Skip to content

Commit

Permalink
Serverless changelog — Dec 16, 2024 (#244)
Browse files Browse the repository at this point in the history
* Creates today's changelog

* removes fixed known issue

* Changes "Breaking changes" to "Deprecations"

* Update serverless/pages/serverless-changelog.asciidoc

Co-authored-by: Kaarina Tungseth <[email protected]>

---------

Co-authored-by: Kaarina Tungseth <[email protected]>
  • Loading branch information
benironside and KOTungseth authored Dec 17, 2024
1 parent 56f006e commit 400f8dd
Show file tree
Hide file tree
Showing 2 changed files with 53 additions and 59 deletions.
53 changes: 53 additions & 0 deletions serverless/pages/serverless-changelog.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,59 @@ For serverless API changes, refer to https://www.elastic.co/docs/api/changes[API

For serverless changes in Cloud Console, refer to https://www.elastic.co/guide/en/cloud/current/ec-release-notes.html[Elasticsearch Service Documentation: Release notes].

[discrete]
[[serverless-changelog-12162024]]
== December 16, 2024

[discrete]
[[deprecations-12162024]]
=== Deprecations
* Deprecates the `discover:searchFieldsFromSource` setting ({kibana-pull}202679[#202679]).
* Disables scripted field creation in the Data Views management page ({kibana-pull}202250[#202250]).
* Removes all logic based on the following settings: `xpack.reporting.roles.enabled`,
`xpack.reporting.roles.allow` ({kibana-pull}200834[#200834]).
* Removes the legacy table from Discover ({kibana-pull}201254[#201254]).
* Deprecates ephemeral tasks from action and alerting plugins ({kibana-pull}197421[#197421]).

[discrete]
[[features-enhancements-12162024]]
=== Features and enhancements
* Optimizes the Kibana Trained Models API ({kibana-pull}200977[#200977]).
* Adds a *Create Case* action to the *Log rate analysis* page ({kibana-pull}201549[#201549]).
* Improves AI Assistant's response quality by giving it access to Elastic's product documentation ({kibana-pull}199694[#199694]).
* Adds support for suppressing EQL sequence alerts ({kibana-pull}189725[#189725]).
* Adds an *Advanced settings* section to the SLO form ({kibana-pull}200822[#200822]).
* Adds a new sub-feature privilege under **Synthetics and Uptime** `Can manage private locations` ({kibana-pull}201100[#201100]).


[discrete]
[[fixes-12162024]]
=== Fixes
* Fixes point visibility regression ({kibana-pull}202358[#202358]).
* Improves help text of creator and view count features on dashboard listing page ({kibana-pull}202488[#202488]).
* Highlights matching field values when performing a KQL search on a keyword field ({kibana-pull}201952[#201952]).
* Supports "Inspect" in saved search embeddables ({kibana-pull}202947[#202947]).
* Fixes your ability to clear the user-specific system prompt ({kibana-pull}202279[#202279]).
* Fixes error when opening rule flyout ({kibana-pull}202386[#202386]).
* Fixes to Ops Genie as a default connector ({kibana-pull}201923[#201923]).
* Fixes actions on charts ({kibana-pull}202443[#202443]).
* Adds flyout to table view in Infrastructure Inventory ({kibana-pull}202646[#202646]).
* Fixes service names with spaces not being URL encoded properly for `context.viewInAppUrl` ({kibana-pull}202890[#202890]).
* Allows access query logic to handle user ID and name conditions ({kibana-pull}202833[#202833]).
* Fixes APM rule error message for invalid KQL filter ({kibana-pull}203096[#203096]).
* Rejects CEF logs from Automatic Import and redirects you to the CEF integration instead ({kibana-pull}201792[#201792]).
* Updates the install rules title and message ({kibana-pull}202226[#202226]).
* Fixes error on second entity engine init API call ({kibana-pull}202903[#202903]).
* Restricts unsupported log formats ({kibana-pull}202994[#202994]).
* Removes errors related to Enterprise Search nodes ({kibana-pull}202437[#202437]).
* Improves web crawler name consistency ({kibana-pull}202738[#202738]).
* Fixes editor cursor jumpiness ({kibana-pull}202389[#202389]).
* Fixes rollover datastreams on subobjects mapper exception ({kibana-pull}202689[#202689]).
* Fixes spaces sync to retrieve 10,000 trained models ({kibana-pull}202712[#202712]).
* Fixes log rate analysis embeddable error on the Alerts page ({kibana-pull}203093[#203093]).
* Fixes Slack API connectors not displayed under Slack connector type when adding new connector to rule ({kibana-pull}202315[#202315]).


[discrete]
[[serverless-changelog-12092024]]
== December 9, 2024
Expand Down
59 changes: 0 additions & 59 deletions serverless/pages/serverless-known-issues.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -3,62 +3,3 @@
++++
<titleabbrev>Known issues</titleabbrev>
++++

[discrete]
[[known-issues-201820]]
== Exceptions tab fails to load

On December 5, 2024, it was discovered the {sec-serverless} **Exceptions** tab fails to load when exceptions contain comments with newline characters (`\n`). For details, refer to ({kibana-issue}201820[#201820]).

*Custom rules workaround* +

. Go to the **Rules** page, then <<import-export-rules-ui,export>> the rule or rules with the exception lists with newline characters.
. Open the `.ndjson` file, then remove the newline characters from the `comments`.
. Go to the **Rules** page, then <<import-export-rules-ui,re-import>> the rules. Make sure to select **Overwrite existing exception lists with conflicting "list_id"**.

*Prebuilt rules workaround* +

. For the exception lists with newline characters, fetch the IDs associated with the rule.
.. Go to the **Rules** page.
.. Open the rule details, then go to the page URL.
.. Copy the URL id string.
+
For example, in the http://host.name/app/security/rules/id/167a5f6f-2148-4792-8226-b5e7a58ef46e URL, copy the `167a5f6f-2148-4792-8226-b5e7a58ef46e` id string.
.. To specify the `id` when fetching the rule details, use the {api-kibana-serverless}/operation/operation-readrule[retrieve a detection rule API]:
+
[source,console]
----
curl -H 'Authorization: ApiKey API_KEY_HERE' -H 'kbn-xsrf: true' -H 'elastic-api-version: 2023-10-31' KIBANA_URL/api/detection_engine/rules?id=167a5f6f-2148-4792-8226-b5e7a58ef46e
----
+
The JSON response contains the `id`, `list_id`, and `namespace_type` values in the `exceptions_list` key:
+
[source,console]
----
{
"id": "167a5f6f-2148-4792-8226-b5e7a58ef46e",
"exceptions_list": [
{
"id": "490525a2-eb66-4320-95b5-88bdd1302dc4",
"list_id": "f75aae6f-0229-413f-881d-81cb3abfbe2d",
"namespace_type": "single"
}
]
}
----
+
. To retrieve the exception list with newline characters, use the export exceptions API with the `id`, `list_id`, and `namespace_type` values:
+
[source,console]
----
curl -XPOST -H 'Authorization: ApiKey API_KEY_HERE' -H 'kbn-xsrf: true' -H 'elastic-api-version: 2023-10-31' 'KIBANA_URL/api/exception_lists/_export?list_id=f75aae6f-0229-413f-881d-81cb3abfbe2d&id=490525a2-eb66-4320-95b5-88bdd1302dc4&namespace_type=single' -o list.ndjson
----
+
. Open the `.ndjson` file, then remove the newline characters from the `comments[].comment` values.
. Go to the <<security-shared-exception-lists,**Shared Exception Lists**>> page.
. To re-import the exception list, use the **Import exception lists** option.
+
Since the exception list exists, the import fails, and the option to overwrite the existing list appears.
. Select the overwrite option, then resubmit the request to import the exception list.

NOTE: To export and re-import exceptions for the Elastic Endpoint rule, use the <<security-shared-exception-lists,**Shared Exception Lists**>> page.

0 comments on commit 400f8dd

Please sign in to comment.