Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Serverless changelog — Dec 16, 2024 #244

Merged
merged 4 commits into from
Dec 17, 2024
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 52 additions & 0 deletions serverless/pages/serverless-changelog.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,58 @@ For serverless API changes, refer to https://www.elastic.co/docs/api/changes[API

For serverless changes in Cloud Console, refer to https://www.elastic.co/guide/en/cloud/current/ec-release-notes.html[Elasticsearch Service Documentation: Release notes].

[discrete]
[[serverless-changelog-12162024]]
== December 16, 2024

[discrete]
[[breaking-changes-12162024]]
benironside marked this conversation as resolved.
Show resolved Hide resolved
=== Breaking changes
benironside marked this conversation as resolved.
Show resolved Hide resolved
* Deprecates the `discover:searchFieldsFromSource` setting ({kibana-pull}202679[#202679]).
benironside marked this conversation as resolved.
Show resolved Hide resolved
* Disables scripted field creation in the Data Views management page ({kibana-pull}202250[#202250]).
benironside marked this conversation as resolved.
Show resolved Hide resolved
* Removes all logic based on the following settings: `xpack.reporting.roles.enabled`,
benironside marked this conversation as resolved.
Show resolved Hide resolved
`xpack.reporting.roles.allow` ({kibana-pull}200834[#200834]).
* Removes the legacy table from Discover ({kibana-pull}201254[#201254]).
benironside marked this conversation as resolved.
Show resolved Hide resolved
* Adds a new sub-feature privilege under **Synthetics and Uptime** `Can manage private locations` ({kibana-pull}201100[#201100]).
benironside marked this conversation as resolved.
Show resolved Hide resolved
* Removes ephemeral tasks from action and alerting plugins ({kibana-pull}197421[#197421]).
benironside marked this conversation as resolved.
Show resolved Hide resolved

[discrete]
[[features-enhancements-12162024]]
=== Features and enhancements
* Optimizes the Kibana Trained Models API ({kibana-pull}200977[#200977]).
* Adds a *Create Case* action to the *Log rate analysis* page ({kibana-pull}201549[#201549]).
* Improves AI Assistant's response quality by giving it access to Elastic's product documentation ({kibana-pull}199694[#199694]).
* Adds support for suppressing EQL sequence alerts ({kibana-pull}189725[#189725]).
* Adds an *Advanced settings* section to the SLO form ({kibana-pull}200822[#200822]).

[discrete]
[[fixes-12162024]]
=== Fixes
* Fixes point visibility regression ({kibana-pull}202358[#202358]).
* Improves help text of creator and view count features on dashboard listing page ({kibana-pull}202488[#202488]).
* Highlights matching field values when performing a KQL search on a keyword field ({kibana-pull}201952[#201952]).
* Supports "Inspect" in saved search embeddables ({kibana-pull}202947[#202947]).
* Fixes your ability to clear the user-specific system prompt ({kibana-pull}202279[#202279]).
* Fixes error when opening rule flyout ({kibana-pull}202386[#202386]).
* Fixes to Ops Genie as a default connector ({kibana-pull}201923[#201923]).
* Fixes actions on charts ({kibana-pull}202443[#202443]).
* Adds flyout to table view in Infrastructure Inventory ({kibana-pull}202646[#202646]).
* Fixes service names with spaces not being URL encoded properly for `context.viewInAppUrl` ({kibana-pull}202890[#202890]).
* Allows access query logic to handle user ID and name conditions ({kibana-pull}202833[#202833]).
* Fixes APM rule error message for invalid KQL filter ({kibana-pull}203096[#203096]).
* Rejects CEF logs from Automatic Import and redirects you to the CEF integration instead ({kibana-pull}201792[#201792]).
* Updates the install rules title and message ({kibana-pull}202226[#202226]).
* Fixes error on second entity engine init API call ({kibana-pull}202903[#202903]).
* Restricts unsupported log formats ({kibana-pull}202994[#202994]).
* Removes errors related to Enterprise Search nodes ({kibana-pull}202437[#202437]).
* Improves web crawler name consistency ({kibana-pull}202738[#202738]).
* Fixes editor cursor jumpiness ({kibana-pull}202389[#202389]).
* Fixes rollover datastreams on subobjects mapper exception ({kibana-pull}202689[#202689]).
* Fixes spaces sync to retrieve 10,000 trained models ({kibana-pull}202712[#202712]).
* Fixes log rate analysis embeddable error on the Alerts page ({kibana-pull}203093[#203093]).
* Fixes Slack API connectors not displayed under Slack connector type when adding new connector to rule ({kibana-pull}202315[#202315]).


[discrete]
[[serverless-changelog-12092024]]
== December 9, 2024
Expand Down
59 changes: 0 additions & 59 deletions serverless/pages/serverless-known-issues.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -3,62 +3,3 @@
++++
<titleabbrev>Known issues</titleabbrev>
++++

[discrete]
[[known-issues-201820]]
== Exceptions tab fails to load

On December 5, 2024, it was discovered the {sec-serverless} **Exceptions** tab fails to load when exceptions contain comments with newline characters (`\n`). For details, refer to ({kibana-issue}201820[#201820]).

*Custom rules workaround* +

. Go to the **Rules** page, then <<import-export-rules-ui,export>> the rule or rules with the exception lists with newline characters.
. Open the `.ndjson` file, then remove the newline characters from the `comments`.
. Go to the **Rules** page, then <<import-export-rules-ui,re-import>> the rules. Make sure to select **Overwrite existing exception lists with conflicting "list_id"**.

*Prebuilt rules workaround* +

. For the exception lists with newline characters, fetch the IDs associated with the rule.
.. Go to the **Rules** page.
.. Open the rule details, then go to the page URL.
.. Copy the URL id string.
+
For example, in the http://host.name/app/security/rules/id/167a5f6f-2148-4792-8226-b5e7a58ef46e URL, copy the `167a5f6f-2148-4792-8226-b5e7a58ef46e` id string.
.. To specify the `id` when fetching the rule details, use the {api-kibana-serverless}/operation/operation-readrule[retrieve a detection rule API]:
+
[source,console]
----
curl -H 'Authorization: ApiKey API_KEY_HERE' -H 'kbn-xsrf: true' -H 'elastic-api-version: 2023-10-31' KIBANA_URL/api/detection_engine/rules?id=167a5f6f-2148-4792-8226-b5e7a58ef46e
----
+
The JSON response contains the `id`, `list_id`, and `namespace_type` values in the `exceptions_list` key:
+
[source,console]
----
{
"id": "167a5f6f-2148-4792-8226-b5e7a58ef46e",
"exceptions_list": [
{
"id": "490525a2-eb66-4320-95b5-88bdd1302dc4",
"list_id": "f75aae6f-0229-413f-881d-81cb3abfbe2d",
"namespace_type": "single"
}
]
}
----
+
. To retrieve the exception list with newline characters, use the export exceptions API with the `id`, `list_id`, and `namespace_type` values:
+
[source,console]
----
curl -XPOST -H 'Authorization: ApiKey API_KEY_HERE' -H 'kbn-xsrf: true' -H 'elastic-api-version: 2023-10-31' 'KIBANA_URL/api/exception_lists/_export?list_id=f75aae6f-0229-413f-881d-81cb3abfbe2d&id=490525a2-eb66-4320-95b5-88bdd1302dc4&namespace_type=single' -o list.ndjson
----
+
. Open the `.ndjson` file, then remove the newline characters from the `comments[].comment` values.
. Go to the <<security-shared-exception-lists,**Shared Exception Lists**>> page.
. To re-import the exception list, use the **Import exception lists** option.
+
Since the exception list exists, the import fails, and the option to overwrite the existing list appears.
. Select the overwrite option, then resubmit the request to import the exception list.

NOTE: To export and re-import exceptions for the Elastic Endpoint rule, use the <<security-shared-exception-lists,**Shared Exception Lists**>> page.