From 97b18a79a7fda14499aecbc01bdd07b0c00769db Mon Sep 17 00:00:00 2001 From: Colleen McGinnis Date: Thu, 25 Sep 2025 10:40:17 -0500 Subject: [PATCH] backport fleet-server#5515 to 8.17 --- .../release-notes/release-notes-8.17.asciidoc | 119 ++++++++++++++++++ 1 file changed, 119 insertions(+) diff --git a/docs/en/ingest-management/release-notes/release-notes-8.17.asciidoc b/docs/en/ingest-management/release-notes/release-notes-8.17.asciidoc index c805fbce3..d4ec22c9f 100644 --- a/docs/en/ingest-management/release-notes/release-notes-8.17.asciidoc +++ b/docs/en/ingest-management/release-notes/release-notes-8.17.asciidoc @@ -38,6 +38,17 @@ Also see: Review important information about the 8.17.10 release. +[discrete] +[[known-issues-8.17.10]] +=== Known issues + +[[known-issue-5515-8.17.10]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + [discrete] [[bug-fixes-8.17.10]] === Bug fixes @@ -55,6 +66,17 @@ Fleet Server:: Review important information about the {fleet} and {agent} 8.17.9 release. +[discrete] +[[known-issues-8.17.9]] +=== Known issues + +[[known-issue-5515-8.17.9]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + [discrete] [[bug-fixes-8.17.9]] === Bug fixes @@ -79,6 +101,17 @@ Fleet:: Review important information about the {fleet} and {agent} 8.17.8 release. +[discrete] +[[known-issues-8.17.8]] +=== Known issues + +[[known-issue-5515-8.17.8]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + [discrete] [[new-features-8.17.8]] === New features @@ -144,6 +177,13 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.7]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + [discrete] [[bug-fixes-8.17.7]] === Bug fixes @@ -188,6 +228,13 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.6]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + [discrete] [[enhancements-8.17.6]] === Enhancements @@ -233,6 +280,14 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.5]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + + [discrete] [[enhancements-8.17.5]] === Enhancements @@ -319,6 +374,14 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.4]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + + [discrete] [[new-features-8.17.4]] === New features @@ -415,6 +478,13 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.3]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + [discrete] [[enhancements-8.17.3]] === Enhancements @@ -475,6 +545,14 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.2]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + + [discrete] [[enhancements-8.17.2]] === Enhancements @@ -555,6 +633,14 @@ After the output confirms all files were successfully processed, run the `enroll ==== +[[known-issue-5515-8.17.1]] +.fleet-agents template is missing mappings +[%collapsible] +==== +include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17] +==== + + [discrete] [[new-features-8.17.1]] === New features @@ -634,6 +720,39 @@ curl -XPOST -H 'Authorization: Bearer ${TOKEN}' -H 'x-elastic-product-origin:fle ---- ==== +[[known-issue-5515-8.17.0]] +.fleet-agents template is missing mappings +[%collapsible] +==== +// tag::known-issue-5515-8.17[] +*Details* + + +On May 2, 2025 a known issue was discovered that the `.fleet-agents` index template was missing a mapping for the `local_metadata.complete` attribute. This may cause agent checkins to be rejected and the agents to appear as offline. + +In this {fleet}'s logs this will appear as: +[source,shell] +---- +elastic fail 400: document_parsing_exception: [1:209] object mapping for [local_metadata] tried to parse field [local_metadata] as object, but found a concrete value +Eat bulk checkin error; Keep on truckin' +---- +And in the {agent} logs it will appear as: +[source,shell] +---- +"log.level":"error","@timestamp":"2025-04-22:12:35:25.295Z","message":"Eat bulk checkin error; Keep on truckin'","component":{"binary":"fleet-server","dataset":"elastic_agent.fleet_server","id":"fleet-server-es-containerhost","type":"fleet-server"},"log":{"source":"fleet-server-es-containerhost"},"service.type":"fleet-server","error.message":"elastic fail 400: document_parsing_exception: [1:209] object mapping for [local_metadata] tried to parse field [local_metadata] as object, but found a concrete value","ecs.version":"1.6.0","service.name":"fleet-server","ecs.version":"1.6.0" +---- +This attribute was added to the template in versions: 8.17.11 8.18.3, and 8.19.3. + +Further investigation revealed that the `.fleet-agents` index template was not correctly applied due to an unchanged `_meta.managed_index_mappings_version` number. +This change also affects other attributes as well, such as `upgrade_attempts`, `namespaces`, `unprivileged`, and `unhealthy_reason`. +If there is an error related to any of these attributes, there will be a similar error message in the logs. + +*Impact* + + +Updating to a version with a fixed `_meta.managed_index_mappings_version` will correctly apply the new index template. +The fixed versions are 8.18.8, 8.19.4, 9.0.8, 9.1.4. +// end::known-issue-5515-8.17[] +==== + [discrete] [[new-features-8.17.0]] === New features