[DOCS][8.6] Release notes version 8.6 #2762
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,100 @@ | ||
| [[release-notes-header-8.6.0]] | ||
| == 8.6 | ||
|
|
||
| [discrete] | ||
| [[release-notes-8.6.0]] | ||
| === 8.6.0 | ||
|
|
||
| [discrete] | ||
| [[known-issue-8.6.0]] | ||
| ==== Known issues | ||
| There are no known issues in 8.6.0. | ||
|
|
||
| [discrete] | ||
| [[breaking-changes-8.6.0]] | ||
| ==== Breaking changes | ||
benironside marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| There are no breaking changes in 8.6.0. | ||
|
|
||
| // tag::breaking-changes[] | ||
| // NOTE: The breaking-changes tagged regions are reused in the Elastic Installation and Upgrade Guide. The pull attribute is defined within this snippet so it properly resolves in the output. | ||
| :pull: https://github.com/elastic/kibana/pull/ | ||
| // end::breaking-changes[] | ||
|
|
||
|
|
||
| [discrete] | ||
| [[deprecations-8.6.0]] | ||
| ==== Deprecations | ||
| There are no deprecations in 8.6.0. | ||
|
|
||
|
|
||
| [discrete] | ||
| [[features-8.6.0]] | ||
| ==== Features | ||
| * Allows you to add indicators to new or existing cases ({pull}145121[#145121]). | ||
| * Adds the `is one of` operator to the *Add field* menu in Timeline ({pull}144988[#144988]). | ||
| * Adds an "Add to timeline investigation" button to the User Risk Scores and Host Risk Scores cards on the Entity Analytics dashboard ({pull}144819[#144819]). | ||
| * Provides the option to duplicate rules and their exceptions or rules only ({pull}144782[#144782]). | ||
| * Improves the Shared Exception Lists page and allows you to export read-only exception lists ({pull}144383[#144383]). | ||
| * Enables you to build runtime queries using alert data or hard-coded literal values. (Technical preview only). ({pull}145240[#145240]). | ||
| * Creates a new connector for Tines ({pull}143505[#143505]). | ||
| * Updates the UI for adding and editing exceptions ({pull}143127[#143127]). | ||
|
Contributor
There was a problem hiding this comment. @peluja1012 how detailed do you want this summary to be? Should we be a little more specific about the changes to the exception flyout or are you ok with this high-level summary? Maybe this and some other PRs, such as # 144575 and # 142289, can be lumped togther? |
||
| * Creates a Shared Exception Lists page for creating, viewing, and modifying shared exception lists ({pull}143041[#143041]). | ||
| * Enables you to bulk-add up to 4000 events to Timeline ({pull}142737[#142737]). | ||
| * Enables alert suppression per rule execution for custom query rules ({pull}142686[#142686]). | ||
| * Improves role-based access controls for {kib} users performing response actions ({pull}142825[#142825]). | ||
|
|
||
| [discrete] | ||
| [[bug-fixes-8.6.0]] | ||
| ==== Bug fixes and enhancements | ||
| * Adds the *View indicators* button to the Threat Intelligence card ({pull}145125[#145125]). | ||
benironside marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| * Improves the interface for creating rule exceptions and shared exception lists ({pull}144575[#144575]). | ||
| * Adds cases metadata in the Cases panel on the alert details page ({pull}144430[#144430]). | ||
| * Improves the UX for managing {ml} jobs while managing {ml} rules ({pull}144080[#144080]). | ||
| * Enables you to run {ml} jobs from the Notable Anomalies table ({pull}142861[#142861]). | ||
| * Updates the take action UI for charts on the Hosts, Users, and Network pages ({pull}138369[#138369]). | ||
| * Adds a *Respond* button to the Host Details page for hosts with an {agent} installed ({pull}143988[#143988]). | ||
| * Allows you to add up to three new terms to New Terms rule queries, enabling you to create alerts when multiple new terms appear in the same event ({pull}143943[#143943]). | ||
| * Allows you to launch Timeline from the Entity Analytics dashboard by clicking alert counts ({pull}143841[#143841]). | ||
| * Adds missing TLP Marking badges to the Indicators table and Indicator details flyout ({pull}143431[#143431]). | ||
| * Ensures the empty state of the Indicators page does not appear when threat intelligence integrations are installed ({pull}143328[#143328]). | ||
| * Turns the anomalies count on the Entity Analytics dashboard into a link that goes to the Anomalies table ({pull}143085[#143085]). | ||
| * Pre-selects the `threat` category when you open the Fields browser ({pull}142698[#142698]). | ||
| * Adds a `copy to clipboard` action for indicators in the Indicators table ({pull}142675[#142675]). | ||
| * Adds a `User risk classification` column to the Users table ({pull}142610[#142610]). | ||
| * Adds a label to the Indicators page that states when it was last updated ({pull}142560[#142560]). | ||
| * Specifies that links from the Threat Intelligence page to the Integrations page should open the Threat Intelligence integrations category ({pull}142538[#142538]). | ||
| * Enables full-screen mode on the Indicators table ({pull}142519[#142519]). | ||
| * Implements the standard search bar and date picker on the Threat Intelligence page ({pull}142336[#142336]). | ||
| * Updates the design of the Shared Exception Lists page ({pull}142289[#142289]). | ||
| * Displays comments for expanded items in the Action history page ({pull}141938[#141938]). | ||
benironside marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| * Adds HTTP 409 conflict response status codes to error messages for several API requests ({pull}146389[#146389]). | ||
| * Adds the new Data Exfiltration Detection (DED) integration package (https://github.com/elastic/integrations/pull/4486[#4486]). | ||
benironside marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| * Renames the sorting toggle on the Rules page from *Technical preview* to *Advanced sorting* (https://github.com/elastic/kibana/pull/144733[#144733]). | ||
| // Items below this line were labeled as "bugfixes" rather than "enhancements" | ||
| * Replaces the *Run job* button with a *Stop job* button when the job is running ({pull}146407[#146407]). | ||
| * Fixes a bug that prevented you from editing an exception while adding a comment to it from the Rules details flyout ({pull}145575[#145575]). | ||
| * Fixes a bug that could cause rule previews for New Terms rules to fail ({pull}145707[#145707]). | ||
| * Fixes a bug that could cause a "Page not found" error when you navigated to a shared exception list ({pull}145833[#145833]). | ||
| * Fixes a bug with the loading indicator that appears when bulk actions are pending ({pull}145905[#145905]). | ||
| * Fixes a bug with the linked rules count for shared exception lists ({pull}145976[#145976]). | ||
| * Fixes a bug that prevented you from editing policies created before {stack} version 8.3.0 if you had a basic license ({pull}146050[#146050]). | ||
| * Fixes a bug that sometimes prevented the Rules table from updating as expected ({pull}146271[#146271]). | ||
| * Fixes a bug that sometimes prevented the display of rule preview graphs for custom rules ({pull}142120[#142120]). | ||
| * Removes the `Optional` label from the `Additional look-back time` rule setting ({pull}142375[#142375]). | ||
| * Fixes a bug that could result in duplicate entries in the Host's page's Events table query ({pull}143239[#143239]). | ||
| * Fixes a bug that could interfere with Platinum users' access to the Host Isolation page ({pull}143366[#143366]). | ||
| * Fixes a bug that prevented the event analyzer's state from persisting when you switched tabs on the Alerts page ({pull}144291[#144291]). | ||
| * Fixes a bug that sometimes caused a page crash when you searched for an indicator ID on the Intelligence page ({pull}144344[#144344]). | ||
| * Fixes a bug that prevented newly imported rules from appearing on the Rules page before the page was refreshed ({pull}144359[#144359]). | ||
| * Fixes a bug with the toast message for successful bulk editing of rules ({pull}144497[#144497]). | ||
| * Fixes a bug that prevented the Event Analyzer from opening in Timeline when the *Show only detection alerts* option is enabled ({pull}144705[#144705]). | ||
| * Fixes bugs that affected the display and persistence of event action menus ({pull}145025[#145025]). | ||
| * Fixes a bug that limited the display of breadcrumbs on the Shared Exception Lists page ({pull}145605[#145605]). | ||
| * Fixes various minor UI bugs on the Shared Exception Lists page ({pull}145334[#145334]). | ||
| * Improves the "permissions required" message that appears on Cloud Posture pages for users without necessary permissions ({pull}145794[#145794]). | ||
benironside marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| * Fixes a bug that could cause a "Page not found" error when navigating to an exception list without a description ({pull}145833[#145833]). | ||
| * Fixes a visual bug with the fullscreen view of rule preview results ({pull}146687[#146687]). | ||
| * Fixes a visual bug with the fullscreen view of Osquery results ({pull}147076[#147076]). | ||
| * Fixes a bug with the refresh indicator on the Rule details page ({pull}147806[#147806]). | ||
|
|
||
|
|
||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.