Merge branch 'main' into anchor-fix-for-ci

shainaraskas · web-flow · commit dd2a2fe1a8cf · 2025-10-08T12:46:54.000-04:00
diff --git a/cloud-account/index.md b/cloud-account/index.md
@@ -9,6 +9,9 @@ applies_to:
 products:
   - id: cloud-hosted
   - id: cloud-serverless
+description: Manage your Elastic Cloud account settings, including email, password,
+  authentication methods, and personal preferences. Configure your user profile
+  and customize your interface.
 ---
 
 # Manage your Cloud account and preferences
diff --git a/deploy-manage/index.md b/deploy-manage/index.md
@@ -9,6 +9,9 @@ products:
   - id: kibana
   - id: cloud-hosted
   - id: cloud-enterprise
+description: Deploy and manage your Elastic environment. Learn how to design resilient
+  clusters, secure access, monitor performance, and maintain your Elastic Stack
+  components across different deployment options.
 ---
 
 # Deploy and manage
diff --git a/explore-analyze/index.md b/explore-analyze/index.md
@@ -11,6 +11,9 @@ applies_to:
 products:
   - id: cloud-serverless
   - id: kibana
+description: Explore and analyze your data with Kibana. Query, filter, visualize,
+  and create interactive dashboards to gain insights from your Elasticsearch data.
+  Utilize machine learning, geospatial analysis, and more.
 ---
 
 # Explore and analyze data with Kibana
diff --git a/extend/index.md b/extend/index.md
@@ -1,3 +1,9 @@
+---
+description: Extend the Elastic Platform by creating integrations for data ingestion
+  or building custom applications with REST APIs. Learn how to contribute to Elastic
+  documentation and ecosystem.
+---
+
 # Extend and contribute 
 
 You can extend and build on the Elastic Platform in several ways. Whether you need to get data into Elasticsearch, add new functionality, edit the documentation, or build a custom application, here is an overview of the primary development paths to help you choose the right one for your project.
diff --git a/get-started/index.md b/get-started/index.md
@@ -12,6 +12,9 @@ products:
 applies_to:
   serverless:
   stack:
+description: Learn the fundamentals of Elastic. Discover what Elastic offers, explore
+  core concepts of the Elastic Stack, understand deployment options, and access
+  training resources to get started.
 ---
 
 # Elastic fundamentals
diff --git a/manage-data/index.md b/manage-data/index.md
@@ -2,6 +2,9 @@
 applies_to:
   stack: ga
   serverless: ga
+description: Learn how to ingest, store, and manage data in Elasticsearch. Understand
+  indices, mappings, text analysis, data lifecycle management, and data migration between
+  clusters.
 ---
 
 # Manage data
diff --git a/redirects.yml b/redirects.yml
@@ -503,6 +503,8 @@ redirects:
   'explore-analyze/query-filter/languages/sql-client-apps-tableau-desktop.md': 'elasticsearch://reference/query-languages/sql/sql-client-apps-tableau-desktop.md'
   'explore-analyze/query-filter/languages/sql-client-apps-tableau-server.md': 'elasticsearch://reference/query-languages/sql/sql-client-apps-tableau-server.md'
 
+# Related to https://github.com/elastic/docs-content/pull/3318
+  'solutions/security/manage-elastic-defend/identify-antivirus-software-on-hosts.md': 'solutions/security/manage-elastic-defend/automatic-troubleshooting.md'
 
 
 
diff --git a/reference/index.md b/reference/index.md
@@ -3,6 +3,9 @@ mapped_pages:
   - https://www.elastic.co/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/current/api-reference.html
 products:
   - id: elastic-stack
+description: Explore reference documentation for the Elastic Stack including APIs,
+  security schemas, configuration settings, query languages, scripting, ECS field
+  references, and more.
 ---
 
 # Reference [api-reference]
diff --git a/release-notes/index.md b/release-notes/index.md
@@ -1 +1,7 @@
+---
+description: Release notes and changelogs for Elastic products including Elasticsearch,
+  Kibana, Observability, Security, APM agents, and clients. Stay updated with new
+  features and changes.
+---
+
 # Release notes
diff --git a/solutions/images/security-alert-suppression-close-alert-example.png b/solutions/images/security-alert-suppression-close-alert-example.png
diff --git a/solutions/images/security-alert-suppression-options.png b/solutions/images/security-alert-suppression-options.png
diff --git a/solutions/images/security-suppressed-alerts-details.png b/solutions/images/security-suppressed-alerts-details.png
diff --git a/solutions/index.md b/solutions/index.md
@@ -6,6 +6,9 @@ applies_to:
   serverless: ga
 products:
   - id: cloud-hosted
+description: Learn about Elastic solutions for search, observability, and security
+  use cases. Get started with ready-to-use implementations and discover how to build
+  custom applications.
 ---
 
 # Solutions and use cases
diff --git a/solutions/security/advanced-entity-analytics.md b/solutions/security/advanced-entity-analytics.md
@@ -19,5 +19,5 @@ Advanced Entity Analytics provides the following key capabilities:
 
 * [](advanced-entity-analytics/entity-risk-scoring.md)
 * [](advanced-entity-analytics/advanced-behavioral-detections.md)
-* {applies_to}`stack: preview 9.1` {applies_to}`serverless: unavailable`	
+* {applies_to}`stack: preview 9.1` {applies_to}`serverless: preview`	
  [](/solutions/security/advanced-entity-analytics/privileged-user-monitoring.md)
diff --git a/solutions/security/advanced-entity-analytics/asset-criticality.md b/solutions/security/advanced-entity-analytics/asset-criticality.md
@@ -68,7 +68,7 @@ You can view, assign, change, or unassign asset criticality from the following p
 
 If you have enabled the [entity store](entity-store.md), you can also view asset criticality assignments in the **Entities** section on the following pages:
 
-* {applies_to}`stack: ga 9.1` {applies_to}`serverless: unavailable` [Entity analytics](/solutions/security/advanced-entity-analytics/overview.md)
+* {applies_to}`stack: ga 9.1` {applies_to}`serverless: ga` [Entity analytics](/solutions/security/advanced-entity-analytics/overview.md)
 * [Entity analytics dashboard](/solutions/security/dashboards/entity-analytics-dashboard.md)
 
 :::{image} /solutions/images/security-entities-section.png
diff --git a/solutions/security/advanced-entity-analytics/entity-store.md b/solutions/security/advanced-entity-analytics/entity-store.md
@@ -45,7 +45,7 @@ To enable the entity store:
 
 Once you enable the entity store, the **Entities** section appears on the following pages:
 
-* {applies_to}`stack: ga 9.1` {applies_to}`serverless: unavailable` [Entity analytics](/solutions/security/advanced-entity-analytics/overview.md)
+* {applies_to}`stack: ga 9.1` {applies_to}`serverless: ga` [Entity analytics](/solutions/security/advanced-entity-analytics/overview.md)
 * [Entity analytics dashboard](/solutions/security/dashboards/entity-analytics-dashboard.md)
 
 ## Clear entity store data [clear-entity-store]
diff --git a/solutions/security/advanced-entity-analytics/monitor-privileged-user-activitites.md b/solutions/security/advanced-entity-analytics/monitor-privileged-user-activitites.md
@@ -1,6 +1,8 @@
 ---
 applies_to:
   stack: preview 9.1
+  serverless:
+    security: preview
 products:
   - id: security
   - id: cloud-serverless
diff --git a/solutions/security/advanced-entity-analytics/overview.md b/solutions/security/advanced-entity-analytics/overview.md
@@ -1,6 +1,8 @@
 ---
 applies_to:
   stack: ga 9.1
+  serverless:
+    security: ga
 products:
   - id: security
   - id: cloud-serverless
diff --git a/solutions/security/advanced-entity-analytics/privileged-user-monitoring-requirements.md b/solutions/security/advanced-entity-analytics/privileged-user-monitoring-requirements.md
@@ -1,6 +1,8 @@
 ---
 applies_to:
   stack: preview 9.1
+  serverless:
+    security: preview
 products:
   - id: security
   - id: cloud-serverless
@@ -10,11 +12,15 @@ products:
 
 This page covers the requirements for using the privileged user monitoring feature, as well as its known limitations.
 
-* Privileged user monitoring feature requires the appropriate [subscription](https://www.elastic.co/pricing).
+The privileged user monitoring feature requires:
+  * {applies_to}`stack: ` The appropriate [subscription](https://www.elastic.co/subscriptions)
+  * {applies_to}`serverless: ` The appropriate [feature tier](https://www.elastic.co/pricing/serverless-security)
 
-* To enable this feature, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).
+To enable this feature, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).
 
-* To use these features , your role must have certain [privileges](#privmon_privs).
+To use this feature, you need:
+  * {applies_to}`stack: ` A role with the appropriate [privileges](#privmon_privs)
+  * {applies_to}`serverless: ` Either the appropriate [predefined Security user role](#privmon_roles) or a [custom role](/deploy-manage/users-roles/cloud-organization/user-roles.md) with the right [privileges](#privmon_privs)
 
 ## Privileges [privmon_privs]
 
@@ -23,6 +29,16 @@ This page covers the requirements for using the privileged user monitoring featu
 | Enable the privileged user monitoring feature | N/A | **All** for the **Security** feature |
 | View the Privileged user monitoring dashboard | `Read` for the following indices:<br> - `.entity_analytics.monitoring.users-<space-id>`<br> - `risk-score.risk-score-*`<br> - `.alerts-security.alerts-<space-id>`<br> -  `.ml-anomalies-shared`<br> - Security data view indices | **Read** for the **Security** feature |
 
+## Predefined roles [privmon_roles]
+```yaml {applies_to}
+serverless: 
+```
+
+| Action | Predefined role |
+| --- | --- |
+| Enable privileged user monitoring | - Platform engineer<br>- Admin |
+| View the Privileged user monitoring dashboard | - Tier 1 analyst<br>- Tier 2 analyst<br>- Tier 3 analyst<br>- Rule author<br>- SOC manager<br>- Platform engineer<br>- Detections admin<br>- Admin |
+
 ## Known limitations
 
 * Currently, none of the privileged user monitoring visualizations support [cross-cluster search](/solutions/search/cross-cluster-search.md) as part of the data that they query from. 
diff --git a/solutions/security/advanced-entity-analytics/privileged-user-monitoring-setup.md b/solutions/security/advanced-entity-analytics/privileged-user-monitoring-setup.md
@@ -2,6 +2,8 @@
 navigation_title: Set up privileged user monitoring
 applies_to:
   stack: preview 9.1
+  serverless:
+    security: preview
 products:
   - id: security
   - id: cloud-serverless
diff --git a/solutions/security/advanced-entity-analytics/privileged-user-monitoring.md b/solutions/security/advanced-entity-analytics/privileged-user-monitoring.md
@@ -1,6 +1,8 @@
 ---
 applies_to:
   stack: preview 9.1
+  serverless:
+    security: preview
 products:
   - id: security
   - id: cloud-serverless
diff --git a/solutions/security/advanced-entity-analytics/view-analyze-risk-score-data.md b/solutions/security/advanced-entity-analytics/view-analyze-risk-score-data.md
@@ -26,7 +26,7 @@ In the Entity Analytics overview, you can view entity key performance indicators
 If you have enabled the [entity store](entity-store.md), you'll also get access to the **Entities** section, where you can view all hosts, users, and services along with their risk and asset criticality data.
 
 Access the Entity Analytics overview from the following pages:
-* {applies_to}`stack: ga 9.1` {applies_to}`serverless: unavailable` [Entity analytics](/solutions/security/advanced-entity-analytics/overview.md) 
+* {applies_to}`stack: ga 9.1` {applies_to}`serverless: ga` [Entity analytics](/solutions/security/advanced-entity-analytics/overview.md) 
 * [Entity analytics dashboard](/solutions/security/dashboards/entity-analytics-dashboard.md)
 
 
diff --git a/solutions/security/ai/use-cases.md b/solutions/security/ai/use-cases.md
@@ -27,6 +27,8 @@ In addition to AI Assistant and Attack Discovery, {{elastic-sec}} provides sever
 
 * [Automatic Import](/solutions/security/get-started/automatic-import.md): Helps you quickly parse, ingest, and create [ECS mappings](https://www.elastic.co/elasticsearch/common-schema) for data from sources that don’t yet have prebuilt Elastic integrations. This can accelerate your migration to {{elastic-sec}}, and help you quickly add new data sources to an existing SIEM solution in {{elastic-sec}}.
 * [Automatic Migration](/solutions/security/get-started/automatic-migration.md): Helps you quickly convert SIEM rules from the Splunk Processing Language (SPL) to the Elasticsearch Query Language ({{esql}}). If comparable Elastic-authored rules exist, it simplifies onboarding by mapping your rules to them. Otherwise, it creates custom rules on the fly so you can verify and edit them instead of writing them from scratch.
-* [Automatic Troubleshooting](/solutions/security/manage-elastic-defend/identify-antivirus-software-on-hosts.md): Helps you quickly check whether your endpoints have third-party AV software installed by analyzing file event logs from your hosts to determine whether antivirus software is present. From there, you can address any incompatibilities to make sure your endpoints are protected.
+* [Automatic Troubleshooting](/solutions/security/manage-elastic-defend/automatic-troubleshooting.md): Helps you quickly check whether your endpoints have third-party AV software installed by analyzing file event logs from your hosts to determine whether antivirus software is present. From there, you can address any incompatibilities to make sure your endpoints are protected.
+
+  {applies_to}`stack: ga 9.2` {applies_to}`serverless: ga` Helps you detect any issues in {{elastic-defend}} integration policies and suggests remediation steps.
 
 
diff --git a/solutions/security/configure-elastic-defend/elastic-defend-feature-privileges.md b/solutions/security/configure-elastic-defend/elastic-defend-feature-privileges.md
@@ -38,7 +38,7 @@ For each of the following sub-feature privileges, select the type of access you
 |     |     |
 | --- | --- |
 | **Endpoint List** | Access the [Endpoints](/solutions/security/manage-elastic-defend/endpoints.md) page, which lists all hosts running {{elastic-defend}}, and associated integration details. |
-| **Automatic Troubleshooting** |Access [Automatic Troubleshooting](/solutions/security/manage-elastic-defend/identify-antivirus-software-on-hosts.md) to check if your hosts have third-party AV software installed.<br><br>**Note:** In {{stack}} 9.0.0, this privilege is called **Endpoint Insights**. |
+| **Automatic Troubleshooting** |Access [Automatic Troubleshooting](/solutions/security/manage-elastic-defend/automatic-troubleshooting.md) to check if your hosts have third-party AV software installed.<br><br>**Note:** In {{stack}} 9.0.0, this privilege is called **Endpoint Insights**. |
 | **Global Artifact Management** {applies_to}`stack: ga 9.1` | Manage global assignment of endpoint artifacts (e.g., trusted applications, event filters) across all spaces and policies. This privilege controls global assignment rights only; privileges for each artifact type are required for full artifact management. |
 | **Trusted Applications** | Access the [Trusted applications](/solutions/security/manage-elastic-defend/trusted-applications.md) page to remediate conflicts with other software, such as antivirus or endpoint security applications. |
 | **Host Isolation Exceptions** | Access the [Host isolation exceptions](/solutions/security/manage-elastic-defend/host-isolation-exceptions.md) page to add specific IP addresses that isolated hosts can still communicate with. |
diff --git a/solutions/security/detect-and-alert/suppress-detection-alerts.md b/solutions/security/detect-and-alert/suppress-detection-alerts.md
diff --git a/solutions/security/get-started/configure-advanced-settings.md b/solutions/security/get-started/configure-advanced-settings.md
diff --git a/solutions/security/get-started/elastic-security-ui.md b/solutions/security/get-started/elastic-security-ui.md
diff --git a/solutions/security/manage-elastic-defend/automatic-troubleshooting.md b/solutions/security/manage-elastic-defend/automatic-troubleshooting.md
diff --git a/solutions/security/manage-elastic-defend/identify-antivirus-software-on-hosts.md b/solutions/security/manage-elastic-defend/identify-antivirus-software-on-hosts.md
diff --git a/solutions/toc.yml b/solutions/toc.yml
diff --git a/troubleshoot/index.md b/troubleshoot/index.md
