Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[UA] Make the entire row in the deprecations table clickable #212081

Closed

Conversation

SoniaSanzV
Copy link
Contributor

Fixes #123469

Summary

In the deprecations table, the icon that we show in the resolution column can be confused with a call to action by some users. To avoid them to click it with no result, this PR changes the behavior of the table so clicking in anywhere in the row opens the resolution flyout. As agreed with @jovana-andjelkovic, I left the original link in the Issue column.

How to test

  • Follow the instructions in https://github.com/elastic/kibana-team/issues/1521. Use the data folder starting with [01] because it has the largest variety of deprecations.
  • Go to "Stack Management > Upgrade Assistant"
    • Navigate to "Elasticsearch deprecation issues"
      • Click in the row outside of the issue link to verify that the flyout opens.
    • Navigate to "Kibana deprecation issues"
      • Click in the row outside of the issue link to verify that the flyout opens.

Demo

Video
UA-click-row.mov

@SoniaSanzV SoniaSanzV added Team:Kibana Management Dev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more release_note:skip Skip the PR/issue when compiling release notes Feature:Upgrade Assistant backport:version Backport to applied version labels v8.18.0 v8.19.0 labels Feb 21, 2025
@SoniaSanzV SoniaSanzV requested a review from a team February 21, 2025 13:45
@SoniaSanzV SoniaSanzV self-assigned this Feb 21, 2025
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-management (Team:Kibana Management)

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
upgradeAssistant 207.6KB 208.1KB +605.0B

cc @SoniaSanzV

Copy link
Member

@sabarasaba sabarasaba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice work @SoniaSanzV! I was having a look at the code and I think we could maybe improve it a bit and reduce the amount of effect hooks we are using by doing a small refactor of the existing code and I wanted to know what you think about it:

Currently in es_deprecations_table we do something like:

{visibleDeprecations.map((deprecation, index) => {
  return (
    <EuiTableRow data-test-subj="deprecationTableRow" key={`deprecation-row-${index}`}>
      {renderTableRowCells(deprecation, mlUpgradeModeEnabled)}
    </EuiTableRow>
  );
})}

This is a bit misleading because the renderTableRowCells actually renders rows which contain cells. So my idea would be to first rename that function to renderTableRow and then to move the EuiTableRow definition to be inside the row definition for each deprecation type and attach the click event handler to it for opening the flyout. This would make it so that each row is responsible for managing the state of their flyouts without leaking the logic outside of it. So for example the deprecation_types/indices/table_row might look something like:

<EuiTableRow
  data-test-subj="deprecationTableRow"
  key={`deprecation-row-${index}`}
  onClick={() => setShowFlyout(true)}
>
  {rowFieldNames.map((field: DeprecationTableColumns) => {
    return (
      <EuiTableRowCell
        key={field}
        truncateText={false}
        data-test-subj={`reindexTableCell-${field}`}
      >
        <EsDeprecationsTableCells
          fieldName={field}
          deprecation={deprecation}
          resolutionTableCell={<ReindexResolutionCell />}
        />
      </EuiTableRowCell>
    );
  })}
</EuiTableRow>

With this we would prevent tight coupling between each row type and the parent table state and also make it easier to maintain given that if we add a new row type later we would need to remember to add this custom logic for handling flyouts

kibanamachine and others added 15 commits March 4, 2025 10:53
…c#212037) (elastic#212059)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Feature Flags] Remove `apm.captureError` on slow setup
(elastic#212037)](elastic#212037)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Alejandro Fernández
Haro","email":"alejandro.haro@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T12:20:37Z","message":"[Feature
Flags] Remove `apm.captureError` on slow setup
(elastic#212037)","sha":"f4d3652832c557f68890aca68df12003de7a1652","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Core","technical
debt","release_note:skip","backport:prev-major","v9.1.0"],"title":"[Feature
Flags] Remove `apm.captureError` on slow
setup","number":212037,"url":"https://github.com/elastic/kibana/pull/212037","mergeCommit":{"message":"[Feature
Flags] Remove `apm.captureError` on slow setup
(elastic#212037)","sha":"f4d3652832c557f68890aca68df12003de7a1652"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212037","number":212037,"mergeCommit":{"message":"[Feature
Flags] Remove `apm.captureError` on slow setup
(elastic#212037)","sha":"f4d3652832c557f68890aca68df12003de7a1652"}}]}]
BACKPORT-->

Co-authored-by: Alejandro Fernández Haro <alejandro.haro@elastic.co>
…a new synonyms set (elastic#211002) (elastic#212063)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Synonyms UI][Fix] Prevents overwrite by mistake when creating a new
synonyms set (elastic#211002)](elastic#211002)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Efe Gürkan
YALAMAN","email":"efeguerkan.yalaman@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T12:34:19Z","message":"[Synonyms
UI][Fix] Prevents overwrite by mistake when creating a new synonyms set
(elastic#211002)\n\n##
Summary\n\n\n\nhttps://github.com/user-attachments/assets/606afc05-0edf-4f5c-8723-4a444c859ed5\n\nAdds
a check to prevent accidental overwrite when creating a new\nsynonyms
set.\n\n<img width=\"591\" alt=\"Screenshot 2025-02-17 at 12 29
03\"\nsrc=\"https://github.com/user-attachments/assets/fbfe542b-623e-49bf-b2e6-c8303e404789\"\n/>\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by:
Liam Thompson
<32779855+leemthompo@users.noreply.github.com>","sha":"f75111a4176c3d65a41a2ea63c0139428a75f87c","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Search","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Synonyms
UI][Fix] Prevents overwrite by mistake when creating a new synonyms
set","number":211002,"url":"https://github.com/elastic/kibana/pull/211002","mergeCommit":{"message":"[Synonyms
UI][Fix] Prevents overwrite by mistake when creating a new synonyms set
(elastic#211002)\n\n##
Summary\n\n\n\nhttps://github.com/user-attachments/assets/606afc05-0edf-4f5c-8723-4a444c859ed5\n\nAdds
a check to prevent accidental overwrite when creating a new\nsynonyms
set.\n\n<img width=\"591\" alt=\"Screenshot 2025-02-17 at 12 29
03\"\nsrc=\"https://github.com/user-attachments/assets/fbfe542b-623e-49bf-b2e6-c8303e404789\"\n/>\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by:
Liam Thompson
<32779855+leemthompo@users.noreply.github.com>","sha":"f75111a4176c3d65a41a2ea63c0139428a75f87c"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211002","number":211002,"mergeCommit":{"message":"[Synonyms
UI][Fix] Prevents overwrite by mistake when creating a new synonyms set
(elastic#211002)\n\n##
Summary\n\n\n\nhttps://github.com/user-attachments/assets/606afc05-0edf-4f5c-8723-4a444c859ed5\n\nAdds
a check to prevent accidental overwrite when creating a new\nsynonyms
set.\n\n<img width=\"591\" alt=\"Screenshot 2025-02-17 at 12 29
03\"\nsrc=\"https://github.com/user-attachments/assets/fbfe542b-623e-49bf-b2e6-c8303e404789\"\n/>\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [ ] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by:
Liam Thompson
<32779855+leemthompo@users.noreply.github.com>","sha":"f75111a4176c3d65a41a2ea63c0139428a75f87c"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Efe Gürkan YALAMAN <efeguerkan.yalaman@elastic.co>
…12009) (elastic#212070)

# Backport

This will backport the following commits from `main` to `8.x`:
- [add system message in copy conversation JSON payload
(elastic#212009)](elastic#212009)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Arturo
Lidueña","email":"arturo.liduena@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T12:48:15Z","message":"add
system message in copy conversation JSON payload (elastic#212009)\n\nCloses
elastic#212006\n## Problem\nDue to
elastic#209773 we no longer add\nthe
system message to the output from the \"Copy conversation\"
button.","sha":"4783925e567681d1d2f9410e18ffa24050e4b69a","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:Obs
AI Assistant","backport:version","v9.1.0","v8.19.0"],"title":"add system
message in copy conversation JSON
payload","number":212009,"url":"https://github.com/elastic/kibana/pull/212009","mergeCommit":{"message":"add
system message in copy conversation JSON payload (elastic#212009)\n\nCloses
elastic#212006\n## Problem\nDue to
elastic#209773 we no longer add\nthe
system message to the output from the \"Copy conversation\"
button.","sha":"4783925e567681d1d2f9410e18ffa24050e4b69a"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212009","number":212009,"mergeCommit":{"message":"add
system message in copy conversation JSON payload (elastic#212009)\n\nCloses
elastic#212006\n## Problem\nDue to
elastic#209773 we no longer add\nthe
system message to the output from the \"Copy conversation\"
button.","sha":"4783925e567681d1d2f9410e18ffa24050e4b69a"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Arturo Lidueña <arturo.liduena@elastic.co>
… tour. (elastic#210398) (elastic#212024)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution] [AI Assistant] Update copy of the citations tour.
(elastic#210398)](elastic#210398)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Kenneth
Kreindler","email":"42113355+KDKHD@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-21T09:03:53Z","message":"[Security
Solution] [AI Assistant] Update copy of the citations tour.
(elastic#210398)\n\n##
Summary\n\nAddresses\nhttps://github.com/elastic/security-docs/issues/6485#issuecomment-2639562221\n\nThis
PR updates the copy in the Citations and Anonymized values
tour\naccording to the figma linked in the issue. Furthermore, the PR
includes\nthe logic that disables the \"Show anonymized values\" and
\"Show\ncitations\" buttons in the assistant settings menu when the
conversation\ndoes not contain anonymized values or citations
respectivly.\n\n### How to test new copy is correct\n<img width=\"864\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/22bd2671-6d06-4e68-85f5-3c10d9974a4a\"\n/>\n\n\n-
Enable feature flag\n```yaml\n#
kibana.dev.yml\nxpack.securitySolution.enableExperimental:
['contentReferencesEnabled']\n```\n- Clear the
key\n`elasticAssistant.anonymizedValuesAndCitationsTourCompleted.v8.18`
from\nyour local storage if it exists.\n- Open Security assistant\n- Ask
the assistant a question about your alerts or a KB document,
the\nresponse should contain anonymized values or a citation.\n- The
tour with the new copy should appear (copy in screenshot above).\n*the
Anonymized values and citations will not appear if the knowledge\nbase
tour is currently open.\n\n### How to test assistant settings menu
changes:\n<img width=\"349\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/58e445d7-79c0-46ca-a245-bc2ab90eeb5d\"\n/>\n\n-
Enable feature flag\n```yaml\n#
kibana.dev.yml\nxpack.securitySolution.enableExperimental:
['contentReferencesEnabled']\n```\n- Open Security assistant\n- In a new
conversation, inside the settings menu, the \"Show anonymized\nvalues\"
and \"Show citations\" menu items should be disabled because
the\nconversation is empty and does not contain citations or
anonymized\nvalues.\n- Ask the assistant a question about a KB document
or Alert. The \"Show\ncitations\" menu item should become available if
the response contains\ncitations. The \"Show anonymized values\" menu
item will become available\nif the conversation contains replacements.
Hovering over the disabled\nmenu item will make a tooltip appear
explaining why it is disabled.\n*Sometimes the conversation will contain
replacements but the\nreplacements are not used in the messages. In that
case, the anonymized\nvalues menu item will not be disabled. This is a
known\n[issue](https://github.com/elastic/kibana/issues/208517).\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [X] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[X]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [X] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [X] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[X] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [X] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [X] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"b59712fa8cc5709cb36da6914c61823411b6c1fe","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Security
Generative
AI","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution] [AI Assistant] Update copy of the citations
tour.","number":210398,"url":"https://github.com/elastic/kibana/pull/210398","mergeCommit":{"message":"[Security
Solution] [AI Assistant] Update copy of the citations tour.
(elastic#210398)\n\n##
Summary\n\nAddresses\nhttps://github.com/elastic/security-docs/issues/6485#issuecomment-2639562221\n\nThis
PR updates the copy in the Citations and Anonymized values
tour\naccording to the figma linked in the issue. Furthermore, the PR
includes\nthe logic that disables the \"Show anonymized values\" and
\"Show\ncitations\" buttons in the assistant settings menu when the
conversation\ndoes not contain anonymized values or citations
respectivly.\n\n### How to test new copy is correct\n<img width=\"864\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/22bd2671-6d06-4e68-85f5-3c10d9974a4a\"\n/>\n\n\n-
Enable feature flag\n```yaml\n#
kibana.dev.yml\nxpack.securitySolution.enableExperimental:
['contentReferencesEnabled']\n```\n- Clear the
key\n`elasticAssistant.anonymizedValuesAndCitationsTourCompleted.v8.18`
from\nyour local storage if it exists.\n- Open Security assistant\n- Ask
the assistant a question about your alerts or a KB document,
the\nresponse should contain anonymized values or a citation.\n- The
tour with the new copy should appear (copy in screenshot above).\n*the
Anonymized values and citations will not appear if the knowledge\nbase
tour is currently open.\n\n### How to test assistant settings menu
changes:\n<img width=\"349\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/58e445d7-79c0-46ca-a245-bc2ab90eeb5d\"\n/>\n\n-
Enable feature flag\n```yaml\n#
kibana.dev.yml\nxpack.securitySolution.enableExperimental:
['contentReferencesEnabled']\n```\n- Open Security assistant\n- In a new
conversation, inside the settings menu, the \"Show anonymized\nvalues\"
and \"Show citations\" menu items should be disabled because
the\nconversation is empty and does not contain citations or
anonymized\nvalues.\n- Ask the assistant a question about a KB document
or Alert. The \"Show\ncitations\" menu item should become available if
the response contains\ncitations. The \"Show anonymized values\" menu
item will become available\nif the conversation contains replacements.
Hovering over the disabled\nmenu item will make a tooltip appear
explaining why it is disabled.\n*Sometimes the conversation will contain
replacements but the\nreplacements are not used in the messages. In that
case, the anonymized\nvalues menu item will not be disabled. This is a
known\n[issue](https://github.com/elastic/kibana/issues/208517).\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [X] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[X]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [X] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [X] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[X] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [X] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [X] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"b59712fa8cc5709cb36da6914c61823411b6c1fe"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/212018","number":212018,"state":"OPEN"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/210398","number":210398,"mergeCommit":{"message":"[Security
Solution] [AI Assistant] Update copy of the citations tour.
(elastic#210398)\n\n##
Summary\n\nAddresses\nhttps://github.com/elastic/security-docs/issues/6485#issuecomment-2639562221\n\nThis
PR updates the copy in the Citations and Anonymized values
tour\naccording to the figma linked in the issue. Furthermore, the PR
includes\nthe logic that disables the \"Show anonymized values\" and
\"Show\ncitations\" buttons in the assistant settings menu when the
conversation\ndoes not contain anonymized values or citations
respectivly.\n\n### How to test new copy is correct\n<img width=\"864\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/22bd2671-6d06-4e68-85f5-3c10d9974a4a\"\n/>\n\n\n-
Enable feature flag\n```yaml\n#
kibana.dev.yml\nxpack.securitySolution.enableExperimental:
['contentReferencesEnabled']\n```\n- Clear the
key\n`elasticAssistant.anonymizedValuesAndCitationsTourCompleted.v8.18`
from\nyour local storage if it exists.\n- Open Security assistant\n- Ask
the assistant a question about your alerts or a KB document,
the\nresponse should contain anonymized values or a citation.\n- The
tour with the new copy should appear (copy in screenshot above).\n*the
Anonymized values and citations will not appear if the knowledge\nbase
tour is currently open.\n\n### How to test assistant settings menu
changes:\n<img width=\"349\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/58e445d7-79c0-46ca-a245-bc2ab90eeb5d\"\n/>\n\n-
Enable feature flag\n```yaml\n#
kibana.dev.yml\nxpack.securitySolution.enableExperimental:
['contentReferencesEnabled']\n```\n- Open Security assistant\n- In a new
conversation, inside the settings menu, the \"Show anonymized\nvalues\"
and \"Show citations\" menu items should be disabled because
the\nconversation is empty and does not contain citations or
anonymized\nvalues.\n- Ask the assistant a question about a KB document
or Alert. The \"Show\ncitations\" menu item should become available if
the response contains\ncitations. The \"Show anonymized values\" menu
item will become available\nif the conversation contains replacements.
Hovering over the disabled\nmenu item will make a tooltip appear
explaining why it is disabled.\n*Sometimes the conversation will contain
replacements but the\nreplacements are not used in the messages. In that
case, the anonymized\nvalues menu item will not be disabled. This is a
known\n[issue](https://github.com/elastic/kibana/issues/208517).\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [X] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[X]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [X] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [X] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[X] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [X] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [X] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"b59712fa8cc5709cb36da6914c61823411b6c1fe"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
…2054) (elastic#212085)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Fleet] fix `prerelease:boolean` in package_service
(elastic#212054)](elastic#212054)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Julia
Bardi","email":"90178898+juliaElastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-21T13:51:21Z","message":"[Fleet]
fix `prerelease:boolean` in package_service (elastic#212054)\n\nUse `boolean`
instead of `false` in `getPackages` to support querying\nprerelease
packages.","sha":"dbfb433ec28a080879c26232c7a8ea516efd082f","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Fleet","backport:prev-major","v9.1.0"],"title":"[Fleet]
fix `prerelease:boolean` in
package_service","number":212054,"url":"https://github.com/elastic/kibana/pull/212054","mergeCommit":{"message":"[Fleet]
fix `prerelease:boolean` in package_service (elastic#212054)\n\nUse `boolean`
instead of `false` in `getPackages` to support querying\nprerelease
packages.","sha":"dbfb433ec28a080879c26232c7a8ea516efd082f"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212054","number":212054,"mergeCommit":{"message":"[Fleet]
fix `prerelease:boolean` in package_service (elastic#212054)\n\nUse `boolean`
instead of `false` in `getPackages` to support querying\nprerelease
packages.","sha":"dbfb433ec28a080879c26232c7a8ea516efd082f"}}]}]
BACKPORT-->

Co-authored-by: Julia Bardi <90178898+juliaElastic@users.noreply.github.com>
…ink service instead of hardcoded URLs (elastic#212051) (elastic#212101)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[ObsUX][APM][Profiling] Update documentation links to use doc link
service instead of hardcoded URLs
(elastic#212051)](elastic#212051)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Sergi
Romeu","email":"sergi.romeu@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T14:52:40Z","message":"[ObsUX][APM][Profiling]
Update documentation links to use doc link service instead of hardcoded
URLs (elastic#212051)\n\n## Summary\n\nCloses elastic#208895\n\nThis PR updates
documentation links to use the doc link service, to\navoid hardcoding
URLs","sha":"6a6f0e70b3e91162d30e2ad190d8dea5eb36c263","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","apm","backport:prev-minor","Team:obs-ux-infra_services","Feature:UniversalProfiling","v9.1.0"],"title":"[ObsUX][APM][Profiling]
Update documentation links to use doc link service instead of hardcoded
URLs
","number":212051,"url":"https://github.com/elastic/kibana/pull/212051","mergeCommit":{"message":"[ObsUX][APM][Profiling]
Update documentation links to use doc link service instead of hardcoded
URLs (elastic#212051)\n\n## Summary\n\nCloses elastic#208895\n\nThis PR updates
documentation links to use the doc link service, to\navoid hardcoding
URLs","sha":"6a6f0e70b3e91162d30e2ad190d8dea5eb36c263"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212051","number":212051,"mergeCommit":{"message":"[ObsUX][APM][Profiling]
Update documentation links to use doc link service instead of hardcoded
URLs (elastic#212051)\n\n## Summary\n\nCloses elastic#208895\n\nThis PR updates
documentation links to use the doc link service, to\navoid hardcoding
URLs","sha":"6a6f0e70b3e91162d30e2ad190d8dea5eb36c263"}}]}] BACKPORT-->
…lastic#212102)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Dashboard Navigation] Swap SASS for Emotion
(elastic#211124)](elastic#211124)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Hannah
Mudge","email":"Heenawter@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-21T15:07:23Z","message":"[Dashboard
Navigation] Swap SASS for Emotion (elastic#211124)\n\nPart of
https://github.com/elastic/kibana/issues/207852\n\n## Summary\n\nThis PR
migrates all `*.scss` files in the Links plugin to Emotion.\nTesting
should simply verify that this PR does not introduce any
style\nchanges.\n\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenario\n- [x] The PR
description includes the appropriate Release Notes section,\nand the
correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nAny risks associated with this PR are purely cosmetic,
since it contains\nexclusively style-related
changes.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"85f4f4d5b4bdd2a91f1138cd5f660c88d729a3c8","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Presentation","loe:small","release_note:skip","impact:high","Project:Dashboard
Navigation","backport:version","v9.1.0","v8.19.0"],"title":"[Dashboard
Navigation] Swap SASS for
Emotion","number":211124,"url":"https://github.com/elastic/kibana/pull/211124","mergeCommit":{"message":"[Dashboard
Navigation] Swap SASS for Emotion (elastic#211124)\n\nPart of
https://github.com/elastic/kibana/issues/207852\n\n## Summary\n\nThis PR
migrates all `*.scss` files in the Links plugin to Emotion.\nTesting
should simply verify that this PR does not introduce any
style\nchanges.\n\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenario\n- [x] The PR
description includes the appropriate Release Notes section,\nand the
correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nAny risks associated with this PR are purely cosmetic,
since it contains\nexclusively style-related
changes.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"85f4f4d5b4bdd2a91f1138cd5f660c88d729a3c8"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211124","number":211124,"mergeCommit":{"message":"[Dashboard
Navigation] Swap SASS for Emotion (elastic#211124)\n\nPart of
https://github.com/elastic/kibana/issues/207852\n\n## Summary\n\nThis PR
migrates all `*.scss` files in the Links plugin to Emotion.\nTesting
should simply verify that this PR does not introduce any
style\nchanges.\n\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenario\n- [x] The PR
description includes the appropriate Release Notes section,\nand the
correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nAny risks associated with this PR are purely cosmetic,
since it contains\nexclusively style-related
changes.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"85f4f4d5b4bdd2a91f1138cd5f660c88d729a3c8"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Hannah Mudge <Heenawter@users.noreply.github.com>
# Backport

This will backport the following commits from `main` to `8.x`:
- [SKA: Relocate core-test-helpers
(elastic#212029)](elastic#212029)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Gerard
Soldevila","email":"gerard.soldevila@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T13:38:38Z","message":"SKA:
Relocate core-test-helpers (elastic#212029)\n\n## Summary\n\nThese where the
only packages under `src/dev/packages`.\nThe goal long term is to
refactor the code under `src/dev` and to\nmigrate it to one (or
multiple) packages.\nThus, we're moving them to
`src/core/test-helpers/`, which already\nexists and contains a bunch of
test-helpers.\n\n#### 2 packages(s) are going to be relocated:\n\n| Id |
Target folder |\n| -- | ------------- |\n|
`@kbn/core-test-helpers-kbn-server`
|\n`src/core/test-helpers/kbn-server` |\n|
`@kbn/core-test-helpers-model-versions`
|\n`src/core/test-helpers/model-versions` |\n\n\n<details
>\n<summary>Updated
references</summary>\n\n```\n./.github/codeql/codeql-config.yml\n./package.json\n./packages/kbn-ts-projects/config-paths.json\n./src/core/system/tsconfig.type_check.json\n./src/core/test-helpers/kbn-server/jest.config.js\n./src/core/test-helpers/model-versions/jest.config.js\n./src/dev/tsconfig.type_check.json\n./src/platform/packages/private/kbn-repo-packages/package-map.json\n./src/plugins/kibana_usage_collection/tsconfig.type_check.json\n./src/plugins/usage_collection/tsconfig.type_check.json\n./tsconfig.base.json\n./tsconfig.base.type_check.json\n./tsconfig.refs.json\n./x-pack/platform/plugins/shared/fleet/tsconfig.type_check.json\n./x-pack/platform/plugins/shared/spaces/tsconfig.type_check.json\n./x-pack/plugins/actions/tsconfig.type_check.json\n./x-pack/plugins/alerting/tsconfig.type_check.json\n./x-pack/plugins/task_manager/tsconfig.type_check.json\n./yarn.lock\n.github/CODEOWNERS\n```\n\n</details><details
>\n<summary>Updated relative
paths</summary>\n\n```\nsrc/core/test-helpers/kbn-server/jest.config.js:12\nsrc/core/test-helpers/kbn-server/tsconfig.json:2\nsrc/core/test-helpers/model-versions/jest.config.js:12\nsrc/core/test-helpers/model-versions/tsconfig.json:2\n```\n\n</details>","sha":"cff1747a76162e81e1baffb42840915ab7f57ed9","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Core","release_note:skip","v9.0.0","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"SKA:
Relocate
core-test-helpers","number":212029,"url":"https://github.com/elastic/kibana/pull/212029","mergeCommit":{"message":"SKA:
Relocate core-test-helpers (elastic#212029)\n\n## Summary\n\nThese where the
only packages under `src/dev/packages`.\nThe goal long term is to
refactor the code under `src/dev` and to\nmigrate it to one (or
multiple) packages.\nThus, we're moving them to
`src/core/test-helpers/`, which already\nexists and contains a bunch of
test-helpers.\n\n#### 2 packages(s) are going to be relocated:\n\n| Id |
Target folder |\n| -- | ------------- |\n|
`@kbn/core-test-helpers-kbn-server`
|\n`src/core/test-helpers/kbn-server` |\n|
`@kbn/core-test-helpers-model-versions`
|\n`src/core/test-helpers/model-versions` |\n\n\n<details
>\n<summary>Updated
references</summary>\n\n```\n./.github/codeql/codeql-config.yml\n./package.json\n./packages/kbn-ts-projects/config-paths.json\n./src/core/system/tsconfig.type_check.json\n./src/core/test-helpers/kbn-server/jest.config.js\n./src/core/test-helpers/model-versions/jest.config.js\n./src/dev/tsconfig.type_check.json\n./src/platform/packages/private/kbn-repo-packages/package-map.json\n./src/plugins/kibana_usage_collection/tsconfig.type_check.json\n./src/plugins/usage_collection/tsconfig.type_check.json\n./tsconfig.base.json\n./tsconfig.base.type_check.json\n./tsconfig.refs.json\n./x-pack/platform/plugins/shared/fleet/tsconfig.type_check.json\n./x-pack/platform/plugins/shared/spaces/tsconfig.type_check.json\n./x-pack/plugins/actions/tsconfig.type_check.json\n./x-pack/plugins/alerting/tsconfig.type_check.json\n./x-pack/plugins/task_manager/tsconfig.type_check.json\n./yarn.lock\n.github/CODEOWNERS\n```\n\n</details><details
>\n<summary>Updated relative
paths</summary>\n\n```\nsrc/core/test-helpers/kbn-server/jest.config.js:12\nsrc/core/test-helpers/kbn-server/tsconfig.json:2\nsrc/core/test-helpers/model-versions/jest.config.js:12\nsrc/core/test-helpers/model-versions/tsconfig.json:2\n```\n\n</details>","sha":"cff1747a76162e81e1baffb42840915ab7f57ed9"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/212080","number":212080,"state":"OPEN"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212029","number":212029,"mergeCommit":{"message":"SKA:
Relocate core-test-helpers (elastic#212029)\n\n## Summary\n\nThese where the
only packages under `src/dev/packages`.\nThe goal long term is to
refactor the code under `src/dev` and to\nmigrate it to one (or
multiple) packages.\nThus, we're moving them to
`src/core/test-helpers/`, which already\nexists and contains a bunch of
test-helpers.\n\n#### 2 packages(s) are going to be relocated:\n\n| Id |
Target folder |\n| -- | ------------- |\n|
`@kbn/core-test-helpers-kbn-server`
|\n`src/core/test-helpers/kbn-server` |\n|
`@kbn/core-test-helpers-model-versions`
|\n`src/core/test-helpers/model-versions` |\n\n\n<details
>\n<summary>Updated
references</summary>\n\n```\n./.github/codeql/codeql-config.yml\n./package.json\n./packages/kbn-ts-projects/config-paths.json\n./src/core/system/tsconfig.type_check.json\n./src/core/test-helpers/kbn-server/jest.config.js\n./src/core/test-helpers/model-versions/jest.config.js\n./src/dev/tsconfig.type_check.json\n./src/platform/packages/private/kbn-repo-packages/package-map.json\n./src/plugins/kibana_usage_collection/tsconfig.type_check.json\n./src/plugins/usage_collection/tsconfig.type_check.json\n./tsconfig.base.json\n./tsconfig.base.type_check.json\n./tsconfig.refs.json\n./x-pack/platform/plugins/shared/fleet/tsconfig.type_check.json\n./x-pack/platform/plugins/shared/spaces/tsconfig.type_check.json\n./x-pack/plugins/actions/tsconfig.type_check.json\n./x-pack/plugins/alerting/tsconfig.type_check.json\n./x-pack/plugins/task_manager/tsconfig.type_check.json\n./yarn.lock\n.github/CODEOWNERS\n```\n\n</details><details
>\n<summary>Updated relative
paths</summary>\n\n```\nsrc/core/test-helpers/kbn-server/jest.config.js:12\nsrc/core/test-helpers/kbn-server/tsconfig.json:2\nsrc/core/test-helpers/model-versions/jest.config.js:12\nsrc/core/test-helpers/model-versions/tsconfig.json:2\n```\n\n</details>","sha":"cff1747a76162e81e1baffb42840915ab7f57ed9"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
…erless mode (elastic#211670) (elastic#212111)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Synthtrace] Improve URL discovery when running locally in Serverless
mode (elastic#211670)](elastic#211670)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Abdul Wahab
Zahid","email":"awahab07@yahoo.com"},"sourceCommit":{"committedDate":"2025-02-21T15:58:07Z","message":"[Synthtrace]
Improve URL discovery when running locally in Serverless mode
(elastic#211670)\n\n## Summary\n\nThis PR improves how **Synthtrace** resolves
the Kibana URL when only\n`--target` (Elasticsearch) is provided or when
neither `--target` nor\n`--kibana` is specified. The CLI now attempts to
**automatically\ndiscover** the appropriate URLs based on the provided
arguments.\n\nSome adjustments were made to improve this discovery
process, especially\nwhen running **locally in Serverless mode**, where
Kibana may be using\n`http`, while Elasticsearch (ES) is on `https`.
Additionally,\nself-signed certificates do not work with the IP address
`127.0.0.1`, so\nthis PR defaults to `localhost` and warns the user if
`127.0.0.1` is\ndetected in Serverless mode.\n\n### **Improvements**\n-
If either of `--target` or `--kibana` or neither provided, the
CLI\nattempts to **discovers the URLs** dynamically now in both Stateful
and\nServerless.\n- Defaults to `localhost` instead of `127.0.0.1` to
avoid SSL\ncertificate issues.\n- Provides a **clear error message and
hint** when Kibana and ES use\ndifferent protocols (http vs https) and
either or both are unreachable.\n\n### **Expected Behavior After This
PR**\nThese commands should now work **seamlessly** in both **local
Stateful**\nand **Serverless** modes:\n\n```sh\n✗ node
scripts/synthtrace simple_logs\n```\n\nFor **Serverless mode**, these
also work:\n\n```sh\n✗ node scripts/synthtrace simple_logs
--kibana=http://elastic_serverless:changeme@localhost:5601\n```\n\n```sh\n✗
node scripts/synthtrace simple_logs
--target=https://elastic_serverless:changeme@localhost:9200
--kibana=http://elastic_serverless:changeme@localhost:5601\n```\n\n###
**(Side Note) Serverless Kibana with SSL Disabled**\nHowever, the
following command will **fail** with an error message if\nKibana is
running without SSL, while Elasticsearch is using `https`:\n\n```sh\n✗
node scripts/synthtrace simple_logs
--target=https://elastic_serverless:changeme@localhost:9200\n```\n\n####
**Error Output:**\n```sh\nLoading scenario from
kibana/packages/kbn-apm-synthtrace/src/scenarios/simple_logs.ts\nError:
Could not connect to Kibana. request to
https://elastic_serverless:changeme@localhost:5601/ failed, reason:
write EPROTO 400882F501000000:error:0A00010B:SSL
routines:ssl3_get_record:wrong version
number:../deps/openssl/openssl/ssl/record/ssl3_record.c:355:\n\nIf your
Kibana URL differs, consider using the '--kibana' parameter to customize
it.\n```\n\n**Solution:** \nIf you must have to provide `--target` (non
defaults), also provide\n`--kibana` or start Kibana with SSL
enabled.\n```sh\n✗ yarn start --serverless=oblt
--ssl\n```","sha":"cb71dff86e042a088aa13cc11f90b0673438b365","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","ci:project-deploy-observability","Team:obs-ux-infra_services","backport:version","v9.1.0","v8.19.0"],"title":"[Synthtrace]
Improve URL discovery when running locally in Serverless
mode","number":211670,"url":"https://github.com/elastic/kibana/pull/211670","mergeCommit":{"message":"[Synthtrace]
Improve URL discovery when running locally in Serverless mode
(elastic#211670)\n\n## Summary\n\nThis PR improves how **Synthtrace** resolves
the Kibana URL when only\n`--target` (Elasticsearch) is provided or when
neither `--target` nor\n`--kibana` is specified. The CLI now attempts to
**automatically\ndiscover** the appropriate URLs based on the provided
arguments.\n\nSome adjustments were made to improve this discovery
process, especially\nwhen running **locally in Serverless mode**, where
Kibana may be using\n`http`, while Elasticsearch (ES) is on `https`.
Additionally,\nself-signed certificates do not work with the IP address
`127.0.0.1`, so\nthis PR defaults to `localhost` and warns the user if
`127.0.0.1` is\ndetected in Serverless mode.\n\n### **Improvements**\n-
If either of `--target` or `--kibana` or neither provided, the
CLI\nattempts to **discovers the URLs** dynamically now in both Stateful
and\nServerless.\n- Defaults to `localhost` instead of `127.0.0.1` to
avoid SSL\ncertificate issues.\n- Provides a **clear error message and
hint** when Kibana and ES use\ndifferent protocols (http vs https) and
either or both are unreachable.\n\n### **Expected Behavior After This
PR**\nThese commands should now work **seamlessly** in both **local
Stateful**\nand **Serverless** modes:\n\n```sh\n✗ node
scripts/synthtrace simple_logs\n```\n\nFor **Serverless mode**, these
also work:\n\n```sh\n✗ node scripts/synthtrace simple_logs
--kibana=http://elastic_serverless:changeme@localhost:5601\n```\n\n```sh\n✗
node scripts/synthtrace simple_logs
--target=https://elastic_serverless:changeme@localhost:9200
--kibana=http://elastic_serverless:changeme@localhost:5601\n```\n\n###
**(Side Note) Serverless Kibana with SSL Disabled**\nHowever, the
following command will **fail** with an error message if\nKibana is
running without SSL, while Elasticsearch is using `https`:\n\n```sh\n✗
node scripts/synthtrace simple_logs
--target=https://elastic_serverless:changeme@localhost:9200\n```\n\n####
**Error Output:**\n```sh\nLoading scenario from
kibana/packages/kbn-apm-synthtrace/src/scenarios/simple_logs.ts\nError:
Could not connect to Kibana. request to
https://elastic_serverless:changeme@localhost:5601/ failed, reason:
write EPROTO 400882F501000000:error:0A00010B:SSL
routines:ssl3_get_record:wrong version
number:../deps/openssl/openssl/ssl/record/ssl3_record.c:355:\n\nIf your
Kibana URL differs, consider using the '--kibana' parameter to customize
it.\n```\n\n**Solution:** \nIf you must have to provide `--target` (non
defaults), also provide\n`--kibana` or start Kibana with SSL
enabled.\n```sh\n✗ yarn start --serverless=oblt
--ssl\n```","sha":"cb71dff86e042a088aa13cc11f90b0673438b365"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211670","number":211670,"mergeCommit":{"message":"[Synthtrace]
Improve URL discovery when running locally in Serverless mode
(elastic#211670)\n\n## Summary\n\nThis PR improves how **Synthtrace** resolves
the Kibana URL when only\n`--target` (Elasticsearch) is provided or when
neither `--target` nor\n`--kibana` is specified. The CLI now attempts to
**automatically\ndiscover** the appropriate URLs based on the provided
arguments.\n\nSome adjustments were made to improve this discovery
process, especially\nwhen running **locally in Serverless mode**, where
Kibana may be using\n`http`, while Elasticsearch (ES) is on `https`.
Additionally,\nself-signed certificates do not work with the IP address
`127.0.0.1`, so\nthis PR defaults to `localhost` and warns the user if
`127.0.0.1` is\ndetected in Serverless mode.\n\n### **Improvements**\n-
If either of `--target` or `--kibana` or neither provided, the
CLI\nattempts to **discovers the URLs** dynamically now in both Stateful
and\nServerless.\n- Defaults to `localhost` instead of `127.0.0.1` to
avoid SSL\ncertificate issues.\n- Provides a **clear error message and
hint** when Kibana and ES use\ndifferent protocols (http vs https) and
either or both are unreachable.\n\n### **Expected Behavior After This
PR**\nThese commands should now work **seamlessly** in both **local
Stateful**\nand **Serverless** modes:\n\n```sh\n✗ node
scripts/synthtrace simple_logs\n```\n\nFor **Serverless mode**, these
also work:\n\n```sh\n✗ node scripts/synthtrace simple_logs
--kibana=http://elastic_serverless:changeme@localhost:5601\n```\n\n```sh\n✗
node scripts/synthtrace simple_logs
--target=https://elastic_serverless:changeme@localhost:9200
--kibana=http://elastic_serverless:changeme@localhost:5601\n```\n\n###
**(Side Note) Serverless Kibana with SSL Disabled**\nHowever, the
following command will **fail** with an error message if\nKibana is
running without SSL, while Elasticsearch is using `https`:\n\n```sh\n✗
node scripts/synthtrace simple_logs
--target=https://elastic_serverless:changeme@localhost:9200\n```\n\n####
**Error Output:**\n```sh\nLoading scenario from
kibana/packages/kbn-apm-synthtrace/src/scenarios/simple_logs.ts\nError:
Could not connect to Kibana. request to
https://elastic_serverless:changeme@localhost:5601/ failed, reason:
write EPROTO 400882F501000000:error:0A00010B:SSL
routines:ssl3_get_record:wrong version
number:../deps/openssl/openssl/ssl/record/ssl3_record.c:355:\n\nIf your
Kibana URL differs, consider using the '--kibana' parameter to customize
it.\n```\n\n**Solution:** \nIf you must have to provide `--target` (non
defaults), also provide\n`--kibana` or start Kibana with SSL
enabled.\n```sh\n✗ yarn start --serverless=oblt
--ssl\n```","sha":"cb71dff86e042a088aa13cc11f90b0673438b365"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Abdul Wahab Zahid <awahab07@yahoo.com>
…#212072) (elastic#212108)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[scout] disable reporter for config validation command
(elastic#212072)](elastic#212072)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Dzmitry
Lemechko","email":"dzmitry.lemechko@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T15:42:32Z","message":"[scout]
disable reporter for config validation command (elastic#212072)\n\n##
Summary\n\nIn elastic#211918 I added config validation check to skip run if
there are no\ntests in playwright config.\n\nIt turned out that
Playwright init reporters even when `--list` command\nis passed and no
tests are executed, that lead to Scout reports being\nloaded and then
causing reporter error when the other command runs the\ntests:\n\n```\n
proc [playwright] info Calling save with destination:
/Users/dmle/github/kibana/.scout/reports/scout-playwright-9518363d47816953\n
proc [playwright] ERROR Error: Save destination path
'/Users/dmle/github/kibana/.scout/reports/scout-playwright-9518363d47816953'
already exists\n proc [playwright] at ScoutEventsReport.save
(/Users/dmle/github/kibana/packages/kbn-scout-reporting/src/reporting/report/events/report.ts:56:13)\n
proc [playwright] at ScoutPlaywrightReporter.onEnd
(/Users/dmle/github/kibana/packages/kbn-scout-reporting/src/reporting/playwright/events/playwright_reporter.ts:277:19)\n
proc [playwright] at ReporterV2Wrapper.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/reporterV2.js:91:165)\n
proc [playwright] at
/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:71:117\n
proc [playwright] at wrapAsync
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:112:18)\n
proc [playwright] at Multiplexer.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:69:31)\n
proc [playwright] at InternalReporter.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/internalReporter.js:77:12)\n
proc [playwright] at finishTaskRun
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/tasks.js:90:26)\n
proc [playwright] at runTasks
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/tasks.js:73:10)\n
proc [playwright] at Runner.runAllTests
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/runner.js:72:20)\n
proc [playwright] at runTests
(/Users/dmle/github/kibana/node_modules/playwright/lib/program.js:211:18)\n
proc [playwright] at t.<anonymous>
(/Users/dmle/github/kibana/node_modules/playwright/lib/program.js:54:7)\n```\n\nThe
simplest solution is to explicitly disable Scout reporter for
config\nvalidation
command.","sha":"f5a1ead8cf053168cd94fdc45facaca8f2dbc35a","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:QA","release_note:skip","v9.0.0","backport:version","test:scout","v9.1.0","v8.19.0"],"title":"[scout]
disable reporter for config validation
command","number":212072,"url":"https://github.com/elastic/kibana/pull/212072","mergeCommit":{"message":"[scout]
disable reporter for config validation command (elastic#212072)\n\n##
Summary\n\nIn elastic#211918 I added config validation check to skip run if
there are no\ntests in playwright config.\n\nIt turned out that
Playwright init reporters even when `--list` command\nis passed and no
tests are executed, that lead to Scout reports being\nloaded and then
causing reporter error when the other command runs the\ntests:\n\n```\n
proc [playwright] info Calling save with destination:
/Users/dmle/github/kibana/.scout/reports/scout-playwright-9518363d47816953\n
proc [playwright] ERROR Error: Save destination path
'/Users/dmle/github/kibana/.scout/reports/scout-playwright-9518363d47816953'
already exists\n proc [playwright] at ScoutEventsReport.save
(/Users/dmle/github/kibana/packages/kbn-scout-reporting/src/reporting/report/events/report.ts:56:13)\n
proc [playwright] at ScoutPlaywrightReporter.onEnd
(/Users/dmle/github/kibana/packages/kbn-scout-reporting/src/reporting/playwright/events/playwright_reporter.ts:277:19)\n
proc [playwright] at ReporterV2Wrapper.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/reporterV2.js:91:165)\n
proc [playwright] at
/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:71:117\n
proc [playwright] at wrapAsync
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:112:18)\n
proc [playwright] at Multiplexer.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:69:31)\n
proc [playwright] at InternalReporter.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/internalReporter.js:77:12)\n
proc [playwright] at finishTaskRun
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/tasks.js:90:26)\n
proc [playwright] at runTasks
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/tasks.js:73:10)\n
proc [playwright] at Runner.runAllTests
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/runner.js:72:20)\n
proc [playwright] at runTests
(/Users/dmle/github/kibana/node_modules/playwright/lib/program.js:211:18)\n
proc [playwright] at t.<anonymous>
(/Users/dmle/github/kibana/node_modules/playwright/lib/program.js:54:7)\n```\n\nThe
simplest solution is to explicitly disable Scout reporter for
config\nvalidation
command.","sha":"f5a1ead8cf053168cd94fdc45facaca8f2dbc35a"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212072","number":212072,"mergeCommit":{"message":"[scout]
disable reporter for config validation command (elastic#212072)\n\n##
Summary\n\nIn elastic#211918 I added config validation check to skip run if
there are no\ntests in playwright config.\n\nIt turned out that
Playwright init reporters even when `--list` command\nis passed and no
tests are executed, that lead to Scout reports being\nloaded and then
causing reporter error when the other command runs the\ntests:\n\n```\n
proc [playwright] info Calling save with destination:
/Users/dmle/github/kibana/.scout/reports/scout-playwright-9518363d47816953\n
proc [playwright] ERROR Error: Save destination path
'/Users/dmle/github/kibana/.scout/reports/scout-playwright-9518363d47816953'
already exists\n proc [playwright] at ScoutEventsReport.save
(/Users/dmle/github/kibana/packages/kbn-scout-reporting/src/reporting/report/events/report.ts:56:13)\n
proc [playwright] at ScoutPlaywrightReporter.onEnd
(/Users/dmle/github/kibana/packages/kbn-scout-reporting/src/reporting/playwright/events/playwright_reporter.ts:277:19)\n
proc [playwright] at ReporterV2Wrapper.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/reporterV2.js:91:165)\n
proc [playwright] at
/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:71:117\n
proc [playwright] at wrapAsync
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:112:18)\n
proc [playwright] at Multiplexer.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/multiplexer.js:69:31)\n
proc [playwright] at InternalReporter.onEnd
(/Users/dmle/github/kibana/node_modules/playwright/lib/reporters/internalReporter.js:77:12)\n
proc [playwright] at finishTaskRun
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/tasks.js:90:26)\n
proc [playwright] at runTasks
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/tasks.js:73:10)\n
proc [playwright] at Runner.runAllTests
(/Users/dmle/github/kibana/node_modules/playwright/lib/runner/runner.js:72:20)\n
proc [playwright] at runTests
(/Users/dmle/github/kibana/node_modules/playwright/lib/program.js:211:18)\n
proc [playwright] at t.<anonymous>
(/Users/dmle/github/kibana/node_modules/playwright/lib/program.js:54:7)\n```\n\nThe
simplest solution is to explicitly disable Scout reporter for
config\nvalidation
command.","sha":"f5a1ead8cf053168cd94fdc45facaca8f2dbc35a"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Dzmitry Lemechko <dzmitry.lemechko@elastic.co>
…o 0801a43 (8.x) (elastic#212066)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.elastic.co/wolfi/chainguard-base | digest | `d74b1fd` ->
`0801a43` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoiOC54IiwibGFiZWxzIjpbIlRlYW06T3BlcmF0aW9ucyIsImJhY2twb3J0OnNraXAiLCJyZWxlYXNlX25vdGU6c2tpcCJdfQ==-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
…he Siem migrations (elastic#211202) (elastic#212118)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution] - Feat Add `Severity` and `risk_score` to the
Siem migrations
(elastic#211202)](elastic#211202)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Jatin
Kathuria","email":"jatin.kathuria@elastic.co"},"sourceCommit":{"committedDate":"2025-02-21T16:24:44Z","message":"[Security
Solution] - Feat Add `Severity` and `risk_score` to the Siem migrations
(elastic#211202)\n\n## Summary\n\nHandles below Features:\n-
https://github.com/elastic/security-team/issues/11837\n\n\nThis PR adds
`risk_score` and `severity` based on below 3 rules\n- `Rule Severity`
should be mapped to Splunk's `alert.severity`.\n- `Rule Severity` values
should be mapped as mentioned in below section\nMapping Elastic Security
Rule's Severity with Splunk's Severity\n\n> \n> |Splunk's Severity|
Elastic Rule Severity |\n> |---|---|\n> |1- Info|Low|\n> |2-Low|Low|\n>
|3-Medium|Medium|\n> |4-High|High|\n> |5-Critical|Critical|\n\n- Elastic
Security Rule's `Risk Score` derived from the `Severity` of\nthe Rulet
based on below
mapping(\n[Source](https://www.elastic.co/guide/en/security/current/rules-ui-create.html#rule-ui-basic-params)\n)\n\n\n![Image](https://github.com/user-attachments/assets/d88acd1f-9b73-467f-bf16-0dbecadec465)\n\n\n##
Desk
Testing\n\n\n[splunk_rules_test_severity.json](https://github.com/user-attachments/files/18825855/splunk_rules_test_severity.json)\n\n\n1.
Use the above attached test file which has the
`alert.severity`\nexported from Splunk.\n2. Check the Severity of the
translated rule should match the mapping\ngiven above. Expect results
like below :\n\n<img width=\"1474\" alt=\"Screenshot 2025-02-17 at 14 19
23\"\nsrc=\"https://github.com/user-attachments/assets/a8459c71-3208-480e-8049-05293a0a3d2a\"\n/>\n\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n\n\n### Identify
risks\n\nDoes this PR introduce any risks? For example, consider risks
like hard\nto test bugs, performance regression, potential of data
loss.\n\nDescribe the risk, its severity, and mitigation for each
identified\nrisk. Invite stakeholders and evaluate how to proceed before
merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"74ef9fcdee2086bf2c48a35c5c15fb0997fc41dd","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat
Hunting","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution] - Feat Add `Severity` and `risk_score` to the Siem
migrations","number":211202,"url":"https://github.com/elastic/kibana/pull/211202","mergeCommit":{"message":"[Security
Solution] - Feat Add `Severity` and `risk_score` to the Siem migrations
(elastic#211202)\n\n## Summary\n\nHandles below Features:\n-
https://github.com/elastic/security-team/issues/11837\n\n\nThis PR adds
`risk_score` and `severity` based on below 3 rules\n- `Rule Severity`
should be mapped to Splunk's `alert.severity`.\n- `Rule Severity` values
should be mapped as mentioned in below section\nMapping Elastic Security
Rule's Severity with Splunk's Severity\n\n> \n> |Splunk's Severity|
Elastic Rule Severity |\n> |---|---|\n> |1- Info|Low|\n> |2-Low|Low|\n>
|3-Medium|Medium|\n> |4-High|High|\n> |5-Critical|Critical|\n\n- Elastic
Security Rule's `Risk Score` derived from the `Severity` of\nthe Rulet
based on below
mapping(\n[Source](https://www.elastic.co/guide/en/security/current/rules-ui-create.html#rule-ui-basic-params)\n)\n\n\n![Image](https://github.com/user-attachments/assets/d88acd1f-9b73-467f-bf16-0dbecadec465)\n\n\n##
Desk
Testing\n\n\n[splunk_rules_test_severity.json](https://github.com/user-attachments/files/18825855/splunk_rules_test_severity.json)\n\n\n1.
Use the above attached test file which has the
`alert.severity`\nexported from Splunk.\n2. Check the Severity of the
translated rule should match the mapping\ngiven above. Expect results
like below :\n\n<img width=\"1474\" alt=\"Screenshot 2025-02-17 at 14 19
23\"\nsrc=\"https://github.com/user-attachments/assets/a8459c71-3208-480e-8049-05293a0a3d2a\"\n/>\n\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n\n\n### Identify
risks\n\nDoes this PR introduce any risks? For example, consider risks
like hard\nto test bugs, performance regression, potential of data
loss.\n\nDescribe the risk, its severity, and mitigation for each
identified\nrisk. Invite stakeholders and evaluate how to proceed before
merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"74ef9fcdee2086bf2c48a35c5c15fb0997fc41dd"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211202","number":211202,"mergeCommit":{"message":"[Security
Solution] - Feat Add `Severity` and `risk_score` to the Siem migrations
(elastic#211202)\n\n## Summary\n\nHandles below Features:\n-
https://github.com/elastic/security-team/issues/11837\n\n\nThis PR adds
`risk_score` and `severity` based on below 3 rules\n- `Rule Severity`
should be mapped to Splunk's `alert.severity`.\n- `Rule Severity` values
should be mapped as mentioned in below section\nMapping Elastic Security
Rule's Severity with Splunk's Severity\n\n> \n> |Splunk's Severity|
Elastic Rule Severity |\n> |---|---|\n> |1- Info|Low|\n> |2-Low|Low|\n>
|3-Medium|Medium|\n> |4-High|High|\n> |5-Critical|Critical|\n\n- Elastic
Security Rule's `Risk Score` derived from the `Severity` of\nthe Rulet
based on below
mapping(\n[Source](https://www.elastic.co/guide/en/security/current/rules-ui-create.html#rule-ui-basic-params)\n)\n\n\n![Image](https://github.com/user-attachments/assets/d88acd1f-9b73-467f-bf16-0dbecadec465)\n\n\n##
Desk
Testing\n\n\n[splunk_rules_test_severity.json](https://github.com/user-attachments/files/18825855/splunk_rules_test_severity.json)\n\n\n1.
Use the above attached test file which has the
`alert.severity`\nexported from Splunk.\n2. Check the Severity of the
translated rule should match the mapping\ngiven above. Expect results
like below :\n\n<img width=\"1474\" alt=\"Screenshot 2025-02-17 at 14 19
23\"\nsrc=\"https://github.com/user-attachments/assets/a8459c71-3208-480e-8049-05293a0a3d2a\"\n/>\n\n\n\n###
Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers
should verify this PR satisfies this list as well.\n\n- [x] Any text
added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n\n\n### Identify
risks\n\nDoes this PR introduce any risks? For example, consider risks
like hard\nto test bugs, performance regression, potential of data
loss.\n\nDescribe the risk, its severity, and mitigation for each
identified\nrisk. Invite stakeholders and evaluate how to proceed before
merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"74ef9fcdee2086bf2c48a35c5c15fb0997fc41dd"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Jatin Kathuria <jatin.kathuria@elastic.co>
This fixes a problem with the log view resolution when entering the log
settings page under certain conditions.
…astic#212105)

# Backport

This will backport the following commits from `main` to `8.x`:
- [Update dependency xstate to ^4.38.3 (main)
(elastic#211786)](elastic#211786)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"elastic-renovate-prod[bot]","email":"174716857+elastic-renovate-prod[bot]@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-21T15:14:28Z","message":"Update
dependency xstate to ^4.38.3 (main) (elastic#211786)\n\nThis PR contains the
following updates:\n\n| Package | Type | Update | Change
|\n|---|---|---|---|\n|\n[xstate](https://redirect.github.com/statelyai/xstate/tree/main/packages/core#readme)\n([source](https://redirect.github.com/statelyai/xstate))
| dependencies\n| patch | [`^4.38.2`
->\n`^4.38.3`](https://renovatebot.com/diffs/npm/xstate/4.38.2/4.38.3)
|\n\n---\n\n### Release Notes\n\n<details>\n<summary>statelyai/xstate
(xstate)</summary>\n\n###\n[`v4.38.3`](https://redirect.github.com/statelyai/xstate/releases/tag/xstate%404.38.3)\n\n[Compare\nSource](https://redirect.github.com/statelyai/xstate/compare/xstate@4.38.2...xstate@4.38.3)\n\n#####
Patch Changes\n\n-
[#&elastic#8203;4380](https://redirect.github.com/statelyai/xstate/pull/4380)\n[`e9e065822`](https://redirect.github.com/statelyai/xstate/commit/e9e06582215abedf118cf2165e635eccb8e44251)\nThanks
[@&elastic#8203;Andarist](https://redirect.github.com/Andarist)! - Fixed\nan
issue with `exit` actions sometimes being called twice when a
machine\nreaches its final state and leads its parent to stopping it at
the same\ntime.\n\n</details>\n\n---\n\n### Configuration\n\n📅
**Schedule**: Branch creation - At any time (no schedule
defined),\nAutomerge - At any time (no schedule defined).\n\n🚦
**Automerge**: Disabled by config. Please merge this manually once
you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted,
or you tick the\nrebase/retry checkbox.\n\n🔕 **Ignore**: Close this PR
and you won't be reminded about this update\nagain.\n\n---\n\n- [ ] If
you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR has
been generated by
[Renovate\nBot](https://redirect.github.com/renovatebot/renovate).\n\n\n\nCo-authored-by:
elastic-renovate-prod[bot]
<174716857+elastic-renovate-prod[bot]@users.noreply.github.com>","sha":"876959fb014c42c1b771e1aaec4a0d9227a6b40e","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:all-open","Team:obs-ux-logs","v9.1.0"],"title":"Update
dependency xstate to ^4.38.3
(main)","number":211786,"url":"https://github.com/elastic/kibana/pull/211786","mergeCommit":{"message":"Update
dependency xstate to ^4.38.3 (main) (elastic#211786)\n\nThis PR contains the
following updates:\n\n| Package | Type | Update | Change
|\n|---|---|---|---|\n|\n[xstate](https://redirect.github.com/statelyai/xstate/tree/main/packages/core#readme)\n([source](https://redirect.github.com/statelyai/xstate))
| dependencies\n| patch | [`^4.38.2`
->\n`^4.38.3`](https://renovatebot.com/diffs/npm/xstate/4.38.2/4.38.3)
|\n\n---\n\n### Release Notes\n\n<details>\n<summary>statelyai/xstate
(xstate)</summary>\n\n###\n[`v4.38.3`](https://redirect.github.com/statelyai/xstate/releases/tag/xstate%404.38.3)\n\n[Compare\nSource](https://redirect.github.com/statelyai/xstate/compare/xstate@4.38.2...xstate@4.38.3)\n\n#####
Patch Changes\n\n-
[#&elastic#8203;4380](https://redirect.github.com/statelyai/xstate/pull/4380)\n[`e9e065822`](https://redirect.github.com/statelyai/xstate/commit/e9e06582215abedf118cf2165e635eccb8e44251)\nThanks
[@&elastic#8203;Andarist](https://redirect.github.com/Andarist)! - Fixed\nan
issue with `exit` actions sometimes being called twice when a
machine\nreaches its final state and leads its parent to stopping it at
the same\ntime.\n\n</details>\n\n---\n\n### Configuration\n\n📅
**Schedule**: Branch creation - At any time (no schedule
defined),\nAutomerge - At any time (no schedule defined).\n\n🚦
**Automerge**: Disabled by config. Please merge this manually once
you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted,
or you tick the\nrebase/retry checkbox.\n\n🔕 **Ignore**: Close this PR
and you won't be reminded about this update\nagain.\n\n---\n\n- [ ] If
you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR has
been generated by
[Renovate\nBot](https://redirect.github.com/renovatebot/renovate).\n\n\n\nCo-authored-by:
elastic-renovate-prod[bot]
<174716857+elastic-renovate-prod[bot]@users.noreply.github.com>","sha":"876959fb014c42c1b771e1aaec4a0d9227a6b40e"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211786","number":211786,"mergeCommit":{"message":"Update
dependency xstate to ^4.38.3 (main) (elastic#211786)\n\nThis PR contains the
following updates:\n\n| Package | Type | Update | Change
|\n|---|---|---|---|\n|\n[xstate](https://redirect.github.com/statelyai/xstate/tree/main/packages/core#readme)\n([source](https://redirect.github.com/statelyai/xstate))
| dependencies\n| patch | [`^4.38.2`
->\n`^4.38.3`](https://renovatebot.com/diffs/npm/xstate/4.38.2/4.38.3)
|\n\n---\n\n### Release Notes\n\n<details>\n<summary>statelyai/xstate
(xstate)</summary>\n\n###\n[`v4.38.3`](https://redirect.github.com/statelyai/xstate/releases/tag/xstate%404.38.3)\n\n[Compare\nSource](https://redirect.github.com/statelyai/xstate/compare/xstate@4.38.2...xstate@4.38.3)\n\n#####
Patch Changes\n\n-
[#&elastic#8203;4380](https://redirect.github.com/statelyai/xstate/pull/4380)\n[`e9e065822`](https://redirect.github.com/statelyai/xstate/commit/e9e06582215abedf118cf2165e635eccb8e44251)\nThanks
[@&elastic#8203;Andarist](https://redirect.github.com/Andarist)! - Fixed\nan
issue with `exit` actions sometimes being called twice when a
machine\nreaches its final state and leads its parent to stopping it at
the same\ntime.\n\n</details>\n\n---\n\n### Configuration\n\n📅
**Schedule**: Branch creation - At any time (no schedule
defined),\nAutomerge - At any time (no schedule defined).\n\n🚦
**Automerge**: Disabled by config. Please merge this manually once
you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted,
or you tick the\nrebase/retry checkbox.\n\n🔕 **Ignore**: Close this PR
and you won't be reminded about this update\nagain.\n\n---\n\n- [ ] If
you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR has
been generated by
[Renovate\nBot](https://redirect.github.com/renovatebot/renovate).\n\n\n\nCo-authored-by:
elastic-renovate-prod[bot]
<174716857+elastic-renovate-prod[bot]@users.noreply.github.com>","sha":"876959fb014c42c1b771e1aaec4a0d9227a6b40e"}}]}]
BACKPORT-->

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Felix Stürmer <weltenwort@users.noreply.github.com>
kibanamachine and others added 22 commits March 4, 2025 10:54
…stic#209982) (elastic#212893)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Lens/SCSS] Delete and migrate `reference_lines.scss` file
(elastic#209982)](elastic#209982)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Maria
Iriarte","email":"106958839+mariairiartef@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-03T11:57:36Z","message":"[Lens/SCSS]
Delete and migrate `reference_lines.scss` file (elastic#209982)\n\n##
Summary\n\nPart of
https://github.com/elastic/kibana/issues/208908\n\nReplaces scss to
css-in-js.\n\n\n### Checklist\n\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by:
Marta Bondyra
<4283304+mbondyra@users.noreply.github.com>","sha":"3b3bbb1a856b1da89af72368895457d446721998","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["technical
debt","Team:Visualizations","release_note:skip","Feature:Lens","v9.0.0","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Lens/SCSS]
Delete and migrate `reference_lines.scss`
file","number":209982,"url":"https://github.com/elastic/kibana/pull/209982","mergeCommit":{"message":"[Lens/SCSS]
Delete and migrate `reference_lines.scss` file (elastic#209982)\n\n##
Summary\n\nPart of
https://github.com/elastic/kibana/issues/208908\n\nReplaces scss to
css-in-js.\n\n\n### Checklist\n\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by:
Marta Bondyra
<4283304+mbondyra@users.noreply.github.com>","sha":"3b3bbb1a856b1da89af72368895457d446721998"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/209982","number":209982,"mergeCommit":{"message":"[Lens/SCSS]
Delete and migrate `reference_lines.scss` file (elastic#209982)\n\n##
Summary\n\nPart of
https://github.com/elastic/kibana/issues/208908\n\nReplaces scss to
css-in-js.\n\n\n### Checklist\n\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by:
Marta Bondyra
<4283304+mbondyra@users.noreply.github.com>","sha":"3b3bbb1a856b1da89af72368895457d446721998"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Maria Iriarte <106958839+mariairiartef@users.noreply.github.com>
…was moved to a new directory (elastic#211154)

## Summary

The changes come from this file:
[link](https://github.com/elastic/kibana/pull/201909/files#diff-10ff1407f7bb645bcfc58de818ba5b0bb2f0c4c4d8f8ec08bb5ce5f3afcd7da7).

This file was relocated to a new directory, and the modifications
reflect what was present in the original branch.

These changes were missing in the backport PR created yesterday :
elastic#210839

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
…astic#210406) (elastic#212900)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[EDR Workflows][Investigation] Telemetry config watcher fix
(elastic#210406)](elastic#210406)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Gergő
Ábrahám","email":"gergo.abraham@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T12:31:00Z","message":"[EDR
Workflows][Investigation] Telemetry config watcher fix (elastic#210406)\n\n##
Summary\n\nTo update the `global_telemetry_config` flag in Defend
package policies,\nwe subscribe to the Telemetry plugin's `isOptedIn#
Backport

This will backport the following commits from `main` to `8.x`:
{{{{raw}}}} - [[EDR Workflows][Investigation] Telemetry config watcher
fix
(elastic#210406)](https://github.com/elastic/kibana/pull/210406){{{{/raw}}}}

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT observable during\nKibana's `start()` phase, and receive
the initial value immediately.\nThis feature is used for 'migrating'
existing package policies: after\nstack upgrade, when Kibana starts up,
this subscription mechanism makes\nsure that existing policies are
backfilled with the new field.\n\nBut not on cloud and serverless
instances.\n\nIt turned out, that while this works on local instances,
on cloud and\nserverless instances, at the very moment we receive the
value during\n`start()`, some mechanisms are not yet green, and this
resulted in\n`security_exception: missing authentication credentials for
REST\nrequest` when trying to read Saved Objects.\n\nAs subscribing
to`core.status.core# Backport

This will backport the following commits from `main` to `8.x`:
{{{{raw}}}} - [[EDR Workflows][Investigation] Telemetry config watcher
fix
(elastic#210406)](https://github.com/elastic/kibana/pull/210406){{{{/raw}}}}

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT , and waiting until `ServiceStatus`\nfor `elasticsearch`
and `savedObjects` is `available` didn't solve the\nissue, I simply
added a retry mechanism, which, at least, protects\nagainst other
temporary issues as well.\n\nSome additional logging is added as
well.\n\n### Checklist\n\nCheck the PR satisfies following conditions.
\n\nReviewers should verify this PR satisfies this list as well.\n\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"e4ea87e92be7fb5b0824e2d79d878b0be089fdd6","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[EDR
Workflows][Investigation] Telemetry config watcher
fix","number":210406,"url":"https://github.com/elastic/kibana/pull/210406","mergeCommit":{"message":"[EDR
Workflows][Investigation] Telemetry config watcher fix (elastic#210406)\n\n##
Summary\n\nTo update the `global_telemetry_config` flag in Defend
package policies,\nwe subscribe to the Telemetry plugin's `isOptedIn#
Backport

This will backport the following commits from `main` to `8.x`:
{{{{raw}}}} - [[EDR Workflows][Investigation] Telemetry config watcher
fix
(elastic#210406)](https://github.com/elastic/kibana/pull/210406){{{{/raw}}}}

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT observable during\nKibana's `start()` phase, and receive
the initial value immediately.\nThis feature is used for 'migrating'
existing package policies: after\nstack upgrade, when Kibana starts up,
this subscription mechanism makes\nsure that existing policies are
backfilled with the new field.\n\nBut not on cloud and serverless
instances.\n\nIt turned out, that while this works on local instances,
on cloud and\nserverless instances, at the very moment we receive the
value during\n`start()`, some mechanisms are not yet green, and this
resulted in\n`security_exception: missing authentication credentials for
REST\nrequest` when trying to read Saved Objects.\n\nAs subscribing
to`core.status.core# Backport

This will backport the following commits from `main` to `8.x`:
{{{{raw}}}} - [[EDR Workflows][Investigation] Telemetry config watcher
fix
(elastic#210406)](https://github.com/elastic/kibana/pull/210406){{{{/raw}}}}

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT , and waiting until `ServiceStatus`\nfor `elasticsearch`
and `savedObjects` is `available` didn't solve the\nissue, I simply
added a retry mechanism, which, at least, protects\nagainst other
temporary issues as well.\n\nSome additional logging is added as
well.\n\n### Checklist\n\nCheck the PR satisfies following conditions.
\n\nReviewers should verify this PR satisfies this list as well.\n\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"e4ea87e92be7fb5b0824e2d79d878b0be089fdd6"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/210406","number":210406,"mergeCommit":{"message":"[EDR
Workflows][Investigation] Telemetry config watcher fix (elastic#210406)\n\n##
Summary\n\nTo update the `global_telemetry_config` flag in Defend
package policies,\nwe subscribe to the Telemetry plugin's `isOptedIn#
Backport

This will backport the following commits from `main` to `8.x`:
{{{{raw}}}} - [[EDR Workflows][Investigation] Telemetry config watcher
fix
(elastic#210406)](https://github.com/elastic/kibana/pull/210406){{{{/raw}}}}

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT observable during\nKibana's `start()` phase, and receive
the initial value immediately.\nThis feature is used for 'migrating'
existing package policies: after\nstack upgrade, when Kibana starts up,
this subscription mechanism makes\nsure that existing policies are
backfilled with the new field.\n\nBut not on cloud and serverless
instances.\n\nIt turned out, that while this works on local instances,
on cloud and\nserverless instances, at the very moment we receive the
value during\n`start()`, some mechanisms are not yet green, and this
resulted in\n`security_exception: missing authentication credentials for
REST\nrequest` when trying to read Saved Objects.\n\nAs subscribing
to`core.status.core# Backport

This will backport the following commits from `main` to `8.x`:
{{{{raw}}}} - [[EDR Workflows][Investigation] Telemetry config watcher
fix
(elastic#210406)](https://github.com/elastic/kibana/pull/210406){{{{/raw}}}}

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT , and waiting until `ServiceStatus`\nfor `elasticsearch`
and `savedObjects` is `available` didn't solve the\nissue, I simply
added a retry mechanism, which, at least, protects\nagainst other
temporary issues as well.\n\nSome additional logging is added as
well.\n\n### Checklist\n\nCheck the PR satisfies following conditions.
\n\nReviewers should verify this PR satisfies this list as well.\n\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common
scenarios\n\n---------\n\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"e4ea87e92be7fb5b0824e2d79d878b0be089fdd6"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Gergő Ábrahám <gergo.abraham@elastic.co>
…) (elastic#212909)

# Backport

This will backport the following commits from `main` to `8.x`:
- [adds thumbnail for elasticsearch logs integration
(elastic#212877)](elastic#212877)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Eyo O.
Eyo","email":"7893459+eokoneyo@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-03T12:53:05Z","message":"adds
thumbnail for elasticsearch logs integration (elastic#212877)\n\n##
Summary\n\nCloses https://github.com/elastic/kibana/issues/204328\n\n##
Visuals\n<img width=\"1313\" alt=\"Screenshot 2025-03-03 at 12 11
16\"\nsrc=\"https://github.com/user-attachments/assets/99e627fe-6136-4a1e-8178-f8afd9bb9e27\"\n/>\n\n\n","sha":"883bc1794b07658b4ffe4ec387f38b87c22ca03e","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:SharedUX","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"adds
thumbnail for elasticsearch logs
integration","number":212877,"url":"https://github.com/elastic/kibana/pull/212877","mergeCommit":{"message":"adds
thumbnail for elasticsearch logs integration (elastic#212877)\n\n##
Summary\n\nCloses https://github.com/elastic/kibana/issues/204328\n\n##
Visuals\n<img width=\"1313\" alt=\"Screenshot 2025-03-03 at 12 11
16\"\nsrc=\"https://github.com/user-attachments/assets/99e627fe-6136-4a1e-8178-f8afd9bb9e27\"\n/>\n\n\n","sha":"883bc1794b07658b4ffe4ec387f38b87c22ca03e"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212877","number":212877,"mergeCommit":{"message":"adds
thumbnail for elasticsearch logs integration (elastic#212877)\n\n##
Summary\n\nCloses https://github.com/elastic/kibana/issues/204328\n\n##
Visuals\n<img width=\"1313\" alt=\"Screenshot 2025-03-03 at 12 11
16\"\nsrc=\"https://github.com/user-attachments/assets/99e627fe-6136-4a1e-8178-f8afd9bb9e27\"\n/>\n\n\n","sha":"883bc1794b07658b4ffe4ec387f38b87c22ca03e"}}]}]
BACKPORT-->

Co-authored-by: Eyo O. Eyo <7893459+eokoneyo@users.noreply.github.com>
…stic#212510) (elastic#212867)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[EDR Workflows] OpenApi Missing Content - Response Actions
(elastic#212510)](elastic#212510)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Konrad
Szwarc","email":"konrad.szwarc@elastic.co"},"sourceCommit":{"committedDate":"2025-02-28T16:44:00Z","message":"[EDR
Workflows] OpenApi Missing Content - Response Actions (elastic#212510)\n\n##
For reviewers:\nOnly `*.schema.yml` files were edited
(excluding\n`*.bundled.schema.yml`). Rest of the changes comes from auto
generation\nand can be ignored.\n\n## Description\n\nPart of DW team
effort - elastic/security-team#11804\n\nThis PR aligns the
property/schema descriptions and examples in\nAsciiDocs with OpenAPI
schemas. The primary goal of this PR was not to\nextend or enhance the
documentation but to migrate from one system to\nanother.\n\nAscii docs
-\nhttps://www.elastic.co/guide/en/security/8.17/management-api-overview.html\nOpenApi
generated docs
-\nhttps://www.elastic.co/docs/api/doc/kibana/operation/operation-endpointgetactionslist\n\nChanges:\n\nCopied
missing property descriptions from AsciiDoc to OpenApi
properties\nCopied existing AsciiDoc examples for both requests and
responses\nFixed falsy query object in some GET requests - in OpenApi it
was\ndefined as an object, not as path query
params.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by: Paul
Tavares
<56442535+paul-tavares@users.noreply.github.com>\nCo-authored-by:
natasha-moore-elastic
<137783811+natasha-moore-elastic@users.noreply.github.com>","sha":"2700a2a95158dc5d5a77ff074119b1b61f949310","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v8.16.0","v8.17.0","v8.18.0","v9.1.0"],"title":"[EDR
Workflows] OpenApi Missing Content - Response
Actions","number":212510,"url":"https://github.com/elastic/kibana/pull/212510","mergeCommit":{"message":"[EDR
Workflows] OpenApi Missing Content - Response Actions (elastic#212510)\n\n##
For reviewers:\nOnly `*.schema.yml` files were edited
(excluding\n`*.bundled.schema.yml`). Rest of the changes comes from auto
generation\nand can be ignored.\n\n## Description\n\nPart of DW team
effort - elastic/security-team#11804\n\nThis PR aligns the
property/schema descriptions and examples in\nAsciiDocs with OpenAPI
schemas. The primary goal of this PR was not to\nextend or enhance the
documentation but to migrate from one system to\nanother.\n\nAscii docs
-\nhttps://www.elastic.co/guide/en/security/8.17/management-api-overview.html\nOpenApi
generated docs
-\nhttps://www.elastic.co/docs/api/doc/kibana/operation/operation-endpointgetactionslist\n\nChanges:\n\nCopied
missing property descriptions from AsciiDoc to OpenApi
properties\nCopied existing AsciiDoc examples for both requests and
responses\nFixed falsy query object in some GET requests - in OpenApi it
was\ndefined as an object, not as path query
params.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by: Paul
Tavares
<56442535+paul-tavares@users.noreply.github.com>\nCo-authored-by:
natasha-moore-elastic
<137783811+natasha-moore-elastic@users.noreply.github.com>","sha":"2700a2a95158dc5d5a77ff074119b1b61f949310"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.17","8.18"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/212794","number":212794,"state":"MERGED","mergeCommit":{"sha":"3ceba17cbd76f89b72986190b8c77f5079706282","message":"[9.0]
[EDR Workflows] OpenApi Missing Content - Response Actions (elastic#212510)
(elastic#212794)\n\n# Backport\n\nThis will backport the following commits from
`main` to `9.0`:\n- [[EDR Workflows] OpenApi Missing Content - Response
Actions\n(elastic#212510)](https://github.com/elastic/kibana/pull/212510)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Konrad Szwarc
<konrad.szwarc@elastic.co>"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212510","number":212510,"mergeCommit":{"message":"[EDR
Workflows] OpenApi Missing Content - Response Actions (elastic#212510)\n\n##
For reviewers:\nOnly `*.schema.yml` files were edited
(excluding\n`*.bundled.schema.yml`). Rest of the changes comes from auto
generation\nand can be ignored.\n\n## Description\n\nPart of DW team
effort - elastic/security-team#11804\n\nThis PR aligns the
property/schema descriptions and examples in\nAsciiDocs with OpenAPI
schemas. The primary goal of this PR was not to\nextend or enhance the
documentation but to migrate from one system to\nanother.\n\nAscii docs
-\nhttps://www.elastic.co/guide/en/security/8.17/management-api-overview.html\nOpenApi
generated docs
-\nhttps://www.elastic.co/docs/api/doc/kibana/operation/operation-endpointgetactionslist\n\nChanges:\n\nCopied
missing property descriptions from AsciiDoc to OpenApi
properties\nCopied existing AsciiDoc examples for both requests and
responses\nFixed falsy query object in some GET requests - in OpenApi it
was\ndefined as an object, not as path query
params.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by: Paul
Tavares
<56442535+paul-tavares@users.noreply.github.com>\nCo-authored-by:
natasha-moore-elastic
<137783811+natasha-moore-elastic@users.noreply.github.com>","sha":"2700a2a95158dc5d5a77ff074119b1b61f949310"}}]}]
BACKPORT-->

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
…elastic#212913)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[scout] enable ES authc debug logs on ES start
(elastic#212866)](elastic#212866)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Dzmitry
Lemechko","email":"dzmitry.lemechko@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T13:41:40Z","message":"[scout]
enable ES authc debug logs on ES start (elastic#212866)\n\n## Summary\n\nIn
elastic#211055 we enabled Elasticsearch Authc debug logs, but we use
the\ndifferent entry function to start servers on CI. This PR moves the
call\ninto `runElasticsearch` so that logs are enabled for every Scout
script\n(start-server or
run-tests)","sha":"043d780b2afbfc722c6f849bc7dfdb1098550447","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","backport:version","test:scout","v9.1.0","v8.19.0"],"title":"[scout]
enable ES authc debug logs on ES
start","number":212866,"url":"https://github.com/elastic/kibana/pull/212866","mergeCommit":{"message":"[scout]
enable ES authc debug logs on ES start (elastic#212866)\n\n## Summary\n\nIn
elastic#211055 we enabled Elasticsearch Authc debug logs, but we use
the\ndifferent entry function to start servers on CI. This PR moves the
call\ninto `runElasticsearch` so that logs are enabled for every Scout
script\n(start-server or
run-tests)","sha":"043d780b2afbfc722c6f849bc7dfdb1098550447"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212866","number":212866,"mergeCommit":{"message":"[scout]
enable ES authc debug logs on ES start (elastic#212866)\n\n## Summary\n\nIn
elastic#211055 we enabled Elasticsearch Authc debug logs, but we use
the\ndifferent entry function to start servers on CI. This PR moves the
call\ninto `runElasticsearch` so that logs are enabled for every Scout
script\n(start-server or
run-tests)","sha":"043d780b2afbfc722c6f849bc7dfdb1098550447"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Dzmitry Lemechko <dzmitry.lemechko@elastic.co>
…sponse size (elastic#211045) (elastic#212921)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution] Reduce the _review rule upgrade endpoint response
size (elastic#211045)](elastic#211045)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Dmitrii
Shevchenko","email":"dmitrii.shevchenko@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T14:03:07Z","message":"[Security
Solution] Reduce the _review rule upgrade endpoint response size
(elastic#211045)\n\n**Resolves:
https://github.com/elastic/kibana/issues/208361**\n**Resolves:
https://github.com/elastic/kibana/issues/210544**\n\n## Summary\n\nThis
PR introduces significant memory consumption improvements to
the\nprebuilt rule endpoints, ensuring users won't encounter OOM errors
on\nmemory-limited Kibana instances.\n\nMemory consumption testing
results provided
in\nhttps://github.com/elastic/pull/211045#issuecomment-2689854328.\n\n##
Details\n\nThis PR implements a number of memory usage optimizations to
the\nprebuilt rule endpoints with the final goal reducing chances of
getting\nOOM errors. The changes are extensive and require thorough
testing\nbefore merging.\n\nThe changes are described by the following
bullets\n\n- The most significant change is the addition of pagination
to the\n`upgrade/_review` endpoint. This endpoint was known for causing
OOM\nerrors due to its large and ever-growing response size. With
pagination,\nit now returns upgrade information for no more than 20-100
rules at a\ntime, significantly reducing its memory footprint.\n- New
backend methods, such
as\n`ruleObjectsClient.fetchInstalledRuleVersions`, have been
introduced.\nThese methods return rule IDs with their corresponding
installed\nversions, allowing to build a map of outdated rules without
loading all\navailable rules into memory. Previously, all installed
rules, along with\ntheir base and target versions, were fetched
unconditionally before\nfiltering for updates.\n- The `stats` data
structure of the review endpoint has been deprecated\n(it can be safely
removed after one Serverless release cycle). Since the\nendpoint now
returns paginated results, building stats is no longer\nfeasible due to
the limited rule set size fetched on the server side. As\nthe side
effect it required removing related Cypress tests asserting\n`Update
All` disabled when rules can't be updated.\n- All changes to the
endpoints are backward-compatible. All previously\nrequired returned
structures still present in response. All newly added\nstructures are
optional.\n- Upgradeable rule tags are now returned from the prebuilt
rule status\nendpoint.\n- The frontend logic has been updated to move
sorting and filtering of\nprebuilt rules from the client side to the
server side.\n- The `upgrade/_perform` endpoint has been rewritten to
use lightweight\nrule version information rather than full rules to
determine upgradeable\nrules. Additionally, upgrades are now performed
in batches of up to 100\nrules, further reducing memory usage.\n- A dry
run option has been added to the upgrade perform endpoint. This\nis
needed for the \"Update all\" rules scenario to determine if any
rules\ncontain conflicts and display a confirmation modal to the
user.\n- An option to skip conflicting rules has been added to the
upgrade\nendpoint when called with the `ALL_RULES` mode.\n- The
`install/_review` endpoint's memory consumption has been optimized\nby
avoiding loading all rules into memory to determine available rules\nfor
installation. Redundant fetching of all base versions has also
been\nremoved, as they do not participate in the
calculation.\n\n---------\n\nCo-authored-by: Maxim Palenov
<maxim.palenov@elastic.co>","sha":"c4a016eda30ae8f224fdd485a634dc6773898e31","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","performance","v9.0.0","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v8.18.0","v9.1.0","v8.19.0","v8.17.3"],"title":"[Security
Solution] Reduce the _review rule upgrade endpoint response
size","number":211045,"url":"https://github.com/elastic/kibana/pull/211045","mergeCommit":{"message":"[Security
Solution] Reduce the _review rule upgrade endpoint response size
(elastic#211045)\n\n**Resolves:
https://github.com/elastic/kibana/issues/208361**\n**Resolves:
https://github.com/elastic/kibana/issues/210544**\n\n## Summary\n\nThis
PR introduces significant memory consumption improvements to
the\nprebuilt rule endpoints, ensuring users won't encounter OOM errors
on\nmemory-limited Kibana instances.\n\nMemory consumption testing
results provided
in\nhttps://github.com/elastic/pull/211045#issuecomment-2689854328.\n\n##
Details\n\nThis PR implements a number of memory usage optimizations to
the\nprebuilt rule endpoints with the final goal reducing chances of
getting\nOOM errors. The changes are extensive and require thorough
testing\nbefore merging.\n\nThe changes are described by the following
bullets\n\n- The most significant change is the addition of pagination
to the\n`upgrade/_review` endpoint. This endpoint was known for causing
OOM\nerrors due to its large and ever-growing response size. With
pagination,\nit now returns upgrade information for no more than 20-100
rules at a\ntime, significantly reducing its memory footprint.\n- New
backend methods, such
as\n`ruleObjectsClient.fetchInstalledRuleVersions`, have been
introduced.\nThese methods return rule IDs with their corresponding
installed\nversions, allowing to build a map of outdated rules without
loading all\navailable rules into memory. Previously, all installed
rules, along with\ntheir base and target versions, were fetched
unconditionally before\nfiltering for updates.\n- The `stats` data
structure of the review endpoint has been deprecated\n(it can be safely
removed after one Serverless release cycle). Since the\nendpoint now
returns paginated results, building stats is no longer\nfeasible due to
the limited rule set size fetched on the server side. As\nthe side
effect it required removing related Cypress tests asserting\n`Update
All` disabled when rules can't be updated.\n- All changes to the
endpoints are backward-compatible. All previously\nrequired returned
structures still present in response. All newly added\nstructures are
optional.\n- Upgradeable rule tags are now returned from the prebuilt
rule status\nendpoint.\n- The frontend logic has been updated to move
sorting and filtering of\nprebuilt rules from the client side to the
server side.\n- The `upgrade/_perform` endpoint has been rewritten to
use lightweight\nrule version information rather than full rules to
determine upgradeable\nrules. Additionally, upgrades are now performed
in batches of up to 100\nrules, further reducing memory usage.\n- A dry
run option has been added to the upgrade perform endpoint. This\nis
needed for the \"Update all\" rules scenario to determine if any
rules\ncontain conflicts and display a confirmation modal to the
user.\n- An option to skip conflicting rules has been added to the
upgrade\nendpoint when called with the `ALL_RULES` mode.\n- The
`install/_review` endpoint's memory consumption has been optimized\nby
avoiding loading all rules into memory to determine available rules\nfor
installation. Redundant fetching of all base versions has also
been\nremoved, as they do not participate in the
calculation.\n\n---------\n\nCo-authored-by: Maxim Palenov
<maxim.palenov@elastic.co>","sha":"c4a016eda30ae8f224fdd485a634dc6773898e31"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x","8.17"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211045","number":211045,"mergeCommit":{"message":"[Security
Solution] Reduce the _review rule upgrade endpoint response size
(elastic#211045)\n\n**Resolves:
https://github.com/elastic/kibana/issues/208361**\n**Resolves:
https://github.com/elastic/kibana/issues/210544**\n\n## Summary\n\nThis
PR introduces significant memory consumption improvements to
the\nprebuilt rule endpoints, ensuring users won't encounter OOM errors
on\nmemory-limited Kibana instances.\n\nMemory consumption testing
results provided
in\nhttps://github.com/elastic/pull/211045#issuecomment-2689854328.\n\n##
Details\n\nThis PR implements a number of memory usage optimizations to
the\nprebuilt rule endpoints with the final goal reducing chances of
getting\nOOM errors. The changes are extensive and require thorough
testing\nbefore merging.\n\nThe changes are described by the following
bullets\n\n- The most significant change is the addition of pagination
to the\n`upgrade/_review` endpoint. This endpoint was known for causing
OOM\nerrors due to its large and ever-growing response size. With
pagination,\nit now returns upgrade information for no more than 20-100
rules at a\ntime, significantly reducing its memory footprint.\n- New
backend methods, such
as\n`ruleObjectsClient.fetchInstalledRuleVersions`, have been
introduced.\nThese methods return rule IDs with their corresponding
installed\nversions, allowing to build a map of outdated rules without
loading all\navailable rules into memory. Previously, all installed
rules, along with\ntheir base and target versions, were fetched
unconditionally before\nfiltering for updates.\n- The `stats` data
structure of the review endpoint has been deprecated\n(it can be safely
removed after one Serverless release cycle). Since the\nendpoint now
returns paginated results, building stats is no longer\nfeasible due to
the limited rule set size fetched on the server side. As\nthe side
effect it required removing related Cypress tests asserting\n`Update
All` disabled when rules can't be updated.\n- All changes to the
endpoints are backward-compatible. All previously\nrequired returned
structures still present in response. All newly added\nstructures are
optional.\n- Upgradeable rule tags are now returned from the prebuilt
rule status\nendpoint.\n- The frontend logic has been updated to move
sorting and filtering of\nprebuilt rules from the client side to the
server side.\n- The `upgrade/_perform` endpoint has been rewritten to
use lightweight\nrule version information rather than full rules to
determine upgradeable\nrules. Additionally, upgrades are now performed
in batches of up to 100\nrules, further reducing memory usage.\n- A dry
run option has been added to the upgrade perform endpoint. This\nis
needed for the \"Update all\" rules scenario to determine if any
rules\ncontain conflicts and display a confirmation modal to the
user.\n- An option to skip conflicting rules has been added to the
upgrade\nendpoint when called with the `ALL_RULES` mode.\n- The
`install/_review` endpoint's memory consumption has been optimized\nby
avoiding loading all rules into memory to determine available rules\nfor
installation. Redundant fetching of all base versions has also
been\nremoved, as they do not participate in the
calculation.\n\n---------\n\nCo-authored-by: Maxim Palenov
<maxim.palenov@elastic.co>","sha":"c4a016eda30ae8f224fdd485a634dc6773898e31"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Dmitrii Shevchenko <dmitrii.shevchenko@elastic.co>
…s to use tool helper method (elastic#212865) (elastic#212928)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution] [GenAi] refactor security ai assistant tools to
use tool helper method
(elastic#212865)](elastic#212865)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Kenneth
Kreindler","email":"42113355+KDKHD@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-03T14:35:22Z","message":"[Security
Solution] [GenAi] refactor security ai assistant tools to use tool
helper method (elastic#212865)\n\n## Summary\n\nClean up some security ai
assistant code.\n\n- Replace the usage of `new DynamicStructuredTool()`
with the `tool()`\nhelper method. This is the recommended approach today
and has the\ncorrect types to work
with\n[`Command`](https://langchain-ai.github.io/langgraphjs/concepts/low_level/#command).\n-
Extract code such as the default assistant graph state
and\nagentRunnableFactory to reduce cognitive overload.\n- Update
AssistantTool type definition\n\n### Checklist\n\nCheck the PR satisfies
following conditions. \n\nReviewers should verify this PR satisfies this
list as well.\n\n- [X] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[X]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [X] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [X] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[X] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [X] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [X] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"d37fcb6fb686e59f18e541113ef16d01030c8d86","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Security
Generative AI","backport:version","v9.1.0","v8.19.0"],"title":"[Security
Solution] [GenAi] refactor security ai assistant tools to use tool
helper
method","number":212865,"url":"https://github.com/elastic/kibana/pull/212865","mergeCommit":{"message":"[Security
Solution] [GenAi] refactor security ai assistant tools to use tool
helper method (elastic#212865)\n\n## Summary\n\nClean up some security ai
assistant code.\n\n- Replace the usage of `new DynamicStructuredTool()`
with the `tool()`\nhelper method. This is the recommended approach today
and has the\ncorrect types to work
with\n[`Command`](https://langchain-ai.github.io/langgraphjs/concepts/low_level/#command).\n-
Extract code such as the default assistant graph state
and\nagentRunnableFactory to reduce cognitive overload.\n- Update
AssistantTool type definition\n\n### Checklist\n\nCheck the PR satisfies
following conditions. \n\nReviewers should verify this PR satisfies this
list as well.\n\n- [X] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[X]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [X] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [X] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[X] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [X] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [X] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"d37fcb6fb686e59f18e541113ef16d01030c8d86"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212865","number":212865,"mergeCommit":{"message":"[Security
Solution] [GenAi] refactor security ai assistant tools to use tool
helper method (elastic#212865)\n\n## Summary\n\nClean up some security ai
assistant code.\n\n- Replace the usage of `new DynamicStructuredTool()`
with the `tool()`\nhelper method. This is the recommended approach today
and has the\ncorrect types to work
with\n[`Command`](https://langchain-ai.github.io/langgraphjs/concepts/low_level/#command).\n-
Extract code such as the default assistant graph state
and\nagentRunnableFactory to reduce cognitive overload.\n- Update
AssistantTool type definition\n\n### Checklist\n\nCheck the PR satisfies
following conditions. \n\nReviewers should verify this PR satisfies this
list as well.\n\n- [X] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n-
[X]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas
added for features that require explanation or tutorials\n- [X] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n- [X] If a plugin
configuration key changed, check if it needs to be\nallowlisted in the
cloud and added to the
[docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n-
[X] This was checked for breaking HTTP API changes, and any
breaking\nchanges have been approved by the breaking-change committee.
The\n`release_note:breaking` label should be applied in these
situations.\n- [X] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [X] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n###
Identify risks\n\nDoes this PR introduce any risks? For example,
consider risks like hard\nto test bugs, performance regression,
potential of data loss.\n\nDescribe the risk, its severity, and
mitigation for each identified\nrisk. Invite stakeholders and evaluate
how to proceed before merging.\n\n- [ ] [See some
risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n-
[ ] ...\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"d37fcb6fb686e59f18e541113ef16d01030c8d86"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Kenneth Kreindler <42113355+KDKHD@users.noreply.github.com>
elastic#212967)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[ES|QL] Makes the clear control button optional
(elastic#212848)](elastic#212848)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Stratoula
Kalafateli","email":"efstratia.kalafateli@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T18:03:57Z","message":"[ES|QL]
Makes the clear control button optional (elastic#212848)\n\n##
Summary\n\nCloses
https://github.com/elastic/kibana/issues/212605\n\nHere we are removing
the clear button from the ES|QL control as clearing\nwill result in
wrong charts. I also considered the reset but when there\nis no changes
should be hidden or disabled. This seems to me as a\nsmaller change and
taken under consideration that dashboard already\nallows resetting I
think it is ok to remove it.\n\nWe can always reconsider if any user
complains.\n\nAlthough by removing the clearSelections from the control
config removes\nthe button the `DefaultControlApi ` was marking it as
required. So I had\nto tweak a bit the
types.","sha":"f6978eaf7b511791039210dd9643b68ae3b6b242","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Feature:ES|QL","Team:ESQL","backport:version","v9.1.0","v8.19.0"],"title":"[ES|QL]
Makes the clear control button
optional","number":212848,"url":"https://github.com/elastic/kibana/pull/212848","mergeCommit":{"message":"[ES|QL]
Makes the clear control button optional (elastic#212848)\n\n##
Summary\n\nCloses
https://github.com/elastic/kibana/issues/212605\n\nHere we are removing
the clear button from the ES|QL control as clearing\nwill result in
wrong charts. I also considered the reset but when there\nis no changes
should be hidden or disabled. This seems to me as a\nsmaller change and
taken under consideration that dashboard already\nallows resetting I
think it is ok to remove it.\n\nWe can always reconsider if any user
complains.\n\nAlthough by removing the clearSelections from the control
config removes\nthe button the `DefaultControlApi ` was marking it as
required. So I had\nto tweak a bit the
types.","sha":"f6978eaf7b511791039210dd9643b68ae3b6b242"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212848","number":212848,"mergeCommit":{"message":"[ES|QL]
Makes the clear control button optional (elastic#212848)\n\n##
Summary\n\nCloses
https://github.com/elastic/kibana/issues/212605\n\nHere we are removing
the clear button from the ES|QL control as clearing\nwill result in
wrong charts. I also considered the reset but when there\nis no changes
should be hidden or disabled. This seems to me as a\nsmaller change and
taken under consideration that dashboard already\nallows resetting I
think it is ok to remove it.\n\nWe can always reconsider if any user
complains.\n\nAlthough by removing the clearSelections from the control
config removes\nthe button the `DefaultControlApi ` was marking it as
required. So I had\nto tweak a bit the
types.","sha":"f6978eaf7b511791039210dd9643b68ae3b6b242"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Stratoula Kalafateli <efstratia.kalafateli@elastic.co>
…lastic#212952)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[SecuritySolution] Fix add to library action
(elastic#212659)](elastic#212659)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Angela
Chuang","email":"6295984+angorayc@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-03T16:33:10Z","message":"[SecuritySolution]
Fix add to library action (elastic#212659)\n\n## Summary\n\nAdd to library
actions are not working.\nIssue description and steps to
reproduce:\nhttps://github.com/elastic/issues/212650\n\n\nUpdate
according to SaveModalComponent
change:\nhttps://github.com/elastic/pull/186642/files#diff-137261ad728b083fd39cb5d6b58d7afd3d4c4e24749b78609a9aa4b3c63e4170R290\n\n\nhttps://github.com/user-attachments/assets/a0d0e81e-5a0f-4462-b110-370894c6bf36\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Michael Olorunnisola
<michael.olorunnisola@elastic.co>","sha":"24d2cd3e4f31fd75c6481934119ca380931cd6d0","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","v9.0.0","Team:Threat
Hunting:Explore","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[SecuritySolution]
Fix add to library
action","number":212659,"url":"https://github.com/elastic/kibana/pull/212659","mergeCommit":{"message":"[SecuritySolution]
Fix add to library action (elastic#212659)\n\n## Summary\n\nAdd to library
actions are not working.\nIssue description and steps to
reproduce:\nhttps://github.com/elastic/issues/212650\n\n\nUpdate
according to SaveModalComponent
change:\nhttps://github.com/elastic/pull/186642/files#diff-137261ad728b083fd39cb5d6b58d7afd3d4c4e24749b78609a9aa4b3c63e4170R290\n\n\nhttps://github.com/user-attachments/assets/a0d0e81e-5a0f-4462-b110-370894c6bf36\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Michael Olorunnisola
<michael.olorunnisola@elastic.co>","sha":"24d2cd3e4f31fd75c6481934119ca380931cd6d0"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212659","number":212659,"mergeCommit":{"message":"[SecuritySolution]
Fix add to library action (elastic#212659)\n\n## Summary\n\nAdd to library
actions are not working.\nIssue description and steps to
reproduce:\nhttps://github.com/elastic/issues/212650\n\n\nUpdate
according to SaveModalComponent
change:\nhttps://github.com/elastic/pull/186642/files#diff-137261ad728b083fd39cb5d6b58d7afd3d4c4e24749b78609a9aa4b3c63e4170R290\n\n\nhttps://github.com/user-attachments/assets/a0d0e81e-5a0f-4462-b110-370894c6bf36\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Michael Olorunnisola
<michael.olorunnisola@elastic.co>","sha":"24d2cd3e4f31fd75c6481934119ca380931cd6d0"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Angela Chuang <6295984+angorayc@users.noreply.github.com>
…elastic#212979)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[ES|QL] Separate `ENRICH` autocomplete routine
(elastic#211657)](elastic#211657)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Drew
Tate","email":"drew.tate@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T20:24:23Z","message":"[ES|QL]
Separate `ENRICH` autocomplete routine (elastic#211657)\n\n## Summary\n\nPart
of https://github.com/elastic/kibana/issues/195418\n\nGives `ENRICH`
autocomplete logic its own home 🏡\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n\n### Identify
risks\n\n- [ ] As with any refactor, there's a possibility this will
introduce a\nregression in the behavior of commands. However, all
automated tests are\npassing and I have tested the behavior manually and
can detect no\nregression.\n\n---------\n\nCo-authored-by: Stratoula
Kalafateli
<efstratia.kalafateli@elastic.co>","sha":"f2a91732d8f8d20a22bf761bfe9ec85e8a8e1c0c","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Feature:ES|QL","Team:ESQL","backport:version","v9.1.0","v8.19.0"],"title":"[ES|QL]
Separate `ENRICH` autocomplete
routine","number":211657,"url":"https://github.com/elastic/kibana/pull/211657","mergeCommit":{"message":"[ES|QL]
Separate `ENRICH` autocomplete routine (elastic#211657)\n\n## Summary\n\nPart
of https://github.com/elastic/kibana/issues/195418\n\nGives `ENRICH`
autocomplete logic its own home 🏡\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n\n### Identify
risks\n\n- [ ] As with any refactor, there's a possibility this will
introduce a\nregression in the behavior of commands. However, all
automated tests are\npassing and I have tested the behavior manually and
can detect no\nregression.\n\n---------\n\nCo-authored-by: Stratoula
Kalafateli
<efstratia.kalafateli@elastic.co>","sha":"f2a91732d8f8d20a22bf761bfe9ec85e8a8e1c0c"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211657","number":211657,"mergeCommit":{"message":"[ES|QL]
Separate `ENRICH` autocomplete routine (elastic#211657)\n\n## Summary\n\nPart
of https://github.com/elastic/kibana/issues/195418\n\nGives `ENRICH`
autocomplete logic its own home 🏡\n\n### Checklist\n\n- [x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n\n### Identify
risks\n\n- [ ] As with any refactor, there's a possibility this will
introduce a\nregression in the behavior of commands. However, all
automated tests are\npassing and I have tested the behavior manually and
can detect no\nregression.\n\n---------\n\nCo-authored-by: Stratoula
Kalafateli
<efstratia.kalafateli@elastic.co>","sha":"f2a91732d8f8d20a22bf761bfe9ec85e8a8e1c0c"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Drew Tate <drew.tate@elastic.co>
…m to esClient.msearch (elastic#212465) (elastic#212983)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[AI Assistant] Fixed DataClient find method to pass fields param to
esClient.msearch
(elastic#212465)](elastic#212465)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Yuliia
Naumenko","email":"jo.naumenko@gmail.com"},"sourceCommit":{"committedDate":"2025-03-03T17:43:16Z","message":"[AI
Assistant] Fixed DataClient find method to pass fields param to
esClient.msearch (elastic#212465)\n\nFixed `AIAssistantDataClient` to send
values of the `fields` param if is\nprovided to `esClient.msearch`
request.\n\nTo test run the API
query\n`http://localhost:5601/api/security_ai_assistant/current_user/conversations/_find?page=1&per_page=99&fields=id,users,apiConfig.connectorId`\nand
makes sure the only provided fields are returned in the
result.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"7afe813b35ff4e1cd97be50dbaec2dec554eed26","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","backport:version","v9.1.0","v8.19.0"],"title":"[AI
Assistant] Fixed DataClient find method to pass fields param to
esClient.msearch","number":212465,"url":"https://github.com/elastic/kibana/pull/212465","mergeCommit":{"message":"[AI
Assistant] Fixed DataClient find method to pass fields param to
esClient.msearch (elastic#212465)\n\nFixed `AIAssistantDataClient` to send
values of the `fields` param if is\nprovided to `esClient.msearch`
request.\n\nTo test run the API
query\n`http://localhost:5601/api/security_ai_assistant/current_user/conversations/_find?page=1&per_page=99&fields=id,users,apiConfig.connectorId`\nand
makes sure the only provided fields are returned in the
result.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"7afe813b35ff4e1cd97be50dbaec2dec554eed26"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212465","number":212465,"mergeCommit":{"message":"[AI
Assistant] Fixed DataClient find method to pass fields param to
esClient.msearch (elastic#212465)\n\nFixed `AIAssistantDataClient` to send
values of the `fields` param if is\nprovided to `esClient.msearch`
request.\n\nTo test run the API
query\n`http://localhost:5601/api/security_ai_assistant/current_user/conversations/_find?page=1&per_page=99&fields=id,users,apiConfig.connectorId`\nand
makes sure the only provided fields are returned in the
result.\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"7afe813b35ff4e1cd97be50dbaec2dec554eed26"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Yuliia Naumenko <jo.naumenko@gmail.com>
…lastic#212482) (elastic#212988)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Performance][Security Solution][3/4] - Sourcerer performance
(elastic#212482)](elastic#212482)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Michael
Olorunnisola","email":"michael.olorunnisola@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T21:06:38Z","message":"[Performance][Security
Solution][3/4] - Sourcerer performance (elastic#212482)\n\n## Summary\nPart 3
of https://github.com/elastic/kibana/pull/212173\n\n### Testing\nFor
setup see testing section
here:\nhttps://github.com/elastic/pull/212173#issue-2870522020\n\nTesting
this work is a bit more `console.log` related, as the primary\naim of
many of these changes was to limit the amount of re-renders\ncaused by
state changes within many of the sourcerer utils. React is\nrelatively
fast at handling many of these re-renders, but considering\nthe
widespread usage of `useSourcererDataView` and the top level\nlocation
of `useInitSourcerer`, it was worth taking care of some low\nhanging
fruit.\n\n### Background\n\nThe changes in this PR centered around
limiting the number of re-renders\nthat were being caused unnecessarily
in `useSourcererDataView` and\n`useInitSourcerer` by identifying some
quick wins.\n\nComments regarding the changes can be found in the PR
diffs\n\n\n### Checklist\n\nCheck the PR satisfies following conditions.
\n\nReviewers should verify this PR satisfies this list as well.\n\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n### Identify
risks\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"98b52804d500f31f2fc80f47f478427a52f20630","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat
Hunting:Investigations","backport:all-open","v8.18.0","v9.1.0","v8.19.0"],"title":"[Performance][Security
Solution][3/4] - Sourcerer
performance","number":212482,"url":"https://github.com/elastic/kibana/pull/212482","mergeCommit":{"message":"[Performance][Security
Solution][3/4] - Sourcerer performance (elastic#212482)\n\n## Summary\nPart 3
of https://github.com/elastic/kibana/pull/212173\n\n### Testing\nFor
setup see testing section
here:\nhttps://github.com/elastic/pull/212173#issue-2870522020\n\nTesting
this work is a bit more `console.log` related, as the primary\naim of
many of these changes was to limit the amount of re-renders\ncaused by
state changes within many of the sourcerer utils. React is\nrelatively
fast at handling many of these re-renders, but considering\nthe
widespread usage of `useSourcererDataView` and the top level\nlocation
of `useInitSourcerer`, it was worth taking care of some low\nhanging
fruit.\n\n### Background\n\nThe changes in this PR centered around
limiting the number of re-renders\nthat were being caused unnecessarily
in `useSourcererDataView` and\n`useInitSourcerer` by identifying some
quick wins.\n\nComments regarding the changes can be found in the PR
diffs\n\n\n### Checklist\n\nCheck the PR satisfies following conditions.
\n\nReviewers should verify this PR satisfies this list as well.\n\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n### Identify
risks\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"98b52804d500f31f2fc80f47f478427a52f20630"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212482","number":212482,"mergeCommit":{"message":"[Performance][Security
Solution][3/4] - Sourcerer performance (elastic#212482)\n\n## Summary\nPart 3
of https://github.com/elastic/kibana/pull/212173\n\n### Testing\nFor
setup see testing section
here:\nhttps://github.com/elastic/pull/212173#issue-2870522020\n\nTesting
this work is a bit more `console.log` related, as the primary\naim of
many of these changes was to limit the amount of re-renders\ncaused by
state changes within many of the sourcerer utils. React is\nrelatively
fast at handling many of these re-renders, but considering\nthe
widespread usage of `useSourcererDataView` and the top level\nlocation
of `useInitSourcerer`, it was worth taking care of some low\nhanging
fruit.\n\n### Background\n\nThe changes in this PR centered around
limiting the number of re-renders\nthat were being caused unnecessarily
in `useSourcererDataView` and\n`useInitSourcerer` by identifying some
quick wins.\n\nComments regarding the changes can be found in the PR
diffs\n\n\n### Checklist\n\nCheck the PR satisfies following conditions.
\n\nReviewers should verify this PR satisfies this list as well.\n\n-
[x] [Unit or
functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere
updated or added to match the most common scenarios\n### Identify
risks\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"98b52804d500f31f2fc80f47f478427a52f20630"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Michael Olorunnisola <michael.olorunnisola@elastic.co>
…tic#212994)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[controls] remove id from explicit input
(elastic#211851)](elastic#211851)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Nathan
Reese","email":"reese.nathan@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T21:31:42Z","message":"[controls]
remove id from explicit input (elastic#211851)\n\nPart of `EmbeddableInput`
type removal.\n\nPR removes `EmbeddableInput` from controls plugin. Part
of this effort\nis removing `id` key from
`controlConfig/explicitInput`.\n\nWhile investigating this PR, I found
it odd that\n`ControlGroupApi.serializeState` returned controls in shape
`[ { ...rest\n} ]` while `ControlGroupFactory.deserializeState` expected
to receive\ncontrols in the shape `[ { id, ...rest }]`. The only reason
this works\nis
that\nsrc/platform/plugins/shared/dashboard/server/content_management/v3/transform_utils.ts\n`controlGroupInputOut`
adds `id` to each object in `controls`. This PR\nalso resolves this and
updates `ControlGroupApi.serializeState` to\nreturn controls in shape `[
{ id, ...rest } ]`\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"decf5feba554df9c14301d4f47bba969d2bd727e","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Presentation","release_note:skip","project:embeddableRebuild","backport:version","v9.1.0","v8.19.0"],"title":"[controls]
remove id from explicit
input","number":211851,"url":"https://github.com/elastic/kibana/pull/211851","mergeCommit":{"message":"[controls]
remove id from explicit input (elastic#211851)\n\nPart of `EmbeddableInput`
type removal.\n\nPR removes `EmbeddableInput` from controls plugin. Part
of this effort\nis removing `id` key from
`controlConfig/explicitInput`.\n\nWhile investigating this PR, I found
it odd that\n`ControlGroupApi.serializeState` returned controls in shape
`[ { ...rest\n} ]` while `ControlGroupFactory.deserializeState` expected
to receive\ncontrols in the shape `[ { id, ...rest }]`. The only reason
this works\nis
that\nsrc/platform/plugins/shared/dashboard/server/content_management/v3/transform_utils.ts\n`controlGroupInputOut`
adds `id` to each object in `controls`. This PR\nalso resolves this and
updates `ControlGroupApi.serializeState` to\nreturn controls in shape `[
{ id, ...rest } ]`\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"decf5feba554df9c14301d4f47bba969d2bd727e"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211851","number":211851,"mergeCommit":{"message":"[controls]
remove id from explicit input (elastic#211851)\n\nPart of `EmbeddableInput`
type removal.\n\nPR removes `EmbeddableInput` from controls plugin. Part
of this effort\nis removing `id` key from
`controlConfig/explicitInput`.\n\nWhile investigating this PR, I found
it odd that\n`ControlGroupApi.serializeState` returned controls in shape
`[ { ...rest\n} ]` while `ControlGroupFactory.deserializeState` expected
to receive\ncontrols in the shape `[ { id, ...rest }]`. The only reason
this works\nis
that\nsrc/platform/plugins/shared/dashboard/server/content_management/v3/transform_utils.ts\n`controlGroupInputOut`
adds `id` to each object in `controls`. This PR\nalso resolves this and
updates `ControlGroupApi.serializeState` to\nreturn controls in shape `[
{ id, ...rest } ]`\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>\nCo-authored-by:
Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"decf5feba554df9c14301d4f47bba969d2bd727e"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Nathan Reese <reese.nathan@elastic.co>
…211831) (elastic#212997)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Assistant] Conversation pagination refactor
(elastic#211831)](elastic#211831)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Steph
Milovic","email":"stephanie.milovic@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T20:41:20Z","message":"[Security
Assistant] Conversation pagination refactor
(elastic#211831)","sha":"095fc222aa541bf50f57c11958c16eb4c04a282c","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:
SecuritySolution","Team:Security Generative
AI","backport:version","v9.1.0","v8.19.0"],"title":"[Security Assistant]
Conversation pagination
refactor","number":211831,"url":"https://github.com/elastic/kibana/pull/211831","mergeCommit":{"message":"[Security
Assistant] Conversation pagination refactor
(elastic#211831)","sha":"095fc222aa541bf50f57c11958c16eb4c04a282c"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211831","number":211831,"mergeCommit":{"message":"[Security
Assistant] Conversation pagination refactor
(elastic#211831)","sha":"095fc222aa541bf50f57c11958c16eb4c04a282c"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
…oint advanced policy setting (elastic#212439) (elastic#213011)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Elastic Defend] Add `windows.ransomware.dump_process` for endpoint
advanced policy setting
(elastic#212439)](elastic#212439)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Christophe
Alladoum","email":"85187342+calladoum-elastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-04T00:57:20Z","message":"[Elastic
Defend] Add `windows.ransomware.dump_process` for endpoint advanced
policy setting (elastic#212439)\n\n## Summary\n\nThis PR exposes
`windows.ransomware.dump_process` as an advanced policy\noption for
Elastic Defend.\nIf enabled, this option will make the endpoint generate
a memory dump of\nthe ransomware process before killing it, assisting
the ransomware\ninvestigation process.\n\n\n### Checklist\n\nCheck the
PR satisfies following conditions. \n\nReviewers should verify this PR
satisfies this list as well.\n\n- [x] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"e9813b8c72d4479c8f023a3dccc94842fdac29f0","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","backport:version","v8.18.0","v8.15.6","v9.1.0","v8.19.0","v8.17.3","v8.16.5"],"title":"[Elastic
Defend] Add `windows.ransomware.dump_process` for endpoint advanced
policy
setting","number":212439,"url":"https://github.com/elastic/kibana/pull/212439","mergeCommit":{"message":"[Elastic
Defend] Add `windows.ransomware.dump_process` for endpoint advanced
policy setting (elastic#212439)\n\n## Summary\n\nThis PR exposes
`windows.ransomware.dump_process` as an advanced policy\noption for
Elastic Defend.\nIf enabled, this option will make the endpoint generate
a memory dump of\nthe ransomware process before killing it, assisting
the ransomware\ninvestigation process.\n\n\n### Checklist\n\nCheck the
PR satisfies following conditions. \n\nReviewers should verify this PR
satisfies this list as well.\n\n- [x] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"e9813b8c72d4479c8f023a3dccc94842fdac29f0"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","8.15","8.x","8.17","8.16"],"targetPullRequestStates":[{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.15","label":"v8.15.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212439","number":212439,"mergeCommit":{"message":"[Elastic
Defend] Add `windows.ransomware.dump_process` for endpoint advanced
policy setting (elastic#212439)\n\n## Summary\n\nThis PR exposes
`windows.ransomware.dump_process` as an advanced policy\noption for
Elastic Defend.\nIf enabled, this option will make the endpoint generate
a memory dump of\nthe ransomware process before killing it, assisting
the ransomware\ninvestigation process.\n\n\n### Checklist\n\nCheck the
PR satisfies following conditions. \n\nReviewers should verify this PR
satisfies this list as well.\n\n- [x] Any text added follows [EUI's
writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\nsentence case text and includes
[i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n\n---------\n\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"e9813b8c72d4479c8f023a3dccc94842fdac29f0"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.3","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.16","label":"v8.16.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Christophe Alladoum <85187342+calladoum-elastic@users.noreply.github.com>
…ion (elastic#212936) (elastic#213001)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Obs AI Assistant] Improve instructions for the summarize function
(elastic#212936)](elastic#212936)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Viduni
Wickramarachchi","email":"viduni.wickramarachchi@elastic.co"},"sourceCommit":{"committedDate":"2025-03-03T23:56:55Z","message":"[Obs
AI Assistant] Improve instructions for the summarize function
(elastic#212936)","sha":"ec127e271c5dd23f3c6c11eb410d478030cfb486","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","Team:Obs
AI
Assistant","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Obs
AI Assistant] Improve instructions for the summarize
function","number":212936,"url":"https://github.com/elastic/kibana/pull/212936","mergeCommit":{"message":"[Obs
AI Assistant] Improve instructions for the summarize function
(elastic#212936)","sha":"ec127e271c5dd23f3c6c11eb410d478030cfb486"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212936","number":212936,"mergeCommit":{"message":"[Obs
AI Assistant] Improve instructions for the summarize function
(elastic#212936)","sha":"ec127e271c5dd23f3c6c11eb410d478030cfb486"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Viduni Wickramarachchi <viduni.wickramarachchi@elastic.co>
…ner (elastic#212463) (elastic#213018)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Assistant] Fix Product documentation installation banner
(elastic#212463)](elastic#212463)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Patryk
Kopyciński","email":"contact@patrykkopycinski.com"},"sourceCommit":{"committedDate":"2025-03-04T01:28:35Z","message":"[Security
Assistant] Fix Product documentation installation banner (elastic#212463)\n\n##
Summary\n\nFixes logic on fresh cluster where the ELSER was not started
yet, in\nthis case API reports `status` as `uninstalled`, but it doesn't
mean\nthat the Product documentation was actually uninstall, but rather
it's a\ndefault state.\nAdded internal `product_documentation_status` to
KB status API to make\nsure we keep track of the status internally and
present the banner only\nif the docs were intentionally
uninstalled\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"f0d66691b855fe65291fa8f889def3d3f695fe06","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","v9.0.0","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Assistant] Fix Product documentation installation banner
","number":212463,"url":"https://github.com/elastic/kibana/pull/212463","mergeCommit":{"message":"[Security
Assistant] Fix Product documentation installation banner (elastic#212463)\n\n##
Summary\n\nFixes logic on fresh cluster where the ELSER was not started
yet, in\nthis case API reports `status` as `uninstalled`, but it doesn't
mean\nthat the Product documentation was actually uninstall, but rather
it's a\ndefault state.\nAdded internal `product_documentation_status` to
KB status API to make\nsure we keep track of the status internally and
present the banner only\nif the docs were intentionally
uninstalled\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"f0d66691b855fe65291fa8f889def3d3f695fe06"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/212463","number":212463,"mergeCommit":{"message":"[Security
Assistant] Fix Product documentation installation banner (elastic#212463)\n\n##
Summary\n\nFixes logic on fresh cluster where the ELSER was not started
yet, in\nthis case API reports `status` as `uninstalled`, but it doesn't
mean\nthat the Product documentation was actually uninstall, but rather
it's a\ndefault state.\nAdded internal `product_documentation_status` to
KB status API to make\nsure we keep track of the status internally and
present the banner only\nif the docs were intentionally
uninstalled\n\n---------\n\nCo-authored-by: kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"f0d66691b855fe65291fa8f889def3d3f695fe06"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Patryk Kopyciński <contact@patrykkopycinski.com>
…ent (elastic#213029) (elastic#213035)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution] Alert flyout - fix suppressed alerts alignment
(elastic#213029)](elastic#213029)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"christineweng","email":"18648970+christineweng@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-04T06:01:51Z","message":"[Security
Solution] Alert flyout - fix suppressed alerts alignment (elastic#213029)\n\n##
Summary\n\nRef:
https://github.com/elastic/kibana/issues/204184\n\nBefore\n\n![image](https://github.com/user-attachments/assets/d578194a-aaf4-45c1-bccb-42d02110be28)\n\n\nAfter\n\n![image](https://github.com/user-attachments/assets/b183a2ae-dd73-47d8-8319-984246309d98)\n\n\n###
Checklist\n\n- [ ] The PR description includes the appropriate Release
Notes section,\nand the correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6b6eb43183c3ed06fa475a894cffe2dc7d020d01","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution] Alert flyout - fix suppressed alerts
alignment","number":213029,"url":"https://github.com/elastic/kibana/pull/213029","mergeCommit":{"message":"[Security
Solution] Alert flyout - fix suppressed alerts alignment (elastic#213029)\n\n##
Summary\n\nRef:
https://github.com/elastic/kibana/issues/204184\n\nBefore\n\n![image](https://github.com/user-attachments/assets/d578194a-aaf4-45c1-bccb-42d02110be28)\n\n\nAfter\n\n![image](https://github.com/user-attachments/assets/b183a2ae-dd73-47d8-8319-984246309d98)\n\n\n###
Checklist\n\n- [ ] The PR description includes the appropriate Release
Notes section,\nand the correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6b6eb43183c3ed06fa475a894cffe2dc7d020d01"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213029","number":213029,"mergeCommit":{"message":"[Security
Solution] Alert flyout - fix suppressed alerts alignment (elastic#213029)\n\n##
Summary\n\nRef:
https://github.com/elastic/kibana/issues/204184\n\nBefore\n\n![image](https://github.com/user-attachments/assets/d578194a-aaf4-45c1-bccb-42d02110be28)\n\n\nAfter\n\n![image](https://github.com/user-attachments/assets/b183a2ae-dd73-47d8-8319-984246309d98)\n\n\n###
Checklist\n\n- [ ] The PR description includes the appropriate Release
Notes section,\nand the correct `release_note:*` label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)","sha":"6b6eb43183c3ed06fa475a894cffe2dc7d020d01"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: christineweng <18648970+christineweng@users.noreply.github.com>
@botelastic botelastic bot added the ci:project-deploy-observability Create an Observability project label Mar 4, 2025
Copy link
Contributor

github-actions bot commented Mar 4, 2025

🤖 GitHub comments

Expand to view the GitHub comments

Just comment with:

  • /oblt-deploy : Deploy a Kibana instance using the Observability test environments.
  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

@SoniaSanzV SoniaSanzV removed the ci:project-deploy-observability Create an Observability project label Mar 4, 2025
@SoniaSanzV SoniaSanzV closed this Mar 4, 2025
@SoniaSanzV SoniaSanzV deleted the UA/make_deprecation_row_clickable branch March 4, 2025 10:13
@SoniaSanzV
Copy link
Contributor Author

Thank you for the review @sabarasaba! I've addressed the feedback in this PR #213058

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:version Backport to applied version labels Feature:Upgrade Assistant release_note:skip Skip the PR/issue when compiling release notes Team:Kibana Management Dev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more v8.18.0 v8.19.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.