854].

Impact
The endpoint is now split into two separate endpoints:

 POST /package_policies/upgrade
 {
   packagePolicyIds: [...]
 }

 POST /package_policies/upgrade/dry_run
 {
   packagePolicyIds: [...]
 }

Removes APM jobs from Machine Learning

Details
APM Node.js and RUM JavaScript anomaly detection job modules have been removed. For more information, refer to {kibana-pull}119945[#119945].

Impact
When you upgrade to 8.0.0, you are unable to create and view the APM Node.js and RUM JavaScript jobs in Machine Learning.

Fails migrations for unknown types

Details
Unknown saved object types now cause {kib} migrations to fail. For more information, refer to {kibana-issue}107678[#107678].

Impact
To complete the migration, re enable plugins or delete documents from the index in the previous version.

Removes deprecated config fields from Logs and Metrics APIs and saved objects

Details
On the Logs and Metrics UIs, references to the following API and saved object deprecated fields have been removed:

timestamp
tiebreaker
container
pod
host

For more information, refer to {kibana-pull}116821[#116821] and {kibana-pull}115874[#115874].

Impact
When you upgrade to 8.0.0, you are unable to use references to the deprecated fields.

To review the breaking changes in previous versions, refer to the following:

8.0.0-beta1 | 8.0.0-alpha2 | 8.0.0-alpha1

Deprecations

Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you complete the upgrade.

Renames the autocreate data view APM setting

Details
The xpack.apm.autocreateApmIndexPattern APM setting has been removed. For more information, refer to {kibana-pull}120689[#120689].

Impact
To automatically create data views in APM, use xpack.apm.autoCreateApmDataView.

Updates Fleet API to improve consistency

Details
The Fleet API has been updated to improve consistency:

Hyphens are changed to underscores in some names.
The pkgkey path parameter in the packages endpoint is split.
The response and list properties are renamed to items or item in some responses.

For more information, refer to {kibana-pull}119494[#119494].

Impact
When you upgrade to 8.0.0, use the following API changes:

Use enrollment_api_keys instead of enrollment-api-keys.
Use agent_status instead of agent-status.
Use service_tokens instead of service-tokens.
Use /epm/packages/{packageName}/{version} instead of /epm/packages/{pkgkey}.

Use items[] instead of response[] in:

/api/fleet/enrollment_api_keys
/api/fleet/agents
/epm/packages/
/epm/categories
/epm/packages/_bulk
/epm/packages/limited
/epm/packages/{packageName}/{version} (1)

Use items[] when the verb is POST or DELETE. Use item when the verb is GET or PUT.

For more information, refer to {fleet-guide}/fleet-api-docs.html[Fleet APIs].

To review the deprecations in previous versions, refer to the 8.0.0-alpha1 release notes.

Features

{kib} 8.0.0-rc1 adds the following new and notable features.

Elastic Security

For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Management

Display managed badge for transforms {kibana-pull}117679[#117679]

Monitoring

Enterprise Search Stack Monitoring {kibana-pull}114303[#114303]

Observability

Adds ability to create agent keys in APM settings {kibana-pull}120373[#120373]
Adds Agent key table in APM settings {kibana-pull}119543[#119543]
Allows users to set Download Speed, Upload Speed, and Latency for their synthetic monitors {kibana-pull}118594[#118594]

Enhancements and bug fixes

For detailed information about the 8.0.0-rc1 release, review the enhancements and bug fixes.

Enhancements

Canvas

Reverts By-Value Embeddables {kibana-pull}117613[#117613]

Discover

Adds multi-layer time axis for opt-out only {kibana-pull}115853[#115853]

Elastic Security

For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Adds consistent _meta property to all Fleet ES assets {kibana-pull}119380[#119380]

Kibana Home & Add Data

Moves overview page and link to the accordion solution title {kibana-pull}114018[#114018]

Lens & Visualizations

Handle removal of deprecated date histogram interval in Vega {kibana-pull}109090[#109090]
Adds value labels to Heatmap in Lens {kibana-pull}106406[#106406]

Machine Learning

Adds support for force stop deployment {kibana-pull}118563[#118563]
Refactors data view loading to remove unnecessary searches {kibana-pull}116455[#116455]

Observability

Service Maps: Adds sparklines to the detail popover {kibana-pull}120021[#120021]
Offer users upgrade to multi-metric job {kibana-pull}119980[#119980]
Display relevant anomalies from multi-metric job {kibana-pull}119709[#119709]
Adds service icon for the originating service in traces table {kibana-pull}119421[#119421]
Auto attachment for java agent beta in APM integration settings {kibana-pull}119131[#119131]
Errors: Enhancements to the Errors list page (part II) {kibana-pull}118878[#118878]
Store Alerts View table state in localStorage {kibana-pull}118207[#118207]
Handle other values popup when correlated value is not in top 10 {kibana-pull}118069[#118069]
Adds links to navigate from alerts table to rule {kibana-pull}118035[#118035]
Reinstates ML multi-metric job {kibana-pull}117836[#117836]
Re-enables metric-based UI {kibana-pull}117021[#117021]
Make Alerts page use shared {kib} time range {kibana-pull}115192[#115192]
Adds enabled toggle {kibana-pull}119994[#119994]
Adds missing tooltip to the report metric badge in Exploratory View {kibana-pull}119940[#119940]
Adds step duration in step list {kibana-pull}116266[#116266]

Platform

Moves developer architecture docs to user docs {kibana-pull}119125[#119125]

Reporting

Decouples screenshotting plugin from the reporting {kibana-pull}120110[#120110]
Updates the design of the Reports management UI, including the addition of a link to {kib} app where the report was generated {kibana-pull}111412[#111412]

Security

Adds ability to clone role mappings {kibana-pull}118434[#118434] Adds user logout audit events {kibana-pull}121455[#121455]

Bug Fixes

Canvas

Fixes Error overflow {kibana-pull}122158[#122158]
Fixes expression input {kibana-pull}121490[#121490]
Hides edit menu when in view-only mode {kibana-pull}118779[#118779]

Dashboard

Allow text wrapping for panel titles and dashboard descriptions for PDF generation {kibana-pull}121360[#121360]
Page now resets to zero when rows per page is changed on Add from Library window {kibana-pull}118627[#118627]
Fixes full screen error when pressing back arrow in browser {kibana-pull}118113[#118113]

Elastic Security

For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Fleet

Adds installed_kibana_space_id to epm-packages saved objects {kibana-pull}120517[#120517]
Handle Saved Object ID changes {kibana-pull}119527[#119527]
Fixes upgradeable agents filter {kibana-pull}119338[#119338]

Lens & Visualizations

Enables normal mode for percentage charts in Lens {kibana-pull}120197[#120197]
Fixes existing fields query for epoch_millis dates in Lens {kibana-pull}119508[#119508]
Include frozen indices in Lens {kibana-pull}118555[#118555]
Fixes focus on legend action popovers in Lens {kibana-pull}115066[#115066]

Machine Learning

Fixes data view search based on title {kibana-pull}120737[#120737]
Data frame analytics wizard: Only allow data view creation if job will be started immediately {kibana-pull}120042[#120042]
Fixes anomaly detection module manifest queries to ignore frozen and cold data tiers {kibana-pull}119635[#119635]
Catches syntax error in job wizard editor {kibana-pull}119457[#119457]
Fixes error handling for missing data view in data frame analytics wizard {kibana-pull}119455[#119455]
Ensures auto refresh interval is used in Data Frame Analytics list {kibana-pull}117959[#117959]
Ignores frozen indices in data recognizer {kibana-pull}117208[#117208]

Management

Fixes data grid column actions button when histogram charts are visible {kibana-pull}120202[#120202]
Disables delete data view for data frame analytics and transforms wizards {kibana-pull}119732[#119732]
Check {kib} capabilities for all saving, editing, and deleting {kibana-pull}118480[#118480]
Adds autocomplete for search_after and pit in search query {kibana-pull}117864[#117864]
Autocomplete for t_test aggregation {kibana-pull}117782[#117782]
Disables create data view for data frame analytics and transforms wizards {kibana-pull}117690[#117690]

Maps

Fixes an issue where drawings do not show when there is a global filter {kibana-pull}121239[#121239]
Use minimum symbol size if meta is not loaded {kibana-pull}119119[#119119]
Do not fail migration when JSON.parse fails {kibana-pull}117342[#117342]
Do not allow label overlap {kibana-pull}116190[#116190]

Monitoring

Correct linear regression formula {kibana-pull}120222[#120222]

Observability

Renames alerting types in Infra {kibana-pull}121061[#121061]
Renames occurrences of alert_type to rule_type in Infra {kibana-pull}120455[#120455]
Fixes failing alerts table pagination functional tests {kibana-pull}119985[#119985]
Switch to _source for updating documents instead of fields API {kibana-pull}118245[#118245]
Fixes an issue where search terms with certain characters caused the APM UI to crash {kibana-pull}118063[#118063]
Ignore unavailable indices for ML jobs {kibana-pull}117632[#117632]
Disables the actions button when users have inadequate privileges {kibana-pull}117488[#117488]
Replaces manual rate calculation with rate agg {kibana-pull}115651[#115651]
Adds migration to fix incorrect action group spelling {kibana-pull}119626[#119626]
Fixes bug with manage views button {kibana-pull}118547[#118547]
Disables No Data checkboxes for doc count alerts {kibana-pull}117194[#117194]
Prevent event propagation on step_duration {kibana-pull}122039[#122039]
Disables the button to create alerts in Uptime when users do not have permissions to do so {kibana-pull}120379[#120379]
Fixes a bug that prevented users from saving Uptime configurations when the inspect option was turned on {kibana-pull}119142[#119142]
Adds a callout to informs users that they do not have permissions to create ML jobs for Uptime monitors {kibana-pull}117684[#117684]

Platform

Fixes font glitches in code editor {kibana-pull}121392[#121392]

Reporting

Fixes an issue where PDF and PNG reports break on Windows operating systems when the {kib} server hostname is 0.0.0.0 {kibana-pull}117022[#117022]

{kib} 8.0.0-beta1

Review the {kib} 8.0.0-beta1 changes, then use the Upgrade Assistant to complete the upgrade.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Review the following breaking changes, then mitigate the impact to your application.

To review the breaking changes in previous versions, refer to the following:

8.0.0-alpha2 | 8.0.0-alpha1

Alerting

Removes xpack.task_manager.index

Details
The xpack.task_manager.index setting has been removed. For more information, refer to {kibana-pull}114558[#114558].

Impact
Before you upgrade to 8.0.0, remove xpack.task_manager.index from kibana.yml.

Removes ability to remove plugins

Details
The xpack.actions.enabled setting has been removed. For more information, refer to {kibana-pull}113461[#113461].

Impact
Before you upgrade to 8.0.0, remove xpack.actions.enabled from kibana.yml.

Lens & visualizations

Removes display options from legacy gauge

Details
The Display warnings option has been removed from the aggregation-based gauge visualization. For more information, refer to {kibana-pull}113516[#113516].

Impact
When you create aggregation-based gauge visualizations, the Display warnings option is no longer available in Options > Labels.

Removes settings from visEditors plugins

Details
The following deprecated visEditors plugin settings have been removed:

metric_vis.enabled
table_vis.enabled
tagcloud.enabled
metrics.enabled
metrics.chartResolution
chartResolution
metrics.minimumBucketSize
minimumBucketSize
vega.enabled
vega.enableExternalUrls
vis_type_table.legacyVisEnabled
timelion_vis.enabled
timelion.enabled
timelion.graphiteUrls
timelion.ui.enabled

For more information, refer to {kibana-pull}112643[#112643].

Impact
Before you upgrade, make the following changes in kibana.yml:

Replace metric_vis.enabled with vis_type_metric.enabled
Replace table_vis.enabled with vis_type_table.enabled
Replace tagcloud.enabled with vis_type_tagcloud.enabled
Replace metrics.enabled with vis_type_timeseries.enabled
Replace metrics.chartResolution and chartResolution with vis_type_timeseries.chartResolution
Replace metrics.minimumBucketSize and minimumBucketSize with vis_type_timeseries.minimumBucketSize
Replace vega.enabled with vis_type_vega.enabled
Replace vega.enableExternalUrls with vis_type_vega.enableExternalUrls
Remove vis_type_table.legacyVisEnabled
Replace timelion_vis.enabled with vis_type_timelion.enabled
Replace timelion.enabled with vis_type_timelion.enabled
Replace timelion.graphiteUrls with vis_type_timelion.graphiteUrls
Remove timelion.ui.enabled

Removes dimming opacity setting

Details
The Dimming opacity setting in Advanced Settings has been removed. For more information, refer to {kibana-pull}111704[#111704].

Impact
When you upgrade to 8.0.0, you are no longer able to configure the dimming opactiy for visualizations.

Removes Less stylesheet support

Details
In TSVB, custom Less stylesheets have been removed. For more information, refer to {kibana-pull}110985[#110985].

Impact
Existing less stylesheets are automatically converted to CSS stylesheets.

Disables the input string mode

Details
In TSVB, the Index pattern selection mode option has been removed. For more information, refer to {kibana-pull}110571[#110571].

Impact
To use index patterns and {es} indices in TSVB visualizations:

Open the main menu, then click Stack Management > Advanced Settings.
Select Allow string indices in TSVB.
Click Save changes.

Logs

Removes deprecated alias config entries

Details
The deprecated xpack.infra.sources.default.logAlias and xpack.infra.sources.default.logAlias settings have been removed. For more information, refer to {kibana-pull}115974[#115974].

Impact
Before you upgrade, remove the settings from kibana.yml, then configure the settings in Logs.

Removes configurable fields in settings

Details
The Logs and Metrics configurable fields settings have been removed. For more information, refer to {kibana-pull}61302[#61302].

Impact
Configure the settings in ECS.

Machine learning

Grants access to machine learning features when base privileges are used

Details
Machine learning features are included as base privileges. For more information, refer to {kibana-pull}115444[#115444].

Impact
If you do not want to grant users privileges to machine learning features, update Users and Roles.

Maps

Removes proxyElasticMapsServiceInMaps

Details
The map.proxyElasticMapsServiceInMaps setting has been removed. For more information, refer to {kibana-pull}116184[#116184].

Impact
Install the on-prem version of the Elastic Maps Service, which is a Docker service that resides in the Elastic Docker registry, in an accessible location on your internal network. When you complete the installation, update kibana.yml to point to the service.

Operations

Removes environment variables

Details
The CONFIG_PATH and DATA_PATH environment variables have been removed. For more information, refer to {kibana-pull}111535[#111535].

Impact
Replace the CONFIG_PATH environment variable with KBN_PATH_CONF, and replace DATA_PATH with the path.data setting.

Platform

Removes supports for csp.rules configuration

Details
Support for the csp.rules configuration property has been removed. For more information, refer to {kibana-pull}114379[#114379].

Impact
Configuring the default csp.script_src, csp.workers_src, and csp.style_src values is not required.

Changes and removes deprecated core settings and deprecated settings from core plugins

Details
The deprecation notice for server.cors has changed from level:critical to level:warning.

The following settings have changed:

The xpack.banners.placement value has been renamed
The newsfeed.defaultLanguage newsfeed item retrieval method and default language has changed

Support for the following configuration settings has been removed:

newsfeed.defaultLanguage
cpu.cgroup.path.override
cpuacct.cgroup.path.override
server.xsrf.whitelist
xpack.xpack_main.xpack_api_polling_frequency_millis
KIBANA_PATH_CONF

For more information, refer to {kibana-pull}113653[#113653].

Impact
* The header value provided to the xpack.banners.placement configuration has been renamed to 'top' * The newsfeed.defaultLanguage newsfeed items are retrieved based on the browser locale and default to English * Replace cpu.cgroup.path.override with ops.cGroupOverrides.cpuPath * Replace cpuacct.cgroup.path.override with ops.cGroupOverrides.cpuAcctPath * Replace server.xsrf.whitelist with server.xsrf.allowlist * Replace xpack.xpack_main.xpack_api_polling_frequency_millis with xpack.licensing.api_polling_frequency * Replace KIBANA_PATH_CONF path to the {kib} configuration file using the KBN_PATH_CONF environment variable

Removes enabled settings from plugins

Details
Using {plugin_name}.enabled to disable plugins has been removed. Some plugins, such as telemetry, newsfeed, reporting, and the various vis_type plugins will continue to support this setting. All other {kib} plugins will not support this setting. Any new plugin will support this setting only when specified in the configSchema. For more information, refer to {kibana-pull}113495[#113495].

The xpack.security.enabled setting has been removed. For more information, refer to {kibana-pull}111681[#111681].

Impact
Before you upgrade to 8.0.0:

Remove {plugin_name}.enabled from kibana.yml. If you use the setting to control user access to {kib} applications, use Features controls instead.
Replace xpack.security.enabled with {ref}/security-settings.html#general-security-settings[xpack.security.enabled] in elasticsearch.yml.

Removes --plugin-dir cli option

Details
The plugins.scanDirs setting and --plugin-dir cli option have been removed. For more information, refer to {kibana-pull}113367[#113367].

Impact
Before you upgrade to 8.0.0, remove plugins.scanDirs from kibana.yml.

Removes support for optimize.* settings

Details
The legacy optimize. settings have been removed. If your configuration uses the following legacy optimize. settings, {kib} fails to start:

optimize.lazy
optimize.lazyPort
optimize.lazyHost
optimize.lazyPrebuild
optimize.lazyProxyTimeout
optimize.enabled
optimize.bundleFilter
optimize.bundleDir
optimize.viewCaching
optimize.watch
optimize.watchPort
optimize.watchHost
optimize.watchPrebuild
optimize.watchProxyTimeout
optimize.useBundleCache
optimize.sourceMaps
optimize.workers
optimize.profile
optimize.validateSyntaxOfNodeModules

For more information, refer to {kibana-pull}113296[#113296].

Impact
To run the @kbn/optimizer separately in development, pass --no-optimizer to yarn start. For more details, refer to {kibana-pull}73154[#73154].

Removes so/server/es settings

Details
Some of the so/server/es settings have been removed. If your configuration uses the following settings, {kib} fails to start:

savedObjects.indexCheckTimeout
server.xsrf.token
elasticsearch.preserveHost
elasticsearch.startupTimeout

For more information, refer to {kibana-pull}113173[#113173].

Impact
Before you upgrade to 8.0.0., remove these settings from kibana.yml.

Adds requirement for inline scripting

Details
To start {kib}, you must enable inline scripting in {es}. For more information, refer to {kibana-pull}113068[#113068].

Impact
Enable {ref}/modules-scripting-security.html[inline scripting].

Removes kibana.index settings

Details
The kibana.index, xpack.reporting.index, and xpack.task_manager.index settings have been removed. For more information, refer to {kibana-pull}112773[#112773].

Impact
Use spaces, cross-cluster replication, or cross-cluster search. To migrate to spaces, export your saved objects from a tenant into the default space. For more details, refer to #82020.

Removes legacy logging

Details
The logging configuration and log output format has changed. For more information, refer to {kibana-pull}112305[#112305].

Impact
Use the new logging system configuration.

Reporting

Removes reporting settings

Details
The following settings have been removed:

xpack.reporting.capture.concurrency
xpack.reporting.capture.settleTime
xpack.reporting.capture.timeout
xpack.reporting.kibanaApp

For more information, refer to {kibana-pull}114216[#114216].

Impact
Before you upgrade to 8.0.0, remove the settings from kibana.yml.

REST API

Removes /api/settings

Details
The /api/settings REST API has been removed. For more information, refer to {kibana-pull}114730[#114730].

Impact
Use /api/stats.

Security

Removes legacy audit logger

Details
The legacy audit logger has been removed. For more information, refer to {kibana-pull}116191[#116191].

Impact
Audit logs will be written to the default location in the new ECS format. To change the output file, filter events, and more, use the audit logging settings.

Deprecations

Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you complete the upgrade.

To review the 8.0.0 depcrecations, refer to the 8.0.0-alpha1 release notes.

Features

The 8.0.0-beta1 release adds the following new and notable features.

Dashboard

Dashboard Integration {kibana-pull}115991[#115991]

Elastic Security

For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Machine Learning

Addition of new Model Management tab {kibana-pull}115772[#115772]

Platform

Changes edit view to json read-only view {kibana-pull}112034[#112034]

Enhancements

The 8.0.0-beta1 release includes the following enhancements.

Canvas

By-Value embeddables {kibana-pull}113827[#113827]
Toolbar UI updates {kibana-pull}113329[#113329]

Elastic Security

For the Elastic Security 8.0.0 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Lens & Visualizations

Handle removal of deprecated date histogram interval in Vega {kibana-pull}109090[#109090]
Adds value labels to Heatmap in Lens {kibana-pull}106406[#106406]

Logs

Make Alerts page use shared Kibana time range {kibana-pull}115192[#115192]

Machine Learning

Adds support to {fleet} {integrations} for installing ML models {kibana-pull}107710[#107710]
Adds Index data visualizer grid embeddable as extra view within Discover {kibana-pull}107184[#107184]

Maps

Use Elastic Maps Service v8.0 {kibana-pull}116217[#116217]
Use desaturated map tiles instead of bright map tiles by default {kibana-pull}116179[#116179]
Use ES mvt {kibana-pull}114553[#114553]

Security

Register "minimal" feature privileges regardless of the current license level {kibana-pull}115992[#115992]

Uptime

Uptime index config using kibana.yml {kibana-pull}115775[#115775]

Bug fixes

The 8.0.0-beta1 release includes the following bug fixes.

Management

Removes freeze action from Cold phase {kibana-pull}116160[#116160]
Disallow creating runtime and scripted fields with * in the name {kibana-pull}116119[#116119]

Querying & Filtering

Fixes Add filter button doesnt close popup after openning {kibana-pull}111917[#111917]

{kib} 8.0.0-alpha2

Review the {kib} 8.0.0-alpha2 changes, then use the Upgrade Assistant to complete the upgrade.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Review the following breaking changes, then mitigate the impact to your application.

To review the breaking changes in the previous version, refer to 8.0.0-alpha1.

Changes the GET /api/status default behavior

Details
GET /api/status reports a new and more verbose payload. For more information, refer to {kibana-pull}110830[#110830].

Impact
To retrieve the {kib} status in the previous format, use GET /api/status?v7format=true.

Removes support for legacy exports

Details
In {kib} 8.0.0 and later, the legacy format from {kib} 6.x is unsupported. For more information, refer to {kibana-pull}110738[#110738]

Impact
Using the user interface to import saved objects is restricted to .ndjson format imports.

Removes map.regionmap.*

Details
The deprecated map.regionmap.* setting in kibana.yml has been removed. For more information, refer to {kibana-pull}109896[#109896].

Impact
If you have maps that use map.regionmap layers:

Remove the map.regionmap layer.
To recreate the choropleth layer, use GeoJSON upload to index your static vector data into {es}.
Create a choropleth layer from the indexed vector data.

Removes kibana.defaultAppId

Details
The deprecated kibana.defaultAppId setting in kibana.yml, which is also available as kibana_legacy.defaultAppId, has been removed. For more information, refer to {kibana-pull}109798[#109798].

Impact
When you upgrade, remove kibana.defaultAppId from your kibana.yml file. To configure the default route for users when they enter a space, use the defaultRoute in Advanced Settings.

Removes courier:batchSearches

Details
The deprecated courier:batchSearches setting in Advanced Settings has been removed. For more information, refer to {kibana-pull}109350[#109350].

Impact
When you upgrade, the courier:batchSearches setting will no longer be available.

Removes xpack.task_manager.index

Details
The deprecated xpack.task_manager.index setting in kibana.yml has been removed. For more information, refer to {kibana-pull}108111[#108111].

Impact
When you upgrade, remove xpack.task_manager.index from your kibana.yml file.

Removes dashboard-only mode

Details
The legacy dashboard-only mode has been removed. For more information, refer to {kibana-pull}108103[#108103].

Impact
To grant users access to only dashboards, create a new role, then assign only the Dashboard feature privilege. For more information, refer to {kib} privileges.

Removes xpack.maps.showMapVisualizationTypes

Details
The deprecated xpack.maps.showMapVisualizationTypes setting in kibana.yml has been removed. For more information, refer to {kibana-pull}105979[#105979]

Impact
When you upgrade, remove xpack.maps.showMapVisualizationTypes from your kibana.yml file.

Deprecations

Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you complete the upgrade.

To review the 8.0.0 depcrecations, refer to the 8.0.0-alpha1 release notes.

Features

The 8.0.0-alpha2 release adds the following new and notable feature.

Security

Adds the interactive setup mode {kibana-pull}106881[#106881]

Enhancements

The 8.0.0-alpha2 release includes the following enhancements.

Elastic Security

For the Elastic Security 8.0.0-alpha2 release information, refer to {security-guide}/release-notes.html[Elastic Security Solution Release Notes].

Security

Interactive setup mode {kibana-pull}106881[#106881]

{kib} 8.0.0-alpha1

Review the {kib} 8.0.0-alpha1 changes, then use the Upgrade Assistant to complete the upgrade.

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Review the breaking changes, then mitigate the impact to your application.

Enterprise Search changes

Required security plugin in 8.0

Details
Enterprise Search now requires that you enable X-Pack Security. For more information, refer to {kibana-pull}106307[#106307]

Impact
Enable X-Pack Security.

Index pattern changes

Removed support for time-based interval index patterns

Details
Time-based interval index patterns were deprecated in 5.x. In 6.x, you could no longer create time-based interval index patterns, but they continued to function as expected. Support for these index patterns has been removed in 8.0. For more information, refer to {kibana-pull}35173[#35173]

Impact
You must migrate your time_based index patterns to a wildcard pattern. For example, logstash-*.

Operations changes

Removed platform from archive root directory

Details
After you extract an archive, the output directory no longer includes the target platform. For example, kibana-8.0.0-linux-aarch64.tar.gz produces a kibana-8.0.0 folder. For more information, refer to {kibana-pull}93835[#93835].

Impact
To use the new folder, update the configuration management tools and automation.

Removed default support for TLS v1.0 and v1.1

Details
The default support for TLS v1.0 and v1.1 has been removed. For more information, refer to {kibana-pull}90511[#90511].

Impact
To enable support, set --tls-min-1.0 in the node.options configuration file. To locate the configuration file, go to the kibana/config folder or any other configuration with the KBN_PATH_CONF environment variable. For example, if you are using a Debian-based system, the configuration file is located in /etc/kibana.

Removed support for sysv init

Details
All supported operating systems use systemd service files. Any system that doesn’t have service aliased to use kibana.service should use systemctl start kibana.service instead of service start kibana. For more information, refer to {kibana-pull}74424[#74424].

Impact
If your installation uses .deb or .rpm packages with SysV, migrate to systemd.

Disabled response logging as a default

Details
In previous versions, all events are logged in json when logging.json:true. With the new logging configuration, you can choose the json and pattern output formats with layouts. For more information, refer to {kibana-pull}42353[#42353].

Impact
To restore the previous behavior, configure the logging format for each custom appender with the appender.layout property in kibana.yml. There is no default for custom appenders, and each appender must be configured expilictly.

logging:
  appenders:
    custom_console:
      type: console
      layout:
        type: pattern
    custom_json:
      type: console
      layout:
        type: json
  loggers:
    - name: plugins.myPlugin
      appenders: [custom_console]
  root:
    appenders: [default, custom_json]
    level: warn

Reporting changes

Legacy job parameters are no longer supported

Details
Reporting is no longer compatible with POST URL snippets generated with {kib} 6.2.0 and earlier. For more information, refer to {kibana-pull}52539[#52539]

Impact
If you use POST URL snippets to automatically generate PDF reports, regenerate the POST URL strings.

Security changes

Removed /api/security/v1/saml route

Details
The /api/security/v1/saml route has been removed and is reflected in the kibana.yml server.xsrf.whitelist setting, {es}, and the Identity Provider SAML settings. For more information, refer to {kibana-pull}47929[#47929]

Impact
Use the /api/security/saml/callback route, or wait to upgrade to 8.0.0-alpha2 when the /api/security/saml/callback route breaking change is reverted.

Reject legacy browsers by default

Details
To provide the maximum level of protection for most installations, the csp.strict config is now enabled by default. Legacy browsers not supported by Kibana, such as Internet Explorer 11, are unable to access {kib} unless explicitly enabled. All browsers officially supported by Kibana do not have this issue. For more information, refer to {kibana-pull}41700[#41700]

Impact
To enable support for legacy browsers, set csp.strict: false in kibana.yml. To effectively enforce the security protocol, we strongly discourage disabling csp.strict unless it is critical that you support Internet Explorer 11.

Settings changes

Use new session timeout defaults

Details
The default values for the session timeout xpack.security.session.{lifespan|idleTimeout} settings have changed. For more information, refer to {kibana-pull}106061[#106061]

Impact
Use the following default values:

xpack.security.session.idleTimeout: 3d
xpack.security.session.lifespan: 30d

Removed support for setting server.host to '0'

Details
Support for configuring {kib} with 0 as the server.host has been removed. Please use 0.0.0.0 instead. For more information, refer to {kibana-pull}87114[#87114]

Impact
You are now unable to use 0 as the server.host.

Removed xpack.security.public and xpack.security.authProviders

Details
The xpack.security.public and xpack.security.authProviders settings have been removed. For more information, refer to {kibana-pull}38657[#38657]

Impact
Use the xpack.security.authc.saml.realm and xpack.security.authc.providers settings.

Removed useUTC deprecation

Details
The logging.useUTC setting has been removed. For more information, refer to {kibana-pull}22696[#22696]

Impact
The default timezone is UTC. To change the timezone, set logging.timezone: false in kibana.yml. Change the timezone when the system, such as a docker container, is configured for a nonlocal timezone.

Removed environment variables CONFIG_PATH and DATA_PATH

Details
The environment variables CONFIG_PATH and DATA_PATH have been removed. For more information, refer to {kibana-pull}32049[#32049]

Impact
Use the environment variable KBN_PATH_CONF instead of CONFIG_PATH. Use the setting path.data instead of DATA_PATH.

Deprecations

The following functionality is deprecated in 8.0.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you complete the upgrade.

Removed support for SysV init

Details
Systems that don’t have service aliased to use kibana.service are unable to use service start kibana. For more information, refer to {kibana-pull}74424[#74424]

Impact
If your system doesn’t have service aliased to use kibana.service, use systemctl start kibana.service.

Removed xpack:defaultAdminEmail setting

Details
The xpack:default_admin_email setting for monitoring use has been removed. For more information, refer to {kibana-pull}33603[#33603]

Impact
Use the xpack.monitoring.clusterAlertsEmail in kibana.yml.

Bug fix

The 8.0.0-alpha1 release includes the following bug fix.

Operations

Moves systemd service to /usr/lib/systemd/system {kibana-pull}83571[#83571]

Files

CHANGELOG.asciidoc

Latest commit

History

CHANGELOG.asciidoc

File metadata and controls

Release notes

{kib} 8.9.0

Breaking changes

Deprecations

Features

Enhancements and bug fixes

Enhancements

Bug Fixes

{kib} 8.8.2

Known issues

Bug Fixes

{kib} 8.8.1

Known issues

Breaking changes

Enhancements

Bug Fixes

{kib} 8.8.0

Known issues

Breaking changes

Deprecations

Features

Enhancements and bug fixes

Enhancements

Bug Fixes

{kib} 8.7.1

Breaking changes

Enhancement

Bug fixes

{kib} 8.7.0

Known issues

Breaking changes

Features

Enhancements and bug fixes

Enhancements

Bug Fixes

{kib} 8.6.1

Breaking changes

Enhancements

Bug fixes

{kib} 8.6.0

Known issues

Breaking changes

Features

Enhancements and bug fixes

Enhancements

Bug fixes

{kib} 8.5.2

Breaking changes

Enhancement

Bug fixes

{kib} 8.5.1

Breaking changes

Enhancements

Bug fixes

{kib} 8.5.0

Known issues

Breaking changes

Features

Enhancements and bug fixes

Enhancements

Bug fixes

{kib} 8.4.3

Breaking change

Bug fixes

{kib} 8.4.2

Breaking change

Enhancements

Bug Fixes

{kib} 8.4.1

Breaking change

Bug fixes

{kib} 8.4.0

Known issues

Breaking changes