Merge branch 'main' into elastic#196490

.buildkite/scripts/steps/cloud/deploy.json

@@ -7,7 +7,7 @@
         "plan": {
           "cluster_topology": [
             {
-              "instance_configuration_id": "gcp.integrationsserver.1",
+              "instance_configuration_id": "gcp.integrationsserver.n2.68x32x45",
               "zone_count": 1,
               "size": {
                 "resource": "memory",
@@ -32,7 +32,7 @@
           "cluster_topology": [
             {
               "zone_count": 1,
-              "instance_configuration_id": "gcp.coordinating.1",
+              "instance_configuration_id": "gcp.es.coordinating.n2.68x16x45",
               "node_roles": [
                 "ingest",
                 "remote_cluster_client"
@@ -50,7 +50,7 @@
                   "data": "hot"
                 }
               },
-              "instance_configuration_id": "gcp.data.highio.1",
+              "instance_configuration_id": "gcp.es.datahot.n2.68x32x45",
               "node_roles": [
                 "master",
                 "ingest",
@@ -72,7 +72,7 @@
                   "data": "warm"
                 }
               },
-              "instance_configuration_id": "gcp.data.highstorage.1",
+              "instance_configuration_id": "gcp.es.datawarm.n2.68x10x190",
               "node_roles": [
                 "data_warm",
                 "remote_cluster_client"
@@ -90,7 +90,7 @@
                   "data": "cold"
                 }
               },
-              "instance_configuration_id": "gcp.data.highstorage.1",
+              "instance_configuration_id": "gcp.es.datacold.n2.68x10x190",
               "node_roles": [
                 "data_cold",
                 "remote_cluster_client"
@@ -108,7 +108,7 @@
                   "data": "frozen"
                 }
               },
-              "instance_configuration_id": "gcp.es.datafrozen.n1.64x10x95",
+              "instance_configuration_id": "gcp.es.datafrozen.n2.68x10x90",
               "node_roles": [
                 "data_frozen"
               ],
@@ -120,7 +120,7 @@
             },
             {
               "zone_count": 1,
-              "instance_configuration_id": "gcp.master.1",
+              "instance_configuration_id": "gcp.es.master.n2.68x32x45",
               "node_roles": [
                 "master",
                 "remote_cluster_client"
@@ -142,7 +142,7 @@
               },
               "autoscaling_tier_override": true,
               "id": "ml",
-              "instance_configuration_id": "gcp.ml.1",
+              "instance_configuration_id": "gcp.es.ml.n2.68x32x45",
               "node_roles": [
                 "ml",
                 "remote_cluster_client"
@@ -155,7 +155,7 @@
             "enabled_built_in_plugins": []
           },
           "deployment_template": {
-            "id": "gcp-io-optimized-v2"
+            "id": "gcp-cpu-optimized"
           }
         },
         "ref_id": "main-elasticsearch"
@@ -168,7 +168,7 @@
         "plan": {
           "cluster_topology": [
             {
-              "instance_configuration_id": "gcp.kibana.1",
+              "instance_configuration_id": "gcp.kibana.n2.68x32x45",
               "zone_count": 1,
               "size": {
                 "value": 2048,

.github/CODEOWNERS

@@ -793,7 +793,6 @@ x-pack/packages/security/plugin_types_common @elastic/kibana-security
 x-pack/packages/security/plugin_types_public @elastic/kibana-security
 x-pack/packages/security/plugin_types_server @elastic/kibana-security
 x-pack/packages/security/role_management_model @elastic/kibana-security
-x-pack/packages/security-solution/common @elastic/security-threat-hunting-investigations
 x-pack/packages/security-solution/distribution_bar @elastic/kibana-cloud-security-posture
 x-pack/plugins/security_solution_ess @elastic/security-solution
 x-pack/packages/security-solution/features @elastic/security-threat-hunting-explore
@@ -1146,8 +1145,12 @@ packages/kbn-monaco/src/esql @elastic/kibana-esql
 #CC# /x-pack/plugins/reporting/ @elastic/appex-sharedux
 #CC# /x-pack/plugins/security_solution_serverless/ @elastic/appex-sharedux
 
-### Observability Plugins
 
+# Observability UI
+/x-pack/test_serverless/api_integration/test_suites/observability/config.ts @elastic/observability-ui @elastic/appex-qa
+/x-pack/test_serverless/api_integration/test_suites/observability/index.ts @elastic/observability-ui
+
+### Observability Plugins
 
 # Observability AI Assistant
 x-pack/test/observability_ai_assistant_api_integration @elastic/obs-ai-assistant
@@ -1238,6 +1241,7 @@ x-pack/test_serverless/**/test_suites/observability/ai_assistant @elastic/obs-ai
 /x-pack/test/accessibility/apps/group3/stack_monitoring.ts @elastic/stack-monitoring
 
 # Fleet
+/x-pack/test_serverless/api_integration/test_suites/security/fleet @elastic/fleet
 /x-pack/test/fleet_packages @elastic/fleet
 /x-pack/test/fleet_api_integration @elastic/fleet
 /x-pack/test/fleet_cypress @elastic/fleet
@@ -1514,8 +1518,6 @@ x-pack/plugins/cloud_integrations/cloud_full_story/server/config.ts @elastic/kib
 /x-pack/test/rule_registry @elastic/response-ops @elastic/obs-ux-management-team
 /x-pack/test/accessibility/apps/group3/rules_connectors.ts @elastic/response-ops
 /x-pack/test/functional/es_archives/cases/default @elastic/response-ops
-/x-pack/test_serverless/api_integration/test_suites/observability/config.ts @elastic/response-ops
-/x-pack/test_serverless/api_integration/test_suites/observability/index.ts @elastic/response-ops
 /x-pack/test_serverless/functional/page_objects/svl_triggers_actions_ui_page.ts @elastic/response-ops
 /x-pack/test_serverless/functional/page_objects/svl_rule_details_ui_page.ts @elastic/response-ops
 /x-pack/test_serverless/functional/page_objects/svl_oblt_overview_page.ts @elastic/response-ops
@@ -1619,6 +1621,7 @@ x-pack/test/api_integration/apis/management/index_management/inference_endpoints
 # Security Solution
 /x-pack/test/common/services/security_solution @elastic/security-solution
 /x-pack/test/api_integration/services/security_solution_*.gen.ts @elastic/security-solution
+/x-pack/test_serverless/functional/test_suites/security/index.feature_flags.ts @elastic/security-solution
 /x-pack/test/accessibility/apps/group3/security_solution.ts @elastic/security-solution
 /x-pack/test_serverless/functional/test_suites/security/config.ts @elastic/security-solution @elastic/appex-qa
 /x-pack/test_serverless/functional/test_suites/security/config.feature_flags.ts @elastic/security-solution

docs/user/ml/index.asciidoc

@@ -51,7 +51,8 @@ information, refer to {ml-docs}/ml-limitations.html[{ml-cap}].
 
 preview::[]
 
-You can find the data drift view in **{ml-app}** > *{data-viz}* in {kib}. 
+You can find the data drift view in **{ml-app}** > *{data-viz}* in {kib} or by using
+the <<kibana-navigation-search,global search field>>. 
 The data drift view shows you the differences in each field for two 
 different time ranges in a given {data-source}. The view helps you to visualize 
 the changes in your data over time and enables you to understand its behavior 
@@ -167,7 +168,7 @@ It makes it easy to find and investigate causes of unusual spikes or drops by us
 Examine the histogram chart of the log rates for a given {data-source}, and find the reason behind a particular change possibly in millions of log events across multiple fields and values.
 
 You can find log rate analysis embedded in multiple applications.
-In {kib}, you can find it under **{ml-app}** > **AIOps Labs** where you can select the {data-source} or saved search that you want to analyze.
+In {kib}, you can find it under **{ml-app}** > **AIOps Labs** or by using the <<kibana-navigation-search,global search field>>. Here, you can select the {data-source} or saved search that you want to analyze.
 
 [role="screenshot"]
 image::user/ml/images/ml-log-rate-analysis-before.png[Log event histogram chart]
@@ -201,8 +202,8 @@ displays them together with a chart that shows the distribution of each category
 and an example document that matches the category.
 //end::log-pattern-analysis-intro[]
 
-You can find log pattern analysis under **{ml-app}** > **AIOps Labs** where you 
-can select the {data-source} or saved search that you want to analyze, or in 
+You can find log pattern analysis under **{ml-app}** > **AIOps Labs** or by using the <<kibana-navigation-search,global search field>>. 
+Here, you can select the {data-source} or saved search that you want to analyze, or in 
 **Discover** as an available action for any text field.
 
 [role="screenshot"]
@@ -226,8 +227,8 @@ Change point detection uses the
 to detect distribution changes, trend changes, and other statistically 
 significant change points in a metric of your time series data.
 
-You can find change point detection under **{ml-app}** > **AIOps Labs** where 
-you can select the {data-source} or saved search that you want to analyze.
+You can find change point detection under **{ml-app}** > **AIOps Labs** or by using the <<kibana-navigation-search,global search field>>. 
+Here, you can select the {data-source} or saved search that you want to analyze.
 
 [role="screenshot"]
 image::user/ml/images/ml-change-point-detection.png[Change point detection UI]

package.json

@@ -810,7 +810,6 @@
     "@kbn/security-plugin-types-public": "link:x-pack/packages/security/plugin_types_public",
     "@kbn/security-plugin-types-server": "link:x-pack/packages/security/plugin_types_server",
     "@kbn/security-role-management-model": "link:x-pack/packages/security/role_management_model",
-    "@kbn/security-solution-common": "link:x-pack/packages/security-solution/common",
     "@kbn/security-solution-distribution-bar": "link:x-pack/packages/security-solution/distribution_bar",
     "@kbn/security-solution-ess": "link:x-pack/plugins/security_solution_ess",
     "@kbn/security-solution-features": "link:x-pack/packages/security-solution/features",

packages/content-management/table_list_view_table/src/table_list_view.test.tsx

@@ -242,8 +242,8 @@ describe('TableListView', () => {
       const updatedAtValues: Moment[] = [];
 
       const updatedHits = hits.map(({ id, attributes, references }, i) => {
-        const updatedAt = new Date(new Date().setDate(new Date().getDate() - (7 + i)));
-        updatedAtValues.push(moment(updatedAt));
+        const updatedAt = moment().subtract(7 + i, 'days');
+        updatedAtValues.push(updatedAt);
 
         return {
           id,

packages/kbn-apm-synthtrace-client/src/types/agent_names.ts

@@ -24,6 +24,8 @@ type OpenTelemetryAgentName =
   | 'otlp'
   | 'opentelemetry/cpp'
   | 'opentelemetry/dotnet'
+  | 'opentelemetry/dotnet/opentelemetry-dotnet-instrumentation'
+  | 'opentelemetry/dotnet/elastic'
   | 'opentelemetry/erlang'
   | 'opentelemetry/go'
   | 'opentelemetry/java'

src/plugins/discover/public/context_awareness/profile_providers/security/security_root_profile/profile.tsx

@@ -7,8 +7,6 @@
  * License v3.0 only", or the "Server Side Public License, v 1".
  */
 
-import React from 'react';
-import { getDiscoverCellRenderer } from '@kbn/security-solution-common';
 import { RootProfileProvider, SolutionType } from '../../../profiles';
 import { ProfileProviderServices } from '../../profile_provider_services';
 import { SecurityProfileProviderFactory } from '../types';
@@ -21,12 +19,6 @@ export const createSecurityRootProfileProvider: SecurityProfileProviderFactory<
   profile: {
     getCellRenderers: (prev) => (params) => ({
       ...prev(params),
-      'host.name': (props) => {
-        const CellRenderer = getDiscoverCellRenderer({
-          fieldName: 'host.name',
-        });
-        return <CellRenderer {...props} />;
-      },
     }),
   },
   resolve: (params) => {

src/plugins/discover/tsconfig.json

@@ -95,7 +95,6 @@
     "@kbn/presentation-containers",
     "@kbn/observability-ai-assistant-plugin",
     "@kbn/fields-metadata-plugin",
-    "@kbn/security-solution-common",
     "@kbn/logs-data-access-plugin",
     "@kbn/core-lifecycle-browser",
     "@kbn/discover-contextual-components",

src/plugins/ui_actions_enhanced/common/types.ts

@@ -11,6 +11,7 @@ import type { SerializableRecord } from '@kbn/utility-types';
 
 export type BaseActionConfig = SerializableRecord;
 
+// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 export type SerializedAction<Config extends BaseActionConfig = BaseActionConfig> = {
   readonly factoryId: string;
   readonly name: string;
@@ -20,12 +21,14 @@ export type SerializedAction<Config extends BaseActionConfig = BaseActionConfig>
 /**
  * Serialized representation of a triggers-action pair, used to persist in storage.
  */
+// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 export type SerializedEvent = {
   eventId: string;
   triggers: string[];
   action: SerializedAction;
 };
 
+// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 export type DynamicActionsState = {
   events: SerializedEvent[];
 };

src/plugins/ui_actions_enhanced/public/components/action_wizard/test_data.tsx

@@ -25,6 +25,7 @@ export const dashboards = [
   { id: 'dashboard2', title: 'Dashboard 2' },
 ];
 
+// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 type DashboardDrilldownConfig = {
   dashboardId?: string;
   useCurrentFilters: boolean;
@@ -119,6 +120,7 @@ export const dashboardFactory = new ActionFactory(dashboardDrilldownActionFactor
   getFeatureUsageStart: () => licensingMock.createStart().featureUsage,
 });
 
+// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 type UrlDrilldownConfig = {
   url: string;
   openInNewTab: boolean;

src/plugins/ui_actions_enhanced/public/drilldowns/url_drilldown/components/url_drilldown_collect_config/i18n.ts

@@ -9,48 +9,50 @@
 
 import { i18n } from '@kbn/i18n';
 
-export const txtUrlTemplatePlaceholder = i18n.translate(
-  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplatePlaceholderText',
-  {
-    defaultMessage: 'Example: {exampleUrl}',
-    values: {
-      exampleUrl: 'https://www.my-url.com/?{{event.key}}={{event.value}}',
-    },
-  }
-);
-
-export const txtUrlPreviewHelpText = i18n.translate(
-  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlPreviewHelpText',
-  {
-    defaultMessage: `Please note that in preview '{{event.*}}' variables are substituted with dummy values.`,
-  }
-);
-
 export const txtUrlTemplateLabel = i18n.translate(
   'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplateLabel',
   {
     defaultMessage: 'Enter URL',
   }
 );
 
-export const txtUrlTemplateSyntaxHelpLinkText = i18n.translate(
-  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplateSyntaxHelpLinkText',
+export const txtEmptyErrorMessage = i18n.translate(
+  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplateEmptyErrorMessage',
   {
-    defaultMessage: 'Syntax help',
+    defaultMessage: 'URL template is required.',
   }
 );
 
-export const txtUrlTemplatePreviewLabel = i18n.translate(
-  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlPreviewLabel',
+export const txtInvalidFormatErrorMessage = ({
+  error,
+  example,
+}: {
+  error: string;
+  example: string;
+}) =>
+  i18n.translate(
+    'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplateInvalidFormatErrorMessage',
+    {
+      defaultMessage: '{error} Example: {example}',
+      values: {
+        error,
+        example,
+      },
+    }
+  );
+
+export const txtUrlTemplateSyntaxTestingHelpText = i18n.translate(
+  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplateSyntaxTestingHelpText',
   {
-    defaultMessage: 'URL preview:',
+    defaultMessage:
+      'To validate and test the URL template, save the configuration and use this drilldown from the panel.',
   }
 );
 
-export const txtUrlTemplatePreviewLinkText = i18n.translate(
-  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlPreviewLinkText',
+export const txtUrlTemplateSyntaxHelpLinkText = i18n.translate(
+  'uiActionsEnhanced.drilldowns.urlDrilldownCollectConfig.urlTemplateSyntaxHelpLinkText',
   {
-    defaultMessage: 'Preview',
+    defaultMessage: 'Syntax help',
   }
 );