8.11 release notes #4095

benironside · 2023-10-24T16:51:14Z

Fixes #4005 and fixes #4015

Adds release notes for Elastic Security 8.11, including Endpoint.

Preview: 8.11 release notes

github-actions · 2023-10-24T16:51:29Z

Documentation previews:

✨ HTML diff
📙 Elastic Security Guide

stephmilovic

LGTM for explore side, thank you!

nastasha-solomon

Thanks for putting this together, @benironside! I'll likely take one more pass to make sure all of my features are doc'd. In the meantime, here's my first round of edits.

docs/release-notes/8.11.asciidoc

nastasha-solomon · 2023-10-30T20:57:34Z

docs/release-notes/8.11.asciidoc

+* Updates the exceptions flyout's `match_any` operator to accept duplicate values that differ in case. Previously, values of `foo` and `FOO` were incorrectly considered duplicates ({pull}167208[#167208]).
+* Enables the Elastic AI Assistant to answer questions about Elasticsearch Query Language (ES|QL) by allowing it to query, via ELSER, an ES|QL knowledge base. Refer to <<security-assistant, Elastic AI Assistant>> to enable the knowledge base ({pull}167097[#167097]).
+* Enables ES|QL in Timeline (technical preview) ({pull}166764[#166764]).
+* Adds the new ES|QL rule type (technical preview) ({pull}165450[#165450]).


@paulewing do you want to expand on this at all?

docs/release-notes/8.11.asciidoc

semd

LGTM

banderror

Looks great, thank you @benironside!

Co-authored-by: Nastasha Solomon <[email protected]>

docs/release-notes/8.11.asciidoc

banderror · 2023-11-06T15:22:31Z

Hey @benironside, before we merge these release notes, could we please also mention the following tickets as known issues in 8.11.0? Fixes for these three will be released in 8.11.1:

[Security Solution] Rule view duplication on MITRE coverage page kibana#167929
[Security Solution] Incorrect rule count on MITRE coverage tactic cell kibana#167930
[Security Solution] Incorrect MITRE Subtechnique is selected when creating Rule kibana#170347

cc @approksiu @dplumlee

joepeeples

A few small edits, thanks!

docs/release-notes/8.11.asciidoc

Co-authored-by: Joe Peeples <[email protected]>

nastasha-solomon · 2023-11-06T16:55:05Z

@banderror can you provide summaries and workarounds (if available) for the known issues you listed here? Thank you!

jmikell821

Just a couple of suggestions -- thanks!

docs/release-notes/8.11.asciidoc

Co-authored-by: Janeen Mikell Roberts <[email protected]>

… into 8.11-release-notes

dplumlee

@nastasha-solomon re: workarounds for the issues @banderror listed, there's unfortunately no workarounds for the coverage overview bugs as they're all display issues in the code itself. The incorrect sub-technique bug could technically be worked around by applying the changes to the threat field manually via the API instead of the Rule create/edit UI (definitely a little clunky for just the two instances where it occurs). All fixes are targeted for 8.11.1 as Georgii mentioned.

docs/release-notes/8.11.asciidoc

yctercero · 2023-11-07T05:16:36Z

docs/release-notes/8.11.asciidoc

+* Upgrades {elastic-defend} to capture a new Windows event type: ETW Threat Intelligence (ETW-TI). Renames the Windows events policy `Credential access` category to `API` in the UI (but not in the `.yaml`, maintaining backwards compatibility). Adds two new advanced options: `windows.advanced.events.api_disabled` and
+`windows.advanced.events.api_verbose` ({pull}167549[#167549]).
+* Adds the `Same family` category and tab to the Data Quality dashboard. Fields with mappings in the same family have the same search behavior as the type specified by ECS, but may have different space usage or performance characteristics ({pull}167480[#167480]).
+* Updates the exceptions flyout's `match_any` operator to accept duplicate values that differ in case ({pull}167208[#167208]).


yctercero

Thank you for the release notes! Do we add breaking changes to release notes? If so, we have to add the breaking change for investigation_fields in.

* First complete draft of 8.11 release notes * updates breaking change * Fixin small things * Adding one more bc * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc Co-authored-by: Joe Peeples <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Joe Peeples <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Joe Peeples <[email protected]> * Adding known issues * Moves Endpoint features to correct section * Update docs/release-notes/8.11.asciidoc Co-authored-by: Janeen Mikell Roberts <[email protected]> * Update docs/release-notes/8.11.asciidoc * Janeen's input * incorporates Davis' comment --------- Co-authored-by: nastasha.solomon <[email protected]> Co-authored-by: Nastasha Solomon <[email protected]> Co-authored-by: Joe Peeples <[email protected]> Co-authored-by: Janeen Mikell Roberts <[email protected]> (cherry picked from commit d5eb310)

* First complete draft of 8.11 release notes * updates breaking change * Fixin small things * Adding one more bc * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc * Update docs/release-notes/8.11.asciidoc Co-authored-by: Joe Peeples <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Joe Peeples <[email protected]> * Update docs/release-notes/8.11.asciidoc Co-authored-by: Joe Peeples <[email protected]> * Adding known issues * Moves Endpoint features to correct section * Update docs/release-notes/8.11.asciidoc Co-authored-by: Janeen Mikell Roberts <[email protected]> * Update docs/release-notes/8.11.asciidoc * Janeen's input * incorporates Davis' comment --------- Co-authored-by: nastasha.solomon <[email protected]> Co-authored-by: Nastasha Solomon <[email protected]> Co-authored-by: Joe Peeples <[email protected]> Co-authored-by: Janeen Mikell Roberts <[email protected]> (cherry picked from commit d5eb310) Co-authored-by: Benjamin Ironside Goldstein <[email protected]>

First complete draft of 8.11 release notes

01f06ee

benironside added release-notes v8.11.0 labels Oct 24, 2023

benironside self-assigned this Oct 24, 2023

updates breaking change

d12719e

benironside requested a review from a team October 25, 2023 15:07

benironside marked this pull request as ready for review October 25, 2023 15:07

Merge branch 'main' into 8.11-release-notes

506cb95

benironside requested review from stephmilovic, banderror, yctercero, semd, caitlinbetz, michaelolo24, roxana-gheorghe and machadoum October 25, 2023 15:08

Fixin small things

3722e02

stephmilovic approved these changes Oct 26, 2023

View reviewed changes

Adding one more bc

c3c1660

michaelolo24 approved these changes Oct 30, 2023

View reviewed changes

nastasha-solomon reviewed Oct 30, 2023

View reviewed changes

semd approved these changes Oct 31, 2023

View reviewed changes

banderror approved these changes Oct 31, 2023

View reviewed changes

benironside and others added 5 commits October 31, 2023 09:51

Update docs/release-notes/8.11.asciidoc

d5a094f

Co-authored-by: Nastasha Solomon <[email protected]>

Update docs/release-notes/8.11.asciidoc

88208f8

Co-authored-by: Nastasha Solomon <[email protected]>

Update docs/release-notes/8.11.asciidoc

5b1b1cc

Co-authored-by: Nastasha Solomon <[email protected]>

Update docs/release-notes/8.11.asciidoc

9b6dbbc

Co-authored-by: Nastasha Solomon <[email protected]>

Update docs/release-notes/8.11.asciidoc

5f91307

Co-authored-by: Nastasha Solomon <[email protected]>

benironside commented Nov 6, 2023

View reviewed changes

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

benironside added 2 commits November 5, 2023 16:26

Update docs/release-notes/8.11.asciidoc

d7cfee4

Update docs/release-notes/8.11.asciidoc

ddd4399

joepeeples reviewed Nov 6, 2023

View reviewed changes

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

nastasha-solomon and others added 4 commits November 6, 2023 11:53

Update docs/release-notes/8.11.asciidoc

ecde6a5

Co-authored-by: Joe Peeples <[email protected]>

Update docs/release-notes/8.11.asciidoc

6bac42e

Co-authored-by: Joe Peeples <[email protected]>

Update docs/release-notes/8.11.asciidoc

fd4806a

Co-authored-by: Joe Peeples <[email protected]>

Merge branch 'main' into 8.11-release-notes

4ee46a0

nastasha-solomon added 2 commits November 6, 2023 15:38

Adding known issues

f5d87c4

Moves Endpoint features to correct section

832d847

jmikell821 reviewed Nov 6, 2023

View reviewed changes

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

nastasha-solomon and others added 5 commits November 6, 2023 17:39

Update docs/release-notes/8.11.asciidoc

834d7a4

Co-authored-by: Janeen Mikell Roberts <[email protected]>

Update docs/release-notes/8.11.asciidoc

ea6a07a

Janeen's input

b46277b

Merge branch '8.11-release-notes' of github.com:elastic/security-docs…

728e1eb

… into 8.11-release-notes

Merge branch 'main' into 8.11-release-notes

718eaa4

dplumlee reviewed Nov 6, 2023

View reviewed changes

docs/release-notes/8.11.asciidoc Outdated Show resolved Hide resolved

benironside and others added 3 commits November 6, 2023 19:16

incorporates Davis' comment

e4d9994

Merge branch 'main' into 8.11-release-notes

979d032

Merge branch 'main' into 8.11-release-notes

2933c09

yctercero reviewed Nov 7, 2023

View reviewed changes

benironside merged commit d5eb310 into main Nov 7, 2023
1 check passed

mergify bot mentioned this pull request Nov 7, 2023

[8.11] 8.11 release notes (backport #4095) #4204

Merged

nastasha-solomon mentioned this pull request Nov 9, 2023

Entity Analytics release notes #4109

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

8.11 release notes #4095

8.11 release notes #4095

benironside commented Oct 24, 2023 •

edited

Loading

github-actions bot commented Oct 24, 2023

stephmilovic left a comment

nastasha-solomon left a comment

nastasha-solomon Oct 30, 2023

semd left a comment

banderror left a comment

banderror commented Nov 6, 2023

joepeeples left a comment

nastasha-solomon commented Nov 6, 2023

jmikell821 left a comment

dplumlee left a comment

yctercero Nov 7, 2023

yctercero left a comment

8.11 release notes #4095

8.11 release notes #4095

Conversation

benironside commented Oct 24, 2023 • edited Loading

github-actions bot commented Oct 24, 2023

stephmilovic left a comment

Choose a reason for hiding this comment

nastasha-solomon left a comment

Choose a reason for hiding this comment

nastasha-solomon Oct 30, 2023

Choose a reason for hiding this comment

semd left a comment

Choose a reason for hiding this comment

banderror left a comment

Choose a reason for hiding this comment

banderror commented Nov 6, 2023

joepeeples left a comment

Choose a reason for hiding this comment

nastasha-solomon commented Nov 6, 2023

jmikell821 left a comment

Choose a reason for hiding this comment

dplumlee left a comment

Choose a reason for hiding this comment

yctercero Nov 7, 2023

Choose a reason for hiding this comment

yctercero left a comment

Choose a reason for hiding this comment

benironside commented Oct 24, 2023 •

edited

Loading