Skip to content

Commit 63da9d6

Browse files
authored
Merge branch 'main' into stefnestor-patch-2
2 parents 1199074 + 7963186 commit 63da9d6

File tree

7 files changed

+23
-41
lines changed

7 files changed

+23
-41
lines changed

explore-analyze/discover/show-field-statistics.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ Explore the fields in your data with the **Field statistics** view in **Discover
1515
* What does the latency look like when one of the containers is down on a Sunday?
1616
* Is the field type and format in the data view appropriate for the data and its cardinality?
1717

18+
:::{note}
19+
Field statistics aren't available when **Discover** is in {{esql}} mode.
20+
:::
21+
1822
This example explores the fields in the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data.
1923

2024
1. Go to **Discover**.
@@ -46,5 +50,5 @@ This example explores the fields in the [sample web logs data](../index.md#gs-ge
4650
:::
4751

4852
7. Explore additional field types to see the statistics that **Discover** provides.
49-
8. To create a visualization of the field data, click ![Click the magnifying glass icon to create a visualization of the data in Lens](/explore-analyze/images/kibana-visualization-icon.png "") or ![Click the Maps icon to explore the data in a map](/explore-analyze/images/kibana-map-icon.png "") in the **Actions** column.
53+
8. To create a Lens visualization of the field data, click ![the magnifying glass icon to create a visualization of the data in Lens](/explore-analyze/images/kibana-visualization-icon.png "") or ![the Maps icon to explore the data in a map](/explore-analyze/images/kibana-map-icon.png "") in the **Actions** column.
5054

explore-analyze/toc.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -257,7 +257,6 @@ toc:
257257
- file: visualize/manage-panels.md
258258
- file: visualize/lens.md
259259
- file: visualize/esorql.md
260-
- file: visualize/field-statistics.md
261260
- file: visualize/custom-visualizations-with-vega.md
262261
- file: visualize/text-panels.md
263262
- file: visualize/image-panels.md

explore-analyze/visualize.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,9 @@ $$$panels-editors$$$
1919
| **Content** | **Panel type** | **Description** |
2020
| --- | --- | --- |
2121
| Visualizations | [Lens](visualize/lens.md) | Create powerful [charts](visualize/supported-chart-types.md) in {{kib}}. This is the default editor. |
22-
| | [ES|QL](/explore-analyze/query-filter/languages/esql-kibana.md) | Create visualizations from ES|QL queries |
22+
| | [{{esql}}](/explore-analyze/query-filter/languages/esql-kibana.md) | Create visualizations from {{esql}} queries |
2323
| | [Maps](visualize/maps.md) | Create beautiful displays of your geographical data |
2424
| | [Alerts](visualize/alert-panels.md) | View Observability or Security alerts in your dashboard |
25-
| | [Field statistics](visualize/field-statistics.md) | Add a field statistics view of your data to your dashboards |
2625
| | [Custom visualizations](visualize/custom-visualizations-with-vega.md) | Use Vega to create new types of visualizations |
2726
| | | |
2827
| Annotations and navigation | [Collapsible sections](dashboards/arrange-panels.md#collapsible-sections) | Organize your dashboard into sections that can be collapsed and save loading time |

explore-analyze/visualize/field-statistics.md

Lines changed: 0 additions & 26 deletions
This file was deleted.

solutions/observability/infra-and-hosts/get-started-with-universal-profiling.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,9 @@ If you’re upgrading from a previous version with Universal Profiling enabled,
8787

8888

8989
### Programmatic configuration [profiling-configure-data-ingestion-programmatic]
90+
```{applies_to}
91+
stack: ga 9.2
92+
```
9093

9194
If you prefer to configure data ingestion programmatically, you can use a Kibana API call. This call can be made either through the "Dev Tools" console in Kibana or with any standalone HTTP client (such as `curl` or `wget`). In both cases, the API call must be executed using the `elastic` user credentials to ensure the necessary permissions.
9295

@@ -95,15 +98,15 @@ A successful API call will return a `202 Accepted` response with an empty body.
9598
To configure data ingestion from the console, go to **Dev Tools** in the navigation menu and run the following command:
9699

97100
```console
98-
POST kbn:/internal/profiling/setup/es_resources
101+
POST kbn:/api/profiling/setup/es_resources
99102
{}
100103
```
101104

102105
To configure data ingestion programmatically using a standalone HTTP client (e.g., `curl`), run the following command:
103106

104107
```console
105108
curl -u elastic:<PASSWORD> -H "kbn-xsrf: true" -H "Content-Type: application/json" \
106-
--data "{}" "https://<kibana-host>:<kibana-port>/internal/profiling/setup/es_resources"
109+
--data "{}" "https://<kibana-host>:<kibana-port>/api/profiling/setup/es_resources"
107110
```
108111

109112

solutions/search/vector/knn.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ The default type of {{es-serverless}} project is suitable for this use case unle
4949
Refer to [](dense-vector.md#vector-profiles).
5050
:::
5151

52-
## kNN search methods: approxiamte and exact kNN [knn-methods]
52+
## kNN search methods: approximate and exact kNN [knn-methods]
5353

5454
{{es}} supports two methods for kNN search:
5555

@@ -1224,7 +1224,7 @@ This example will:
12241224
* Search using approximate kNN for the top 100 candidates.
12251225
* Rescore the top 20 candidates (`oversample * k`) per shard using the original, non quantized vectors.
12261226
* Return the top 10 (`k`) rescored candidates.
1227-
* Merge the rescored canddidates from all shards, and return the top 10 (`k`) results.
1227+
* Merge the rescored candidates from all shards, and return the top 10 (`k`) results.
12281228

12291229
#### Additional rescoring techniques [dense-vector-knn-search-rescoring-rescore-additional]
12301230

solutions/security/detect-and-alert/add-manage-exceptions.md

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -78,6 +78,9 @@ You can add exceptions to a rule from the rule details page, the Alerts table, t
7878
When you create a new exception from an alert, exception conditions are auto-populated with relevant alert data. Data from custom highlighted fields is listed first. A comment that describes the auto-generated exception conditions is also added to the **Add comments** section.
7979
::::
8080
81+
::::{note}
82+
When using ES|QL, you can append new fields with commands such as [`EVAL`](https://www.elastic.co/docs/reference/query-languages/esql/commands/eval), but you can't apply exceptions to these appended fields. Exceptions are only applied to the index source fields.
83+
::::
8184
8285
1. **Field**: Select a field to identify the event being filtered.
8386
@@ -125,9 +128,9 @@ You can add exceptions to a rule from the rule details page, the Alerts table, t
125128
:screenshot:
126129
:::
127130
128-
4. Click **AND** or **OR** to create multiple conditions and define their relationships.
129-
5. Click **Add nested condition** to create conditions using nested fields. This is only required for [these nested fields](#nested-field-list). For all other fields, nested conditions should not be used.
130-
6. Choose to add the exception to a rule or a shared exception list.
131+
5. Click **AND** or **OR** to create multiple conditions and define their relationships.
132+
6. Click **Add nested condition** to create conditions using nested fields. This is only required for [these nested fields](#nested-field-list). For all other fields, nested conditions should not be used.
133+
7. Choose to add the exception to a rule or a shared exception list.
131134
132135
::::{note}
133136
If you are creating an exception from the Shared Exception Lists page, you can add the exception to multiple rules.
@@ -138,14 +141,14 @@ You can add exceptions to a rule from the rule details page, the Alerts table, t
138141
If a shared exception list doesn’t exist, you can [create one](create-manage-shared-exception-lists.md) from the Shared Exception Lists page.
139142
::::
140143
141-
7. (Optional) Enter a comment describing the exception.
142-
8. (Optional) Enter a future expiration date and time for the exception.
143-
9. Select one of the following alert actions:
144+
8. (Optional) Enter a comment describing the exception.
145+
9. (Optional) Enter a future expiration date and time for the exception.
146+
10. Select one of the following alert actions:
144147
145148
* **Close this alert**: Closes the alert when the exception is added. This option is only available when adding exceptions from the Alerts table.
146149
* **Close all alerts that match this exception and were generated by this rule**: Closes all alerts that match the exception’s conditions and were generated only by the current rule.
147150
148-
10. Click **Add rule exception**.
151+
11. Click **Add rule exception**.
149152
150153
151154
## Add {{elastic-endpoint}} exceptions [endpoint-rule-exceptions]

0 commit comments

Comments
 (0)