Serverless changelog
editServerless changelog
editReview the latest improvements and changes to Elastic Cloud Serverless.
For serverless API changes, refer to APIs Changelog.
For serverless changes in Cloud Console, refer to Elasticsearch Service Documentation: Release notes.
January 27, 2025
editDeprecation
edit- Deprecates a subset of Elastic Security Serverless endpoint management APIs (#206903).
Features and enhancements
edit- Breaks out timeline and note privileges in Elastic Security Serverless (#201780).
- Adds service enrichment to the detection engine in Elastic Security Serverless (#206582).
- Updates the Entity Store Dashboard to prompt for the Service Entity Type in Elastic Security Serverless (#207336).
-
Adds
enrichPolicyExecutionInterval
to entity enablement and initialization APIs in Elastic Security Serverless (#207374). - Introduces a lookback period configuration for the Entity Store in Elastic Security Serverless (#206421).
-
Allows pre-configured connectors to opt into exposing their configurations by setting
exposeConfig
in Alerting (#207654). - Adds selector syntax support to log source profiles in Elastic Observability Serverless (#206937).
- Displays stack traces in the logs overview tab in Elastic Observability Serverless (#204521).
- Enables the use of the rule form to create rules in Elastic Observability Serverless (#206774).
- Checks only read privileges of existing indices during rule execution in Elastic Security Serverless (#177658).
- Updates KNN search and query template autocompletion in Elasticsearch Serverless (#207187).
- Updates JSON schemas for code editors in Machine Learning (#207706).
-
Reindexes the
.kibana_security_session_1
index to the 8.x format in Security (#204097).
Fixes
edit- Fixes editing alerts filters for multi-consumer rule types in Alerting (#206848).
- Resolves an issue where Chrome was no longer hidden for reports in Dashboards and Visualizations (#206988).
- Updates library transforms and duplicate functionality in Dashboards and Visualizations (#206140).
- Fixes an issue where drag previews are now absolutely positioned in Dashboards and Visualizations (#208247).
- Fixes an issue where an accessible label now appears on the range slider in Dashboards and Visualizations (#205308).
- Fixes a dropdown label sync issue when sorting by "Type" (#206424).
- Fixes an access bug related to user instructions in Elastic Observability Serverless (#207069).
- Fixes the Open Explore in Discover link to open in a new tab in Elastic Observability Serverless (#207346).
- Returns an empty object for tool arguments when none are provided in Elastic Observability Serverless (#207943).
- Ensures similar cases count is not fetched without the proper license in Elastic Security Serverless (#207220).
- Fixes table leading actions to use standardized colors in Elastic Security Serverless (#207743).
- Adds missing fields to the AWS S3 manifest in Elastic Security Serverless (#208080).
- Prevents redundant requests when loading Discover sessions and toggling chart visibility in ES|QL (#206699).
- Fixes a UI error when agents move to an orphaned state in Fleet (#207746).
- Restricts non-local Elasticsearch output types for agentless integrations and policies in Fleet (#207296).
- Fixes table responsiveness in the Notifications feature of Machine Learning (#206956).
January 13, 2025
editDeprecations
edit- Remove all legacy risk engine code and features (#201810).
Features and enhancements
edit- Adds last alert status change to Elastic Security Serverless flyout (#205224).
- Case templates are now GA (#205940).
- Adds format to JSON messages in Elastic Observability Serverless Logs profile (#205666).
- Adds inference connector in Elastic Security Serverless AI features (#204505).
- Adds inference connector for Auto Import in Elastic Security Serverless (#206111).
- Adds Feature Flag Support for Cloud Security Posture Plugin in Elastic Security Serverless (#205438).
- Adds the ability to sync Machine Learning saved objects to all spaces (#202175).
- Improves messages for recovered alerts in Machine Learning Transforms (#205721).
Fixes
edit- Fixes an issue where "KEEP" columns are not applied after an Elasticsearch error in Discover (#205833).
- Resolves padding issues in the document comparison table in Discover (#205984).
- Fixes a bug affecting bulk imports for the knowledge base in Elastic Observability Serverless (#205075).
- Enhances the Find API by adding cursor-based pagination (search_after) as an alternative to offset-based pagination (#203712).
- Updates Elastic Observability Serverless to use architecture-specific Elser models (#205851).
- Fixes dynamic batching in the timeline for Elastic Security Serverless (#204034).
- Resolves a race condition bug in Elastic Security Serverless related to OpenAI errors (#205665).
- Improves the integration display by ensuring all policies are listed in Elastic Security Serverless (#205103).
- Renames color variables in the user interface for better clarity and consistency (#204908).
- Allows editor suggestions to remain visible when the inline documentation flyout is open in ES|QL (#206064).
- Ensures the same time range is applied to documents and the histogram in ES|QL (#204694).
- Fixes validation for the "required" field in multi-text input fields in Fleet (#205768).
- Fixes timeout issues for bulk actions in Fleet (#205735).
- Handles invalid RRule parameters to prevent infinite loops in alerts (#205650).
- Fixes privileges display for features and sub-features requiring "All Spaces" permissions in Fleet (#204402).
- Prevents password managers from modifying disabled input fields (#204269).
- Updates the listing control in the user interface (#205914).
- Improves consistency in the help dropdown design (#206280).
January 6, 2025
editDeprecations
editFeatures and enhancements
edit- Introduces case observables in Elastic Security Serverless (#190237).
- Adds a JSON field called "additional fields" to ServiceNow cases when sent using connector, containing the internal names of the ServiceNow table columns (#201948).
- Adds the ability to configure the appearance color mode to sync dark mode with the system value (#203406).
- Makes the "Copy" action visible on cell hover in Discover (#204744).
-
Updates the
EnablementModalCallout
name toAdditionalChargesMessage
in Elastic Security Serverless (#203061). - Adds more control over which Elastic Security Serverless alerts in Attack Discovery are included as context to the large language model (#205070).
- Adds a consistent layout and other UI enhancements for machine learning pages (#203813).
Fixes
edit- Fixes an issue that caused dashboards to lag when dragging the time slider (#201885).
- Updates the CloudFormation template to the latest version and adjusts the documentation to reflect the use of a single Firehose stream created by the new template (#204185).
- Fixes Integration and Datastream name validation in Elastic Security Serverless (#204943).
-
Fixes an issue in the Automatic Import process where there is now inclusion of the
@timestamp
field in ECS field mappings whenever possible (#204931). -
Allows Automatic Import to safely parse Painless field names that are not valid Painless identifiers in
if
contexts (#205220). - Aligns the Box Native Connector configuration fields with the source of truth in the connectors codebase, correcting mismatches and removing unused configurations (#203241).
- Fixes the "Show all agent tags" option in Fleet when the agent list is filtered (#205163).
- Updates the Results Explorer flyout footer buttons alignment in Data Frame Analytics (#204735).
- Adds a missing space between lines in the Data Frame Analytics delete job modal (#204732).
- Fixes an issue where the Refresh button in the Anomaly Detection Datafeed counts table was unresponsive (#204625).
- Fixes the inference timeout check in File Upload (#204722).
- Fixes the side bar navigation for the Data Visualizer (#205170).
December 16, 2024
editDeprecations
edit-
Deprecates the
discover:searchFieldsFromSource
setting (#202679). - Disables scripted field creation in the Data Views management page (#202250).
-
Removes all logic based on the following settings:
xpack.reporting.roles.enabled
,xpack.reporting.roles.allow
(#200834). - Removes the legacy table from Discover (#201254).
- Deprecates ephemeral tasks from action and alerting plugins (#197421).
Features and enhancements
edit- Optimizes the Kibana Trained Models API (#200977).
- Adds a Create Case action to the Log rate analysis page (#201549).
- Improves AI Assistant’s response quality by giving it access to Elastic’s product documentation (#199694).
- Adds support for suppressing EQL sequence alerts (#189725).
- Adds an Advanced settings section to the SLO form (#200822).
-
Adds a new sub-feature privilege under Synthetics and Uptime
Can manage private locations
(#201100).
Fixes
edit- Fixes point visibility regression (#202358).
- Improves help text of creator and view count features on dashboard listing page (#202488).
- Highlights matching field values when performing a KQL search on a keyword field (#201952).
- Supports "Inspect" in saved search embeddables (#202947).
- Fixes your ability to clear the user-specific system prompt (#202279).
- Fixes error when opening rule flyout (#202386).
- Fixes to Ops Genie as a default connector (#201923).
- Fixes actions on charts (#202443).
- Adds flyout to table view in Infrastructure Inventory (#202646).
-
Fixes service names with spaces not being URL encoded properly for
context.viewInAppUrl
(#202890). - Allows access query logic to handle user ID and name conditions (#202833).
- Fixes APM rule error message for invalid KQL filter (#203096).
- Rejects CEF logs from Automatic Import and redirects you to the CEF integration instead (#201792).
- Updates the install rules title and message (#202226).
- Fixes error on second entity engine init API call (#202903).
- Restricts unsupported log formats (#202994).
- Removes errors related to Enterprise Search nodes (#202437).
- Improves web crawler name consistency (#202738).
- Fixes editor cursor jumpiness (#202389).
- Fixes rollover datastreams on subobjects mapper exception (#202689).
- Fixes spaces sync to retrieve 10,000 trained models (#202712).
- Fixes log rate analysis embeddable error on the Alerts page (#203093).
- Fixes Slack API connectors not displayed under Slack connector type when adding new connector to rule (#202315).
December 9, 2024
editFeatures and enhancements
edit- Elastic Observability Serverless adds a new sub-feature for managing private locations (#201100).
- Elastic Observability Serverless adds the ability to configure SLO advanced settings from the UI (#200822).
- Elastic Security Serverless adds support for suppressing EQL sequence alerts (#189725).
-
Elastic Security Serverless adds a
/trained_models_list
endpoint to retrieve complete data for the Trained Model UI (#200977). - Machine Learning adds an action to include log rate analysis in a case (#199694).
- Machine Learning enhances the Kibana API to optimize trained models (#201549).
Fixes
edit- Fixes Slack API connectors not being displayed under the Slack connector type when adding a new connector to a rule in Alerting (#202315).
- Fixes point visibility regression in dashboard visualizations (#202358).
- Improves help text for creator and view count features on the Dashboard listing page (#202488).
- Highlights matching field values when performing a KQL search on a keyword field in Discover (#201952).
- Adds support for the Inspect option in saved search embeddables in Discover (#202947).
- Enables the ability to clear user-specific system prompts in Elastic Observability Serverless (#202279).
- Fixes an error when opening the rule flyout in Elastic Observability Serverless (#202386).
- Improves handling of Opsgenie as the default connector in Elastic Observability Serverless (#201923).
- Fixes issues with actions on charts in Elastic Observability Serverless (#202443).
- Adds a flyout to the table view in Infrastructure Inventory in Elastic Observability Serverless (#202646).
- Fixes service names with spaces not being URL-encoded properly for {{context.viewInAppUrl}} in Elastic Observability Serverless (#202890).
- Enhances access query logic to handle user ID and name conditions in Elastic Observability Serverless (#202833).
- Fixes an APM rule error message when a KQL filter is invalid in Elastic Observability Serverless (#203096).
- Restricts and rejects CEF logs in automatic import and redirects them to the CEF integration in Elastic Security Serverless (#201792).
- Updates the copy of the install rules title and message in Elastic Security Serverless (#202226).
- Clears errors on the second entity engine initialization API call in Elastic Security Serverless (#202903).
- Restricts unsupported log formats in Elastic Security Serverless (#202994).
- Removes errors related to Enterprise Search nodes in Elasticsearch Serverless (#202437).
- Ensures consistency in web crawler naming in Elasticsearch Serverless (#202738).
- Fixes editor cursor jumpiness in ES|QL (#202389).
- Implements rollover of data streams on subobject mapper exceptions in Fleet (#202689).
- Fixes trained models to retrieve up to 10,000 models when spaces are synced in Machine Learning (#202712).
- Fixes a Log Rate Analysis embeddable error on the Alerts page in AiOps (#203093).
December 3, 2024
editFeatures and enhancements
edit- Adds tabs for Import Entities and Engine Status to the Entity Store (#201235).
- Adds status tracking for agentless integrations to Fleet (#199567).
- Adds a new machine learning module that can detect anomalous activity in host-based logs (#195582).
- Allows custom Mapbox Vector Tile sources to style map layers and provide custom legends (#200656).
- Excludes stale SLOs from counts of healthy and violated SLOs (#201027).
- Adds a Continue without adding integrations button to the Elastic Security Dashboards page that takes you to the Entity Analytics dashboard (#201363).
- Displays visualization descriptions under their titles (#198816).
Fixes
edit- Hides the Clear button when no filters are selected (#200177).
- Fixes a mismatch between how wildcards were handled in previews versus actual rule executions (#201553).
- Fixes incorrect Y-axis and hover values in the Service Inventory’s Log rate chart (#201361).
- Disables the Add note button in the alert details flyout for users who lack privileges (#201707).
- Fixes the descriptions of threshold rules that use cardinality (#201162).
- Disables the Install All button on the Add Elastic Rules page when rules are installing (#201731).
- Reintroduces a data usage warning on the Entity Analytics Enablement modal (#201920).
- Improves accessibility for the Create a connector page (#201590).
- Fixes a bug that could cause Elastic Agents to get stuck updating during scheduled upgrades (#202126).
- Fixes a bug related to starting machine learning deployments with autoscaling and no active nodes (#201256).
- Initializes saved objects when the Trained Model page loads (#201426).
- Fixes the display of deployment stats for unallocated deployments of machine learning models (#202005).
- Enables the solution type search for instant deployments (#201688).
- Improves the consistency of alert counts across different views (#202188).