Kibana 8.16.0

edit

For information about the Kibana 8.16.0 release, review the following information.

Deprecations

edit

The following functionality is deprecated in 8.16.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.16.0.

The Logs Stream is now hidden by default in favor of the Logs Explorer app.

Details
You can find the Logs Explorer app in the navigation menu under Logs > Explorer, or as a separate tab in Discover. For more information, refer to (#194519).

Impact
You can still show the Logs Stream app again by navigating to Stack Management > Advanced Settings and by enabling the observability:enableLogsStream setting.

Deprecates the Observability AI Assistant specific advanced setting observability:aiAssistantLogsIndexPattern.

Details
The Observability AI Assistant specific advanced setting for Logs index patterns observability:aiAssistantLogsIndexPattern is deprecated and no longer used. The AI Assistant will now use the existing Log sources setting observability:logSources instead. For more information, refer to (#192003).

Features

edit

Kibana 8.16.0 adds the following new and notable features.

AGPL license
Alerting
  • Adds TheHive connector (#180138).
  • Adds flapping settings per rule (#189341).
  • Efficiency improvements in the Kibana task manager and alerting frameworks (#188194)
Cases
  • Support TheHive connector in cases (#180931).
Dashboards and visualizations
  • Adds the ability to star your favorite dashboards and quickly find them (#189285).
  • Adds a chart showing usage statistics to the dashboard details (#187993).
  • Adds metric styling options in Lens (#186929).
  • Adds support for coloring table cells by terms with color mappings assignments. This is supported for both Rows and Metric dimensions (#189895).
Data ingestion and Fleet
  • Support content packages in UI (#195831).
  • Advanced agent monitoring options UI for HTTP endpoint and diagnostics (#193361).
  • Adds option to have Kafka dynamic topics in outputs (#192720).
  • Adds support for GeoIP processor databases in Ingest Pipelines (#190830).
  • Adds agentless ux creation flow (#189932).
  • Enable feature flag for reusable integration policies (#187153).
Discover
  • When writing ES|QL queries, you now get recommendations to help you get started (#194418).
  • Enhances the inline documentation experience in ES|QL mode (#192156).
  • Adds the ability to break down the histogram by field for ES|QL queries in Discover (#193820).
  • Adds a summary column to the Documents table when exploring log data in Discover (#192567).
  • Adds row indicators to the Documents table when exploring log data in Discover (#190676).
  • Moves the button to switch between ES|QL and classic modes to the toolbar (#188898).
  • Adds density settings to allow further customization of the Documents table layout (#188495).
  • Enables the time picker for indices without the @timestamp field when editing ES|QL queries (#184361).
Elastic Observability solution
  • Show monitors from all permitted spaces !! (#196109).
  • Adds experimental logs overview to the observability hosts and service overviews (#195673).
  • Show alerts for entities (#195250).
  • Create sub-feature role to manage APM settings write permissions (#194419).
  • Adds related alerts tab to the alert details page (#193263).
  • Adds labels field !! (#193250).
  • Implement _ignored root cause identification flow (#192370).
  • Enable page for synthetics (#191846).
  • Settings add config to enable default rules (#190800).
  • Added alerts page (#190751).
  • Monitor list add bulk delete (#190674).
  • Delete monitor API via id param !! (#190210).
  • Enable metrics and traces in the Data Set Quality page (#190043).
  • Adds alert grouping functionality to the observability alerts page (#189958).
  • Adds a new SLO Burn Rate embeddable (#189429).
  • The Slack Web API Alert Connector is now supported as a default connector for Synthetics and Uptime rules (#188437).
  • Adds option to enable backfill transform (#188379).
  • Save the ECS group by fields at the AAD root level (#188241).
  • Adds last value aggregation (#187082).
  • Improve synthetics alerting (#186585).
  • Make overview grid embeddable (#160597).
Elastic Security solution
For the Elastic Security 8.16.0 release information, refer to Elastic Security Solution Release Notes.
Kibana security
  • Adds an API endpoint POST security/roles that can be used to bulk create or update roles (#189173).
  • Automatic Import can now create integrations for logs in the CSV format (#194386).
  • Adds an error handling framework to Automatic Import that provides error messages with more context to user (#193577).
  • When running in FIPS mode, Kibana forbids usage of PKCS12 configuration options (#192627).
Machine Learning
  • Adds new section for creating daylight saving time calendar events (#193605).
  • Anomaly Detection: Adds a page to list supplied job configurations (#191564).
  • Redesigns start/update model deployment dialog to support adaptive resources (#190243).
  • File upload: Adds support for PDF files (#186956).
  • Adds Pattern analysis embeddable for dashboards (#186539).
Management
  • This release introduces a fresh, modern look for the console, now featuring the Monaco editor. We’ve added a file import and export functionality, and the console is fully responsive with stackable panels for a smoother experience. New buttons allow for quick clearing of editor values and output. Additionally, the history and config tabs were improved to enhance usability. (#189748).

For more information about the features introduced in 8.16.0, refer to What’s new in 8.16.