Skip to content

Commit

Permalink
[7.17] Switch to global attributes and remove section-scoped pull a…
Browse files Browse the repository at this point in the history
…nd `issue` (#4978)

* from {pull} to {kibana-pull}

* from {issue} to {kibana-issue}

* Remove section-scoped attribute definitions

* Content change to trigger preview
  • Loading branch information
joepeeples authored Apr 2, 2024
1 parent 1661e98 commit 6b812c2
Show file tree
Hide file tree
Showing 11 changed files with 277 additions and 282 deletions.
5 changes: 0 additions & 5 deletions docs/release-notes.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -46,11 +46,6 @@ This section summarizes the changes in each release.
* <<release-notes-7.9.0, {elastic-sec} version 7.9.0>>


// Use these for links to issue and pulls. Note issues and pulls redirect one to
// each other on Github, so don't worry too much on using the right prefix.
:issue: https://github.com/elastic/kibana/issues/
:pull: https://github.com/elastic/kibana/pull/

include::release-notes/7.17.asciidoc[]
include::release-notes/7.16.asciidoc[]
include::release-notes/7.15.asciidoc[]
Expand Down
40 changes: 20 additions & 20 deletions docs/release-notes/7.10.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@
[[bug-fixes-7.10.1]]
==== Bug fixes and enhancements

* Fixes EQL previews which now accept all date formats ({pull}83939[#83939]).
* Fixes incorrect time for DNS histograms ({pull}83781[#83781]).
* Fixes EQL previews which now accept all date formats ({kibana-pull}83939[#83939]).
* Fixes incorrect time for DNS histograms ({kibana-pull}83781[#83781]).
* Fixes UI strings around indicator matching and mapping definitions
({pull}82510[#82510]).
* Fixes layout in "Severity override" drop-down when creating a new rule ({pull}82271[#82271]).
({kibana-pull}82510[#82510]).
* Fixes layout in "Severity override" drop-down when creating a new rule ({kibana-pull}82271[#82271]).


[discrete]
Expand Down Expand Up @@ -43,7 +43,7 @@ In the new mapping, `signal.rule.risk_score` is a float. After rolling over,
there is a conflict between the old and new `signal.rule.risk_score` for some
features, such as aggregations.

This requires the `view_index_metadata` permission in Kibana. See ({pull}/80019[#80019]) for details.
This requires the `view_index_metadata` permission in Kibana. See ({kibana-pull}/80019[#80019]) for details.

*Connect incident fields allowed when cases are sent*

Expand All @@ -52,32 +52,32 @@ You can now specify connector incident fields when cases are sent. This includes
* IBM Resilient: issue types, and severity.
* ServiceNow: urgency, severity, and impact.

See ({pull}77327[#77327]) for details.
See ({kibana-pull}77327[#77327]) for details.

[discrete]
[[bug-fixes-7.10.0]]
==== Bug fixes and enhancements
* Adds Metadata and Discovery Analysis Jobs to Security Integration ({pull}76023[#76023]).
* Improves Alert Telemetry for the Security app ({pull}77200[#77200]).
* Allows passwords to be visible on security screens ({pull}77394[#77394]).
* Groups features for role management ({pull}78152[#78152]).
* Warns users when security is not configured ({pull}78545[#78545]).
* Enhancements for saved object management workflows ({pull}75444[#75444]).
* Adds EQL search strategy for security ({pull}78645[#78645]).
* Fetches related events from specified devices ({pull}78780[#78780]).
* Excludes cloud alias index from EQL query ({pull}81551[#81551]).
* Telemetry: Displays collected security event sample ({pull}78963[#78963]).
* Analyze Events: Requests data from new event API ({pull}78782[#78782]).
* Detections: Handle conflicts on alert status update ({pull}75492[#75492]).
* Adds Metadata and Discovery Analysis Jobs to Security Integration ({kibana-pull}76023[#76023]).
* Improves Alert Telemetry for the Security app ({kibana-pull}77200[#77200]).
* Allows passwords to be visible on security screens ({kibana-pull}77394[#77394]).
* Groups features for role management ({kibana-pull}78152[#78152]).
* Warns users when security is not configured ({kibana-pull}78545[#78545]).
* Enhancements for saved object management workflows ({kibana-pull}75444[#75444]).
* Adds EQL search strategy for security ({kibana-pull}78645[#78645]).
* Fetches related events from specified devices ({kibana-pull}78780[#78780]).
* Excludes cloud alias index from EQL query ({kibana-pull}81551[#81551]).
* Telemetry: Displays collected security event sample ({kibana-pull}78963[#78963]).
* Analyze Events: Requests data from new event API ({kibana-pull}78782[#78782]).
* Detections: Handle conflicts on alert status update ({kibana-pull}75492[#75492]).

[discrete]
[[known-issues-7.10.0]]
==== Known issues

* If you edit a rule while that rule is running, the rule fails. Subsequent successful runs will retain the previous failure message ({pull}82320[#82320]).
* If you edit a rule while that rule is running, the rule fails. Subsequent successful runs will retain the previous failure message ({kibana-pull}82320[#82320]).
+
[role="screenshot"]
image::images/detection-rule-failure.png[]

* When adding a rule exception, you cannot select value lists of type `ip_range`. Lists of type `ip_range` will not appear in the **Add Exception** dropdown as possible values after selecting the is in list operator. ({pull}79511[#79511]).
* When adding a rule exception, you cannot select value lists of type `ip_range`. Lists of type `ip_range` will not appear in the **Add Exception** dropdown as possible values after selecting the is in list operator. ({kibana-pull}79511[#79511]).

36 changes: 18 additions & 18 deletions docs/release-notes/7.11.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -9,12 +9,12 @@
[[bug-fixes-7.11.2]]
==== Bug fixes and enhancements

- Updates warning message when no indices match provided index patterns ({pull}93094[#93094]).
- Fixes rule edit bug with `max_signals` ({pull}92748[#92748]).
- Fixes issue where the file name in a value modal list would be truncated ({pull}91952[#91952]).
- Adds an overflow text wrap for rule descriptions ({pull}91945[#91945]).
- Fixes issue in detection search where searching with the timestamp override field would yield a 400 error({pull}91597[#91597]).
- Replaces `partial failure` with `warning` for rule statuses ({pull}91167[#91167]).
- Updates warning message when no indices match provided index patterns ({kibana-pull}93094[#93094]).
- Fixes rule edit bug with `max_signals` ({kibana-pull}92748[#92748]).
- Fixes issue where the file name in a value modal list would be truncated ({kibana-pull}91952[#91952]).
- Adds an overflow text wrap for rule descriptions ({kibana-pull}91945[#91945]).
- Fixes issue in detection search where searching with the timestamp override field would yield a 400 error({kibana-pull}91597[#91597]).
- Replaces `partial failure` with `warning` for rule statuses ({kibana-pull}91167[#91167]).

[discrete]
[[release-notes-7.11.0]]
Expand All @@ -32,21 +32,21 @@ The `/api/lists` `DELETE` API has been updated to check for references before re
[[bug-fixes-7.11.0]]
==== Bug fixes and enhancements

* Corrects look-back time logic now displays whatever unit the user selects ({pull}81383[#81383]).
* Fixes a bug where mapping browser fields were automatically reduced ({pull}81675[#81675]).
* Allows both status data for enabled and disabled rules are now fetchable ({pull}81783[#81783]).
* Allows autorefresh to be toggled in **Advanced Settings** ({pull}82062[#82062]).
* Makes severity and risk score overrides more flexible ({pull}83723[#83723]).
* Improves DE query build times for large lists ({pull}85051[#85051]).
* Adds skeleton exceptions list tab to all rules page ({pull}85465[#85465]).
* Fixes export on exceptions functionality list view ({pull}86135[#86135]).
* Fixes exception list table referential deletion ({pull}87231[#87231]).
* Disables delete button for endpoint exceptions ({pull}87694[#87694]).
* Corrects look-back time logic now displays whatever unit the user selects ({kibana-pull}81383[#81383]).
* Fixes a bug where mapping browser fields were automatically reduced ({kibana-pull}81675[#81675]).
* Allows both status data for enabled and disabled rules are now fetchable ({kibana-pull}81783[#81783]).
* Allows autorefresh to be toggled in **Advanced Settings** ({kibana-pull}82062[#82062]).
* Makes severity and risk score overrides more flexible ({kibana-pull}83723[#83723]).
* Improves DE query build times for large lists ({kibana-pull}85051[#85051]).
* Adds skeleton exceptions list tab to all rules page ({kibana-pull}85465[#85465]).
* Fixes export on exceptions functionality list view ({kibana-pull}86135[#86135]).
* Fixes exception list table referential deletion ({kibana-pull}87231[#87231]).
* Disables delete button for endpoint exceptions ({kibana-pull}87694[#87694]).

[discrete]
[[known-issues-7.11.0]]
==== Known issues

* The Elastic Endpoint Security rule will report a failure status until the Endpoint sends an alert for the first time. At that point, the next rule execution will succeed. `logs-endpoint.alerts-*` index pattern does not get created until the Endpoint sends the first alert ({issue}90401[#90401]).
* The Elastic Endpoint Security rule will report a failure status until the Endpoint sends an alert for the first time. At that point, the next rule execution will succeed. `logs-endpoint.alerts-*` index pattern does not get created until the Endpoint sends the first alert ({kibana-issue}90401[#90401]).

* In the Alert Details Summary view, values for some fields appear truncated. You'll only be able to see the first character ({issue}90539[#90539]).
* In the Alert Details Summary view, values for some fields appear truncated. You'll only be able to see the first character ({kibana-issue}90539[#90539]).
74 changes: 37 additions & 37 deletions docs/release-notes/7.12.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,13 @@
[discrete]
[[bug-fixes-7.12.1]]
==== Bug fixes and enhancements
* Removes empty values in the `threshold.field` array for threshold rules ({pull}97111[#97111]).
* Fixes the issue where the *Read Less* button in the Event Details flyout is rendered below the fold if an event's message field is too large ({pull}96524[#96524]).
* Resolves regression where Elastic Endgame rules would warn about the unmapped timestamp override field ({pull}96394[#96394]).
* Standardizes process fields in Endpoint Security telemetry ({pull}95836[#95836]).
* Adds `threshold_result` to the alert notification context ({pull}95354[#95354]).
* Updates the threshold preview to account for threshold field groups and cardinality ({pull}94224[#94224]).
* Fixes bug for pre-populated endpoint exceptions ({pull}94025[#94025]).
* Removes empty values in the `threshold.field` array for threshold rules ({kibana-pull}97111[#97111]).
* Fixes the issue where the *Read Less* button in the Event Details flyout is rendered below the fold if an event's message field is too large ({kibana-pull}96524[#96524]).
* Resolves regression where Elastic Endgame rules would warn about the unmapped timestamp override field ({kibana-pull}96394[#96394]).
* Standardizes process fields in Endpoint Security telemetry ({kibana-pull}95836[#95836]).
* Adds `threshold_result` to the alert notification context ({kibana-pull}95354[#95354]).
* Updates the threshold preview to account for threshold field groups and cardinality ({kibana-pull}94224[#94224]).
* Fixes bug for pre-populated endpoint exceptions ({kibana-pull}94025[#94025]).

[discrete]
[[release-notes-7.12.0]]
Expand All @@ -23,41 +23,41 @@
[discrete]
[[features-7.12.0]]
==== Features
* Implements a connector for ServiceNow SIR ({pull}88190[#88190]).
* Implements the case's fields for the ServiceNow SIR connector ({pull}88655[#88655]).
* Implements a connector for ServiceNow SIR ({kibana-pull}88190[#88190]).
* Implements the case's fields for the ServiceNow SIR connector ({kibana-pull}88655[#88655]).

[discrete]
[[bug-fixes-7.12.0]]
==== Bug fixes and enhancements
* Enables the Microsoft Team's action type for the detection engine ({pull}94239[#94239]).
* Fixes bug for pre-populated endpoint exceptions ({pull}94025[#94025]).
* Pushes ServiceNow ITSM comments on cases and alerts as work notes and improves error messaging ({pull}93916[#93916]).
* Alert migrations can be finalized and cleaned up in all spaces ({pull}93809[#93809]).
* Updates error handling logic to produce a cleaner message when deeply nested fields in KQL queries are greater than the default or what is set for the config property ({pull}93536[#93536]).
* Updates shellcode telemetry for schema adjustment ({pull}93143[#93143]).
* Fixes bug in the allowlist layout for security telemetry ({pull}92850[#92850]).
* Updates exceptions modal to use existing lists plug-in ({pull}92348[#92348]).
* Moves PE details out of Ext context ({pull}92146[#92146]).
* Fixes loading indicators in the rules management table ({pull}91925[#91925]).
* Adds missing fields for security telemetry ({pull}91920[#91920]).
* Fixes issues when pushing a case, that has alerts attached, to an external service ({pull}91638[#91638]).
* Updates error banner when refreshing the rule status ({pull}91051[#91051]).
* Fixes bug in the exceptions builder UI that causes invalid values to overwrite other values ({pull}90634[#90634]).
* Fixes issues with searching the Exceptions list table by name ({pull}88701[#88701]).
* Threshold rule fixes ({pull}93553[#93553])({pull}92667[#92667]).
* Adds sub cases to the case list and a case details page ({pull}91434[#91434]).
* Upgrades to use the IndexPatternService to get fields ({pull}91153[#91153]).
* Adds new fields to the allowlist for alert telemetry ({pull}90868[#90868]).
* Adds support for multiple `terms` aggregations within a Threshold Rule, as well as an additional `cardinality` aggregation for matching a specific number of unique values across a field. ({pull}90826[#90826]).
* Introduces the network details and host details to the side panel. ({pull}90064[#90064]).
* Adds ransomware exceptions ({pull}89974[#89974]).
* Extends the daily usage collection to include perf and run information on active security ML jobs. ({pull}89705[#89705]).
* Reduces the detection engine's reliance on `_source` ({pull}89371[#89371]).
* Pushes a new case to the connector when created ({pull}89131[#89131]).
* Disallows JIRA labels with spaces ({pull}90548[#90548]).
* Fixes "Error loading data" displaying under Analyze Event ({pull}91718[#91718]).
* Enables the Microsoft Team's action type for the detection engine ({kibana-pull}94239[#94239]).
* Fixes bug for pre-populated endpoint exceptions ({kibana-pull}94025[#94025]).
* Pushes ServiceNow ITSM comments on cases and alerts as work notes and improves error messaging ({kibana-pull}93916[#93916]).
* Alert migrations can be finalized and cleaned up in all spaces ({kibana-pull}93809[#93809]).
* Updates error handling logic to produce a cleaner message when deeply nested fields in KQL queries are greater than the default or what is set for the config property ({kibana-pull}93536[#93536]).
* Updates shellcode telemetry for schema adjustment ({kibana-pull}93143[#93143]).
* Fixes bug in the allowlist layout for security telemetry ({kibana-pull}92850[#92850]).
* Updates exceptions modal to use existing lists plug-in ({kibana-pull}92348[#92348]).
* Moves PE details out of Ext context ({kibana-pull}92146[#92146]).
* Fixes loading indicators in the rules management table ({kibana-pull}91925[#91925]).
* Adds missing fields for security telemetry ({kibana-pull}91920[#91920]).
* Fixes issues when pushing a case, that has alerts attached, to an external service ({kibana-pull}91638[#91638]).
* Updates error banner when refreshing the rule status ({kibana-pull}91051[#91051]).
* Fixes bug in the exceptions builder UI that causes invalid values to overwrite other values ({kibana-pull}90634[#90634]).
* Fixes issues with searching the Exceptions list table by name ({kibana-pull}88701[#88701]).
* Threshold rule fixes ({kibana-pull}93553[#93553])({kibana-pull}92667[#92667]).
* Adds sub cases to the case list and a case details page ({kibana-pull}91434[#91434]).
* Upgrades to use the IndexPatternService to get fields ({kibana-pull}91153[#91153]).
* Adds new fields to the allowlist for alert telemetry ({kibana-pull}90868[#90868]).
* Adds support for multiple `terms` aggregations within a Threshold Rule, as well as an additional `cardinality` aggregation for matching a specific number of unique values across a field. ({kibana-pull}90826[#90826]).
* Introduces the network details and host details to the side panel. ({kibana-pull}90064[#90064]).
* Adds ransomware exceptions ({kibana-pull}89974[#89974]).
* Extends the daily usage collection to include perf and run information on active security ML jobs. ({kibana-pull}89705[#89705]).
* Reduces the detection engine's reliance on `_source` ({kibana-pull}89371[#89371]).
* Pushes a new case to the connector when created ({kibana-pull}89131[#89131]).
* Disallows JIRA labels with spaces ({kibana-pull}90548[#90548]).
* Fixes "Error loading data" displaying under Analyze Event ({kibana-pull}91718[#91718]).

[discrete]
[[known-issues-7.12.0]]
==== Known Issues
* Pagination does not work in the All Cases table. To circumvent this, increase the total number of rows that are displayed per page by selecting an option from the *Rows per page* menu. Alternatively, decrease the number of rows displayed in the table by filtering the list of cases that are returned. Finally, if you know which case you want to view, enter descriptive text about it into the search bar at the top of the table. ({pull}94929[#94929]).
* Pagination does not work in the All Cases table. To circumvent this, increase the total number of rows that are displayed per page by selecting an option from the *Rows per page* menu. Alternatively, decrease the number of rows displayed in the table by filtering the list of cases that are returned. Finally, if you know which case you want to view, enter descriptive text about it into the search bar at the top of the table. ({kibana-pull}94929[#94929]).
Loading

0 comments on commit 6b812c2

Please sign in to comment.