- Kibana Guide: other versions:
- What is Kibana?
- What’s new in 8.16
- Kibana concepts
- Quick start
- Set up
- Install Kibana
- Configure Kibana
- Alerting and action settings
- APM settings
- Banners settings
- Cases settings
- Enterprise Search settings
- Fleet settings
- i18n settings
- Logging settings
- Logs settings
- Metrics settings
- Monitoring settings
- Reporting settings
- Search sessions settings
- Secure settings
- Security settings
- Spaces settings
- Task Manager settings
- Telemetry settings
- URL drilldown settings
- Start and stop Kibana
- Access Kibana
- Securing access to Kibana
- Add data
- Upgrade Kibana
- Configure security
- Configure reporting
- Configure logging
- Configure monitoring
- Command line tools
- Production considerations
- Discover
- Dashboards
- Canvas
- Maps
- Build a map to compare metrics by country or region
- Track, visualize, and alert on assets in real time
- Map custom regions with reverse geocoding
- Heat map layer
- Tile layer
- Vector layer
- Plot big data
- Search geographic data
- Configure map settings
- Connect to Elastic Maps Service
- Import geospatial data
- Troubleshoot
- Reporting and sharing
- Machine learning
- Graph
- Alerting
- Observability
- Search
- Security
- Dev Tools
- Fleet
- Osquery
- Stack Monitoring
- Stack Management
- Cases
- Connectors
- Amazon Bedrock
- Cases
- CrowdStrike
- D3 Security
- Google Gemini
- IBM Resilient
- Index
- Jira
- Microsoft Teams
- Observability AI Assistant
- OpenAI
- Opsgenie
- PagerDuty
- SentinelOne
- Server log
- ServiceNow ITSM
- ServiceNow SecOps
- ServiceNow ITOM
- Swimlane
- Slack
- TheHive
- Tines
- Torq
- Webhook
- Webhook - Case Management
- xMatters
- Preconfigured connectors
- License Management
- Maintenance windows
- Manage data views
- Numeral Formatting
- Rollup Jobs
- Manage saved objects
- Security
- Spaces
- Advanced Settings
- Tags
- Upgrade Assistant
- Watcher
- REST API
- Get features API
- Kibana spaces APIs
- Kibana role management APIs
- User session management APIs
- Saved objects APIs
- Data views API
- Index patterns APIs
- Alerting APIs
- Action and connector APIs
- Cases APIs
- Import and export dashboard APIs
- Logstash configuration management APIs
- Machine learning APIs
- Osquery manager API
- Short URLs APIs
- Get Task Manager health
- Upgrade assistant APIs
- Synthetics APIs
- Uptime APIs
- Kibana plugins
- Troubleshooting
- Accessibility
- Release notes
- Upgrade notes
- Kibana 8.16.4
- Kibana 8.16.3
- Kibana 8.16.2
- Kibana 8.16.1
- Kibana 8.16.0
- Kibana 8.15.5
- Kibana 8.15.4
- Kibana 8.15.3
- Kibana 8.15.2
- Kibana 8.15.1
- Kibana 8.15.0
- Kibana 8.14.3
- Kibana 8.14.2
- Kibana 8.14.1
- Kibana 8.14.0
- Kibana 8.13.4
- Kibana 8.13.3
- Kibana 8.13.2
- Kibana 8.13.1
- Kibana 8.13.0
- Kibana 8.12.2
- Kibana 8.12.1
- Kibana 8.12.0
- Kibana 8.11.4
- Kibana 8.11.3
- Kibana 8.11.2
- Kibana 8.11.1
- Kibana 8.11.0
- Kibana 8.10.4
- Kibana 8.10.3
- Kibana 8.10.2
- Kibana 8.10.1
- Kibana 8.10.0
- Kibana 8.9.2
- Kibana 8.9.1
- Kibana 8.9.0
- Kibana 8.8.2
- Kibana 8.8.1
- Kibana 8.8.0
- Kibana 8.7.1
- Kibana 8.7.0
- Kibana 8.6.1
- Kibana 8.6.0
- Kibana 8.5.2
- Kibana 8.5.1
- Kibana 8.5.0
- Kibana 8.4.3
- Kibana 8.4.2
- Kibana 8.4.1
- Kibana 8.4.0
- Kibana 8.3.3
- Kibana 8.3.2
- Kibana 8.3.1
- Kibana 8.3.0
- Kibana 8.2.3
- Kibana 8.2.2
- Kibana 8.2.1
- Kibana 8.2.0
- Kibana 8.1.3
- Kibana 8.1.2
- Kibana 8.1.1
- Kibana 8.1.0
- Kibana 8.0.0
- Kibana 8.0.0-rc2
- Kibana 8.0.0-rc1
- Kibana 8.0.0-beta1
- Kibana 8.0.0-alpha2
- Kibana 8.0.0-alpha1
- Developer guide
Kibana 8.16.0
editKibana 8.16.0
editFor information about the Kibana 8.16.0 release, review the following information.
The 8.16.0 release includes the following known issues.
Known issues
editErrors appear when loading Observability Infrastructure inventory views after upgrading to version 8.10.0 or higher.
Details
After upgrading to version 8.10.0 or higher, you may encounter errors when loading inventory views.
For more information, refer to #187254.
Workaround
You can mitigate the issue by completing the following steps:
-
Search the
.kibana_*
index fortype: inventory_view
. -
Copy the
_id
field, which will be formatted asinventory-view:<id>
. For example,inventory-view:3d3d06b0-f873-4373-8446-f6a8341cd8b1
. Omit theinventory-view:
portion and copy only the string of_id
characters. -
The offending documents are those with fields
inventory-view.legend.steps
> 18. Delete these documents by running the following in Console:
DELETE kbn:/api/infra/inventory-views/<id>
Stack Monitoring shows "Unable to load page" error
Details
The Overview, Nodes, and Logs pages in Stack Monitoring show an "Unable to load page" error. The Stack trace mentions TypeError: Cannot read properties of undefined (reading 'logsLocator')
.
Workaround
Disabling the Set feature visibility > Logs
feature at the Kibana Space settings level will prevent the error from occurring. Please note the Logs
feature will not be available on those spaces.
It’s also possible to set the Observability > Logs
feature privilege to None
at the role level. This will hide the Logs
feature from individual users and prevent the error for these users as well.
For more information, refer to #199902.
Onboarding, tutorial of APM and OpenTelemetry and some "Beats Only" integrations shows "Unable to load page" error
Details
Tutorials linked from the Kibana home page show an "Unable to load page" error. The Stack trace mentions The above error occurred in tutorial_TutorialUi
.
Workaround
The APM / OpenTelemetry tutorials represented a shortcut to quickly add important parameters to the configuration files.
It is still possible to obtain the same parameters following the tutorials in the APM documentation.
More information can be found in the APM documentation and the Fleet documentation.
For information about how to create APM API keys, please check the API key documentation.
Kibana Dev Tools > Console
incorrectly splits a request string that contains concatenated JSON objects, resulting in errors when submitting the requests to Elasticsearch.
Details
The Console takes the body of the request and splits it into several JSON objects to send to Elasticsearch. It is incorrectly parsing the concatenated JSON objects when braces appear within string values.
Workaround
Send the request to Elasticsearch using other tools like curl. This Dev Tools > Console
bug is fixed in 8.16.2 and above.
Breaking changes
editBreaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.16.0, review the breaking changes, then mitigate the impact to your application.
Updated request processing during shutdown.
Details
During shutdown, Kibana now waits for all the ongoing requests to complete according to the server.shutdownTimeout
setting. During that period, the incoming socket is closed and any new incoming requests are rejected. Before this update, new incoming requests received a response with the status code 503 and body {"message": "Kibana is shutting down and not accepting new incoming requests"}
. For more information, refer to #180986.
Deprecations
editThe following functionality is deprecated in 8.16.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.16.0.
New versions of Kibana for macOS x86_64 will end after 8.17.
Details
New versions of Kibana builds for macOS x86_64 are deprecated and will no longer be released after 8.17. Kibana for macOS AArch64 is unaffected.
Use Docker to run new versions of Kibana on macOS 86x_64.
The Logs Stream is now hidden by default in favor of the Logs Explorer app.
Details
You can find the Logs Explorer app in the navigation menu under Logs > Explorer, or as a separate tab in Discover. For more information, refer to (#194519).
Impact
You can still show the Logs Stream app again by navigating to Stack Management > Advanced Settings and by enabling the observability:enableLogsStream
setting.
Deprecates the Observability AI Assistant specific advanced setting observability:aiAssistantLogsIndexPattern
.
Details
The Observability AI Assistant specific advanced setting for Logs index patterns observability:aiAssistantLogsIndexPattern
is deprecated and no longer used. The AI Assistant will now use the existing Log sources setting observability:logSources
instead. For more information, refer to (#192003).
Features
editKibana 8.16.0 adds the following new and notable features.
- AGPL license
-
- Adds AGPL 3.0 license (#192025).
- Alerting
- Cases
-
- Support TheHive connector in cases (#180931).
- Dashboards and visualizations
-
- Adds the ability to star your favorite dashboards and quickly find them (#189285).
- Adds a chart showing usage statistics to the dashboard details (#187993).
- Adds metric styling options in Lens (#186929).
- Adds support for coloring table cells by terms with color mappings assignments. This is supported for both Rows and Metric dimensions (#189895).
- Data ingestion and Fleet
-
- Support content packages in UI (#195831).
- Advanced agent monitoring options UI for HTTP endpoint and diagnostics (#193361).
- Adds option to have Kafka dynamic topics in outputs (#192720).
- Adds support for GeoIP processor databases in Ingest Pipelines (#190830).
- Adds agentless ux creation flow (#189932).
- Enable feature flag for reusable integration policies (#187153).
- Discover
-
- When writing ES|QL queries, you now get recommendations to help you get started (#194418).
- Enhances the inline documentation experience in ES|QL mode (#192156).
- Adds the ability to break down the histogram by field for ES|QL queries in Discover (#193820).
- Adds a summary column to the Documents table when exploring log data in Discover (#192567).
- Adds row indicators to the Documents table when exploring log data in Discover (#190676).
- Moves the button to switch between ES|QL and classic modes to the toolbar (#188898).
- Adds density settings to allow further customization of the Documents table layout (#188495).
- Enables the time picker for indices without the @timestamp field when editing ES|QL queries (#184361).
- Elastic Observability solution
-
- Adds experimental logs overview to the observability hosts and service overviews (#195673).
- Show alerts for entities (#195250).
- Create sub-feature role to manage APM settings write permissions (#194419).
- Adds related alerts tab to the alert details page (#193263).
- Adds labels field !! (#193250).
- Implement _ignored root cause identification flow (#192370).
- Enable page for synthetics (#191846).
- Settings add config to enable default rules (#190800).
- Added alerts page (#190751).
- Monitor list add bulk delete (#190674).
- Delete monitor API via id param !! (#190210).
- Enable metrics and traces in the Data Set Quality page (#190043).
- Adds alert grouping functionality to the observability alerts page (#189958).
- Adds a new SLO Burn Rate embeddable (#189429).
- The Slack Web API Alert Connector is now supported as a default connector for Synthetics and Uptime rules (#188437).
- Adds option to enable backfill transform (#188379).
- Save the ECS group by fields at the AAD root level (#188241).
- Adds last value aggregation (#187082).
- Improve synthetics alerting (#186585).
- Make overview grid embeddable (#160597).
- Elastic Security solution
- For the Elastic Security 8.16.0 release information, refer to Elastic Security Solution Release Notes.
- Kibana security
-
-
Adds an API endpoint
POST security/roles
that can be used to bulk create or update roles (#189173). - Automatic Import can now create integrations for logs in the CSV format (#194386).
- Adds an error handling framework to Automatic Import that provides error messages with more context to user (#193577).
- When running in FIPS mode, Kibana forbids usage of PKCS12 configuration options (#192627).
-
Adds an API endpoint
- Machine Learning
-
- Adds new section for creating daylight saving time calendar events (#193605).
- Anomaly Detection: Adds a page to list supplied job configurations (#191564).
- Redesigns start/update model deployment dialog to support adaptive resources (#190243).
- File upload: Adds support for PDF files (#186956).
- Adds Pattern analysis embeddable for dashboards (#186539).
- Management
-
- This release introduces a fresh, modern look for the console, now featuring the Monaco editor. We’ve added a file import and export functionality, and the console is fully responsive with stackable panels for a smoother experience. New buttons allow for quick clearing of editor values and output. Additionally, the history and config tabs were improved to enhance usability. (#189748).
For more information about the features introduced in 8.16.0, refer to What’s new in 8.16.
On this page