You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
### Features and enhancements [elastic-observability-900-features-enhancements]
25
-
26
-
###Fixes [elastic-observability-900-fixes]
24
+
### Fixes [elastic-observability-900-fixes]
25
+
* Fixes chat on the Alerts page ({{kibana-pull}}197126[#197126])
26
+
* Fixes an error that could prevent the Observability Infrastructure Inventory view from loading after an upgrade due to missing versioning on inventory_view_saved_object ({{kibana-pull}}207007[#207007])
Copy file name to clipboardExpand all lines: release-notes/elastic-security/known-issues.md
+5-1Lines changed: 5 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,6 +24,10 @@ Known issues are significant defects or limitations that may impact your impleme
24
24
**Elastic Stack versions: 9.0.0**
25
25
26
26
On November 12, 2024, it was discovered that manually running threshold rules could produce duplicate alerts if the date range was already covered by a scheduled rule execution.
27
-
28
27
:::
29
28
29
+
:::{dropdown} Manually running custom query rules with suppression could suppress more alerts than expected
30
+
**Elastic Stack versions: 9.0.0**
31
+
32
+
On November 12, 2024, it was discovered that manually running a custom query rule with suppression could incorrectly inflate the number of suppressed alerts.
Copy file name to clipboardExpand all lines: release-notes/elastic-security/release-notes.md
+12Lines changed: 12 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,5 +25,17 @@ To check for security updates, go to [Security announcements for the Elastic sta
25
25
**Release date:** April 1, 2025
26
26
27
27
### Features and enhancements [elastic-security-900-features-enhancements]
28
+
* Enables Automatic Import to accept CEL log samples ({{kibana-pull}}206491[#206491])
29
+
* Applies the latest Elastic UI framework (EUI) to {{elastic-sec}} features ({{kibana-pull}}204007[#204007]) and ({{kibana-pull}}204908[#204908])
30
+
* Adds the option to view {es} queries that run during rule execution for threshold, custom query, and {{ml}} rules ({{kibana-pull}}203320[#203320])
31
+
* Enables Automatic Import to accept CEL log samples ({{kibana-pull}}206491[#206491])
32
+
* Applies the latest Elastic UI framework (EUI) to {{elastic-sec}} features ({{kibana-pull}}204007[#204007]) and ({{kibana-pull}}204908[#204908])
33
+
* Adds the option to view {{es}} queries that run during rule execution for threshold, custom query, and {{ml}} rules ({{kibana-pull}}203320[#203320])
34
+
* Enhances Automatic Import by including setup and troubleshooting documentation for each input type that's selected in the readme ({{kibana-pull}}206477[#206477])
35
+
* Allows users to include `closed` alerts in risk score calculations ({{kibana-pull}}201909[#201909])
36
+
* Adds the ability to continue to the Entity Analytics dashboard when there is no data ({{kibana-pull}}201363[#201363])
37
+
* Modifies the privilege-checking behavior during rule execution. Now, only read privileges of extant indices are checked during rule execution ({{kibana-pull}}177658[#177658])
28
38
29
39
### Fixes [elastic-security-900-fixes]
40
+
* Ensures that table actions use standard colors ({{kibana-pull}}207743[#207743])
41
+
* Fixes a bug with the **Save and continue** button on a {fleet} form ({{kibana-pull}}211563[#211563])
Removed `GET/POST/DELETE /epm/packages/:pkgkey` APIs in favor of the `GET/POST/DELETE /epm/packages/:pkgName/:pkgVersion`.
25
+
26
+
**Impact**<br>
27
+
* Removed `experimental` query parameter in `GET /epm/packages` and `GET /epm/categories`
28
+
* Removed `response` in response in `* /epm/packages*` and `GET /epm/categories`
29
+
* Removed `savedObject` in `/epm/packages` response in favor of `installationInfo`
30
+
31
+
For more information, check ({{kibana-pull}}198434[#198434]).
32
+
::::
33
+
34
+
::::{dropdown} Removed deprecated Fleet APIs for agents endpoints
35
+
Removed the following API endpoints:
36
+
37
+
*`POST /service-tokens` in favor of `POST /service_tokens`
38
+
*`GET /agent-status` in favor `GET /agent_status`
39
+
*`PUT /agents/:agentid/reassign` in favor of `POST /agents/:agentid/reassign`
40
+
41
+
Removed deprecated parameters or responses:
42
+
43
+
* Removed `total` from `GET /agent_status` response
44
+
* Removed `list` from `GET /agents` response
45
+
46
+
For more information, check ({{kibana-pull}}198313[#198313]).
47
+
::::
48
+
49
+
::::{dropdown} Removed `cloud defend` support for {{agent}}
50
+
Support for `cloud-defend` (Defend for Containers) has been removed. The package has been removed from the {{agent}} packaging scripts and template Kubernetes files.
51
+
52
+
For more information, check ({{agent-pull}}5481[#5481]).
53
+
::::
54
+
55
+
::::{dropdown} Removed `username` and `password` default values for {{agent}}
56
+
The default values for `username` and `password` have been removed for when {{agent}} is running in container mode. The {es} `api_key` can now be set in that mode using the `ELASTICSEARCH_API_KEY` environment variable.
57
+
58
+
For more information, check ({{agent-pull}}5536[#5536]).
59
+
::::
60
+
61
+
::::{dropdown} Changed Ubuntu-based Docker images for {{agent}}
62
+
The default Ubuntu-based Docker images used for {{agent}} have been changed to UBI-minimal-based images, to reduce the overall footprint of the agent Docker images and to improve compliance with enterprise standards.
63
+
64
+
For more information, check ({{agent-pull}}6427[#6427]).
65
+
::::
66
+
67
+
::::{dropdown} Removed `--path.install` flag declaration from {{agent}} `paths` command
68
+
The deprecated `--path.install` flag declaration has been removed from the {{agent}} `paths` command and its use removed from the `container` and `enroll` commands.
69
+
70
+
For more information, check ({{agent-pull}}6461[#6461]) and ({{agent-pull}}2489[#2489]).
71
+
::::
72
+
73
+
::::{dropdown} Changed the default {{agent}} installation and upgrade
74
+
The default {{agent}} installation and ugprade have been changed to include only the `agentbeat`, `endpoint-security` and `pf-host-agent` components. Additional components can be included using flags.
75
+
76
+
For more information, check ({{agent-pull}}6542[#6542]).
77
+
::::
78
+
79
+
::::{dropdown} Removed deprecated settings API endpoints in Fleet
80
+
*`GET/DELETE/POST enrollment-api-keys`: removed in favor of `GET/DELETE/POST enrollment_api_keys`
81
+
* Removed `list` property from `GET enrollment_api_keys` response in favor of `items`
82
+
*`GET/POST /settings`: `fleet_server_hosts` was removed from the response and body
83
+
84
+
For more information, check ({{kibana-pull}}198799[#198799]).
85
+
::::
86
+
87
+
::::{dropdown} Removed deprecated settings API endpoints in Fleet
88
+
*`GET/DELETE/POST enrollment-api-keys`: removed in favor of `GET/DELETE/POST enrollment_api_keys`
89
+
* Removed `list` property from `GET enrollment_api_keys` response in favor of `items`
90
+
*`GET/POST /settings`: `fleet_server_hosts` was removed from the response and body
91
+
92
+
For more information, check ({{kibana-pull}}198799[#198799]).
93
+
::::
94
+
95
+
::::{dropdown} Removed deprecated `topics` property for kafka output in favor of the `topic` property
96
+
Removed deprecated property `topics` from output APIs in response and requests (`(GET|POST|PUT) /api/fleet/outputs`) in favor of the `topic` property.
97
+
For more information, check ({{kibana-pull}}199226[#199226]).
98
+
::::
99
+
100
+
::::{dropdown} Limit pagination size to 100 when retrieving full policy or `withAgentCount` in Fleet
101
+
In addition to the new pagination limit size of 100, retrieving agent policies without agent count is now the new default behavior, and a new query parameter `withAgentCount` was added to retrieve the agent count.
102
+
103
+
For more information, check ({{kibana-pull}}196887[#196887]).
Copy file name to clipboardExpand all lines: release-notes/fleet-elastic-agent/release-notes.md
+26-1Lines changed: 26 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,9 +29,34 @@ To check for security updates, go to [Security announcements for the Elastic sta
29
29
**Release date:** April 2, 2025
30
30
31
31
### Features and enhancements [fleet-elastic-agent-900-features-enhancements]
32
+
* New setting allowing automatic deletion of unenrolled agents in Fleet settings ({{kibana-pull}}195544[#195544])
33
+
* Adds the Azure Asset Inventory definition to Cloudbeat for {{agent}} {{agent-pull}}5323[#5323]
34
+
* Adds Kubernetes deployment of the Elastic Distribution of OTel Collector named "gateway" to the Helm kube-stack deployment for {{agent}} {{agent-pull}}6444[#6444]
35
+
* Adds the filesource providert to composable inputs. The provider watches for changes of the files and updates the values of the variables when the content of the file changes for {{agent}} {{agent-pull}}6587[#6587] and {{agent-issue}}6362[#6362]
36
+
* Adds the jmxreceiver to the Elastic Distribution of OTel Collector for {{agent}} {{agent-pull}}6601[#6601]
37
+
* Adds support for context variables in outputs as well as a default provider prefix for {{agent}} {{agent-pull}}6602[#6602] and {{agent-issue}}6376[#6376]
38
+
* Adds the Nginx receiver and Redis receiver OTel components for {{agent}} {{agent-pull}}6627[#6627]
39
+
* Adds `--id` (`ELASTIC_AGENT_ID` environment variable for container) and `--replace-token` (`FLEET_REPLACE_TOKEN` environment variable for container) enrollment options for {{agent}} {{agent-pull}}6498[#6498]
40
+
* Updates Go version to 1.22.10 in {{agent}} {{agent-pull}}6236[#6236]
41
+
* Improves filtering and visibility of `Uninstalled` and `Orphaned` agents in {{fleet}}, by differentiating them from `Offline` agents {{kibana-pull}}205815[#205815]
42
+
* Introduces air-gapped configuration for bundled packages in {{fleet}} {{kibana-pull}}202435[#202435]
43
+
* Updates removed parameters of the {{fleet}} -> {{ls}} output configurations {{kibana-pull}}210115[#210115]
44
+
* Updates the maximum supported package version in {{fleet}} {{kibana-pull}}196675[#196675]
45
+
* Replaces the use of `context.TODO` and `context.Background` in logger function calls for most {{fleet-server}} use cases {{fleet-server-pull}}4168[#4168] {{fleet-server-issue}}3087[#3087]
46
+
* Refactor the {{fleet-server}} API constructor to use functional opts instead of a long list of pointers {{fleet-server-pull}}4169[#4169] {{fleet-server-issue}}3823[#3823]
47
+
* Removes the deprecated `policy_throttle` configuration setting in favour of the newer `policy-limit` for {{fleet-server}} {{fleet-server-pull}}4288[#4288]
48
+
* Adds the ability for {{agent}} to enroll using a specific ID {{fleet-server-pull}}4290[#4290] and {{fleet-server-issue}}4226[#4226]
49
+
* Adds the Filebeat receiver into {{agent}} {{agent-pull}}5833[#5833]
50
+
* Updates OTel components to v0.119.0 in {{agent}} {{agent-pull}}6713[#6713]
51
+
% * Removes old bundled.yaml from oas, fixed tags ({{kibana-pull}}194788[#194788])
32
52
33
53
### Fixes [fleet-elastic-agent-900-fixes]
34
-
54
+
* Fixes a validation error that occurs on multi-text input fields in {{fleet}} ({{kibana-pull}}205768[#205768])
55
+
* Adds a context timeout to the bulker flush in {{fleet-server}} so it times out if it takes more time than the deadline {{fleet-server-pull}}3986[#3986]
56
+
* Removes a race condition that may occur when remote {es} outputs are used in {{fleet-server}} {{fleet-server-pull}}4171[#4171]
57
+
* Uses the `chi/middleware.Throttle` package to track in-flight requests and return a 429 response when the limit is reached in {{fleet-server}} {{fleet-server-pull}}4402[#4402] and {fleet-server-issue}4400[#4400]
58
+
* Fixes logical race conditions in the `kubernetes_secrets` provider in {{agent}} {{agent-pull}}6623[#6623]
59
+
* Resolves the proxy to inject into agent component configurations using the Go `http` package in {{agent}} {{agent-pull}}6675[#6675] and {{agent-issue}}6209[#6209]
0 commit comments