Skip to content

Commit cecb9d5

Browse files
nastasha-solomonnastasha-solomon
authored
Merge branch 'main' into issue-362-auto-extract-observeables
2 parents c0d2cf0 + 9dbe82c commit cecb9d5

File tree

45 files changed

+704
-253
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

45 files changed

+704
-253
lines changed

‎deploy-manage/deploy/cloud-enterprise/default-system-deployment-versions.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,10 @@ Note that since version 2.7.0, system deployments are automatically upgraded whe
1616

1717
| {{ece}} version | Admin cluster | Logging & Metrics cluster | Security cluster |
1818
| --- | --- | --- | --- |
19+
| 4.0.2 | 8.18.8 | 8.18.8 | 8.18.8 |
1920
| 4.0.1 | 8.18.2 | 8.18.2 | 8.18.2 |
2021
| 4.0.0 | 8.18.0 | 8.18.0 | 8.18.0 |
22+
| 3.8.2 | 8.17.10 | 8.17.10 | 8.17.10 |
2123
| 3.8.1 | 8.17.4 | 8.17.4 | 8.17.4 |
2224
| 3.8.0 | 8.17.4 | 8.17.4 | 8.17.4 |
2325
| 3.7.3 | 7.17.24 | 7.17.24 | 8.15.2 |

‎deploy-manage/deploy/cloud-enterprise/ece-install-offline-images.md‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@ The first table contains the stack versions shipped with the current {{version.e
1717
| Docker images included with {{ece}} {{version.ece}} |
1818
| --- |
1919
| docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}} |
20-
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2 |
21-
| docker.elastic.co/cloud-release/kibana-cloud:8.18.2 |
22-
| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2 |
23-
| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2 |
24-
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1 |
25-
| docker.elastic.co/cloud-release/kibana-cloud:9.0.1 |
26-
| docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1 |
20+
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8 |
21+
| docker.elastic.co/cloud-release/kibana-cloud:8.18.8 |
22+
| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8 |
23+
| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8 |
24+
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8 |
25+
| docker.elastic.co/cloud-release/kibana-cloud:9.0.8 |
26+
| docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8 |
2727

2828
$$$ece-all-stacks$$$Additional {{stack}} versions are available as Docker images that you can use with ECE. For offline installations, you need to download both the {{stack}} pack and the Docker images for the same version.
2929

@@ -173,11 +173,11 @@ Enterprise Search is not available in versions 9.0+.
173173
| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8 | ECE 3.0.0 |
174174
| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8 | ECE 3.0.0 |
175175
| | |
176-
| [{{es}}, {{kib}}, APM, and Enterprise Search stack pack: 8.18.7](https://download.elastic.co/cloud-enterprise/versions/8.18.7.zip) | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
177-
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.7 | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
178-
| docker.elastic.co/cloud-release/kibana-cloud:8.18.7 | ECE 3.0.0 |
179-
| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.7 | ECE 3.0.0 |
180-
| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.7 | ECE 3.0.0 |
176+
| [{{es}}, {{kib}}, APM, and Enterprise Search stack pack: 8.18.8](https://download.elastic.co/cloud-enterprise/versions/8.18.8.zip) | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
177+
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8 | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
178+
| docker.elastic.co/cloud-release/kibana-cloud:8.18.8 | ECE 3.0.0 |
179+
| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8 | ECE 3.0.0 |
180+
| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8 | ECE 3.0.0 |
181181
| | |
182182
| [{{es}}, {{kib}}, APM, and Enterprise Search stack pack: 8.18.6](https://download.elastic.co/cloud-enterprise/versions/8.18.6.zip) | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
183183
| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.6 | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |

‎deploy-manage/deploy/cloud-enterprise/ece-install-offline-no-registry.md‎

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,13 @@ To perform an offline installation without a private Docker registry, you have t
1919

2020
```sh subs=true
2121
docker pull docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
22-
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2
23-
docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.2
24-
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2
25-
docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2
26-
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1
27-
docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.1
28-
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1
22+
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8
23+
docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.8
24+
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8
25+
docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8
26+
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8
27+
docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.8
28+
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8
2929
```
3030

3131
::::{note}
@@ -36,27 +36,27 @@ To perform an offline installation without a private Docker registry, you have t
3636

3737
```sh subs=true
3838
docker save -o ece.{{version.ece}}.tar docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
39-
docker save -o es.8.18.2.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2
40-
docker save -o kibana.8.18.2.tar docker.elastic.co/cloud-release/kibana-cloud:8.18.2
41-
docker save -o apm.8.18.2.tar docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2
42-
docker save -o enterprise-search.8.18.2.tar docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2
43-
docker save -o es.9.0.1.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1
44-
docker save -o kibana.9.0.1.tar docker.elastic.co/cloud-release/kibana-cloud:9.0.1
45-
docker save -o apm.9.0.1.tar docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1
39+
docker save -o es.8.18.2.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8
40+
docker save -o kibana.8.18.2.tar docker.elastic.co/cloud-release/kibana-cloud:8.18.8
41+
docker save -o apm.8.18.2.tar docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8
42+
docker save -o enterprise-search.8.18.2.tar docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8
43+
docker save -o es.9.0.1.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8
44+
docker save -o kibana.9.0.1.tar docker.elastic.co/cloud-release/kibana-cloud:9.0.8
45+
docker save -o apm.9.0.1.tar docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8
4646
```
4747

4848
3. Copy the .tar files to a location on your network where they are available to each host where you plan to install {{ece}}. Alternatively, you can copy the .tar files to each host directly.
4949
4. On each host, load the images into Docker, replacing `FILE_PATH` with the correct path to the .tar files:
5050

5151
```sh subs=true
5252
docker load < FILE_PATH/ece.{{version.ece}}.tar
53-
docker load < FILE_PATH/es.8.18.2.tar
54-
docker load < FILE_PATH/kibana.8.18.2.tar
55-
docker load < FILE_PATH/apm.8.18.2.tar
56-
docker load < FILE_PATH/enterprise-search.8.18.2.tar
57-
docker load < FILE_PATH/es.9.0.1.tar
58-
docker load < FILE_PATH/kibana.9.0.1.tar
59-
docker load < FILE_PATH/apm.9.0.1.tar
53+
docker load < FILE_PATH/es.8.18.8.tar
54+
docker load < FILE_PATH/kibana.8.18.8.tar
55+
docker load < FILE_PATH/apm.8.18.8.tar
56+
docker load < FILE_PATH/enterprise-search.8.18.8.tar
57+
docker load < FILE_PATH/es.9.0.8.tar
58+
docker load < FILE_PATH/kibana.9.0.8.tar
59+
docker load < FILE_PATH/apm.9.0.8.tar
6060
```
6161

6262
5. Optional: Remove the .tar files after installation.

‎deploy-manage/deploy/cloud-enterprise/ece-install-offline-with-registry.md‎

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -25,13 +25,13 @@ Installing ECE on multiple hosts with your own registry server is simpler, becau
2525

2626
```sh subs=true
2727
docker pull docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
28-
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2
29-
docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.2
30-
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2
31-
docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2
32-
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1
33-
docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.1
34-
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1
28+
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8
29+
docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.8
30+
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8
31+
docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8
32+
docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8
33+
docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.8
34+
docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8
3535
```
3636

3737
::::{note}
@@ -42,26 +42,26 @@ Installing ECE on multiple hosts with your own registry server is simpler, becau
4242

4343
```sh subs=true
4444
docker tag docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}} REGISTRY/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
45-
docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2 REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.2
46-
docker tag docker.elastic.co/cloud-release/kibana-cloud:8.18.2 REGISTRY/cloud-release/kibana-cloud:8.18.2
47-
docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2 REGISTRY/cloud-release/elastic-agent-cloud:8.18.2
48-
docker tag docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2 REGISTRY/cloud-release/enterprise-search-cloud:8.18.2
49-
docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1 REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.1
50-
docker tag docker.elastic.co/cloud-release/kibana-cloud:9.0.1 REGISTRY/cloud-release/kibana-cloud:9.0.1
51-
docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1 REGISTRY/cloud-release/elastic-agent-cloud:9.0.1
45+
docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2 REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.8
46+
docker tag docker.elastic.co/cloud-release/kibana-cloud:8.18.2 REGISTRY/cloud-release/kibana-cloud:8.18.8
47+
docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2 REGISTRY/cloud-release/elastic-agent-cloud:8.18.8
48+
docker tag docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2 REGISTRY/cloud-release/enterprise-search-cloud:8.18.8
49+
docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1 REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.8
50+
docker tag docker.elastic.co/cloud-release/kibana-cloud:9.0.1 REGISTRY/cloud-release/kibana-cloud:9.0.8
51+
docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1 REGISTRY/cloud-release/elastic-agent-cloud:9.0.8
5252
```
5353

5454
4. Push the Docker images to your private Docker registry, using the same tags from the previous step. Replace `REGISTRY` with your actual registry URL, for example `my.private.repo:5000`:
5555

5656
```sh subs=true
5757
docker push REGISTRY/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
58-
docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.2
59-
docker push REGISTRY/cloud-release/kibana-cloud:8.18.2
60-
docker push REGISTRY/cloud-release/elastic-agent-cloud:8.18.2
61-
docker push REGISTRY/cloud-release/enterprise-search-cloud:8.18.2
62-
docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.1
63-
docker push REGISTRY/cloud-release/kibana-cloud:9.0.1
64-
docker push REGISTRY/cloud-release/elastic-agent-cloud:9.0.1
58+
docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.8
59+
docker push REGISTRY/cloud-release/kibana-cloud:8.18.8
60+
docker push REGISTRY/cloud-release/elastic-agent-cloud:8.18.8
61+
docker push REGISTRY/cloud-release/enterprise-search-cloud:8.18.8
62+
docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.8
63+
docker push REGISTRY/cloud-release/kibana-cloud:9.0.8
64+
docker push REGISTRY/cloud-release/elastic-agent-cloud:9.0.8
6565
```
6666

6767
5. On an internet-connected host, download the installation script:

‎manage-data/_snippets/create-lifecycle-policy.md‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,17 @@ The `min_age` value is relative to the rollover time, not the index creation tim
1010
::::
1111

1212

13-
You can create the policy in {{kib}} or with the [create or update policy](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ilm-put-lifecycle) API.
13+
You can create the policy in {{kib}} or with the [create or update policy](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ilm-put-lifecycle) API.
1414

1515
::::{tab-set}
1616
:group: kibana-api
1717
:::{tab-item} {{kib}}
1818
:sync: kibana
19-
To create the policy from {{kib}}, open the menu and go to **Stack Management > Index Lifecycle Policies**. Click **Create policy**.
19+
20+
To create the policy from {{kib}}:
21+
22+
1. Go to the **Index Lifecycle Policies** management page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
23+
1. Click **Create policy**.
2024

2125
By default, only the hot index lifecycle phase is enabled. Enable each additional lifecycle phase that you'd like.
2226

‎manage-data/data-store/data-streams/set-up-data-stream.md‎

Lines changed: 20 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,10 @@ For {{fleet}} and {{agent}}, refer to [](/reference/fleet/data-streams.md). For
3333

3434
While optional, we recommend using {{ilm-init}} to automate the management of your data stream’s backing indices. {{ilm-init}} requires an index lifecycle policy.
3535

36-
To create an index lifecycle policy in {{kib}}, open the main menu and go to **Stack Management > Index Lifecycle Policies**. Click **Create policy**.
36+
To create an index lifecycle policy in {{kib}}:
37+
38+
1. Go to the **Index Lifecycle Policies** management page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
39+
1. Click **Create policy**.
3740

3841
You can also use the [create lifecycle policy API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ilm-put-lifecycle).
3942

@@ -104,8 +107,10 @@ If you’re unsure how to map your fields, use [runtime fields](../mapping/defin
104107

105108
::::
106109

110+
To create a component template in {{kib}}:
107111

108-
To create a component template in {{kib}}, open the main menu and go to **Stack Management > Index Management**. In the **Index Templates** view, click **Create component template**.
112+
1. Go to the **Index Management** page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
113+
1. In the **Index Templates** tab, click **Create component template**.
109114

110115
You can also use the [create component template API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-cluster-put-component-template).
111116

@@ -157,7 +162,10 @@ Use your component templates to create an index template. Specify:
157162
* Any component templates that contain your mappings and index settings.
158163
* A priority higher than `200` to avoid collisions with built-in templates. See [Avoid index pattern collisions](../templates.md#avoid-index-pattern-collisions).
159164

160-
To create an index template in {{kib}}, open the main menu and go to **Stack Management > Index Management**. In the **Index Templates** view, click **Create template**.
165+
To create an index template in {{kib}}:
166+
167+
1. Go to the **Index Management** page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
168+
1. In the **Index Templates** tab, click **Create template**.
161169

162170
You can also use the [create index template API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-indices-put-index-template). Include the `data_stream` object to enable data streams.
163171

@@ -202,7 +210,7 @@ You can also manually create the stream using the [create data stream API](https
202210
PUT _data_stream/my-data-stream
203211
```
204212

205-
After it's been created, you can view and manage this and other data streams from the **Stack Management > Index Management** view. Refer to [Manage a data stream](./manage-data-stream.md) for details.
213+
After it's been created, you can view and manage this and other data streams from the **Index Management** view. Refer to [Manage a data stream](./manage-data-stream.md) for details.
206214

207215
## Secure the data stream [secure-data-stream]
208216

@@ -224,7 +232,10 @@ POST _data_stream/_migrate/my-time-series-data
224232

225233
## Get information about a data stream [get-info-about-data-stream]
226234

227-
To get information about a data stream in {{kib}}, open the main menu and go to **Stack Management > Index Management**. In the **Data Streams** view, click the data stream’s name.
235+
To get information about a data stream in {{kib}}:
236+
237+
1. Go to the **Index Management** page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
238+
1. In the **Data Streams** tab, click the data stream’s name.
228239

229240
You can also use the [get data stream API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-indices-get-data-stream).
230241

@@ -235,7 +246,10 @@ GET _data_stream/my-data-stream
235246

236247
## Delete a data stream [delete-data-stream]
237248

238-
To delete a data stream and its backing indices in {{kib}}, open the main menu and go to **Stack Management > Index Management**. In the **Data Streams** view, click the trash icon. The icon only displays if you have the `delete_index` [security privilege](elasticsearch://reference/elasticsearch/security-privileges.md) for the data stream.
249+
To delete a data stream and its backing indices in {{kib}}:
250+
251+
1. Go to the **Index Management** page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
252+
1. In the **Data Streams** view, click the trash icon. The icon only displays if you have the `delete_index` [security privilege](elasticsearch://reference/elasticsearch/security-privileges.md) for the data stream.
239253

240254
You can also use the [delete data stream API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-indices-delete-data-stream).
241255

‎manage-data/images/elasticsearch-reference-management-enrich-policies.png‎

-84.3 KB
Loading

‎manage-data/ingest/transform-enrich/example-parse-logs.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ The logs you want to parse look similar to this:
2424

2525
These logs contain a timestamp, IP address, and user agent. You want to give these three items their own field in {{es}} for faster searches and visualizations. You also want to know where the request is coming from.
2626

27-
1. In {{kib}}, open the main menu and click **Stack Management** > **Ingest Pipelines**.
27+
1. In {{kib}}, go to the **Ingest Pipelines** management page using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
2828

2929
:::{image} /manage-data/images/elasticsearch-reference-ingest-pipeline-list.png
3030
:alt: Kibana's Ingest Pipelines list view

0 commit comments

Comments
 (0)