Skip to content

Known issue — CSPM and Asset Discovery 9.2 #3739

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Oct 30, 2025
Merged

Known issue — CSPM and Asset Discovery 9.2 #3739

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d5ef49f
Known issue — CSPM and Asset Discovery 9.2
benironside Oct 30, 2025
5d90acd
adds serverless RN
benironside Oct 30, 2025
b9d1067
adds closing colons
benironside Oct 30, 2025
9aca972
Merge branch 'main' into internal-452-known-issue
benironside Oct 30, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions release-notes/elastic-cloud-serverless/known-issues.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,25 @@ Known issues are significant defects or limitations that may impact your impleme

## Active

:::{dropdown} CSPM and Asset Management integrations don't ingest data when deployed using agent-based technology if {{kib}} is hosted on AWS
Applies to: {{serverless-short}} deployments hosted on AWS

**Details**

If your {{serverless-short}} deployment is hosted on AWS, new Cloud Security Posture Management (CSPM) and Asset Inventory integrations will fail to produce findings when deployed using agent-based deployment. {{serverless-short}} deployments hosted on GCP or Azure are not affected. Integrations that use agentless deployment are not affected.

**Workaround**

Two workarounds are available:

1. Turn off the **Enable Cloud Connector** advanced setting.
1. Go to the **Advanced Settings** menu using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
2. In the **Security Solution** section, turn off the **Enable Cloud Connector** option.
3. Your agent-based integration deployments will work as expected.
2. Use agentless deployment.
1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected.
::::

::::{dropdown} Alerts aren't generated for rules with alert flapping off and an alert delay higher than 1

**Details**
Expand Down
19 changes: 19 additions & 0 deletions release-notes/elastic-security/known-issues.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,25 @@ Known issues are significant defects or limitations that may impact your impleme

% :::

:::{dropdown} CSPM and Asset Management integrations don't ingest data when deployed using agent-based technology if {{kib}} is hosted on AWS
Applies to: ECH 9.2.0 deployments hosted on AWS

**Impact**

If your ECH deployment is hosted on AWS, new Cloud Security Posture Management (CSPM) and Asset Inventory integrations will fail to produce findings when deployed using agent-based deployment. ECH deployments hosted on GCP or Azure are not affected. Integrations that use agentless deployment are not affected.

**Workaround**

Two workarounds are available:

1. Turn off the **Enable Cloud Connector** advanced setting.
1. Go to the **Advanced Settings** menu using the navigation menu or the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
2. In the **Security Solution** section, turn off the **Enable Cloud Connector** option.
3. Your agent-based integration deployments will work as expected.
2. Use agentless deployment.
1. Instead of using agent-based deployment, use agentless deployment. Agentless deployment works as expected.
::::


::::{dropdown} Filters may not apply correctly on the Alerts page
Applies to: 9.1.0, 9.1.1, 9.1.2, and 9.1.3
Expand Down