Skip to content

Backport fleet-server#5515 to 8.17 #1860

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Sep 25, 2025
Merged

Backport fleet-server#5515 to 8.17 #1860

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
119 changes: 119 additions & 0 deletions docs/en/ingest-management/release-notes/release-notes-8.17.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,17 @@ Also see:

Review important information about the 8.17.10 release.

[discrete]
[[known-issues-8.17.10]]
=== Known issues

[[known-issue-5515-8.17.10]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====

[discrete]
[[bug-fixes-8.17.10]]
=== Bug fixes
Expand All @@ -55,6 +66,17 @@ Fleet Server::

Review important information about the {fleet} and {agent} 8.17.9 release.

[discrete]
[[known-issues-8.17.9]]
=== Known issues

[[known-issue-5515-8.17.9]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====

[discrete]
[[bug-fixes-8.17.9]]
=== Bug fixes
Expand All @@ -79,6 +101,17 @@ Fleet::

Review important information about the {fleet} and {agent} 8.17.8 release.

[discrete]
[[known-issues-8.17.8]]
=== Known issues

[[known-issue-5515-8.17.8]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====

[discrete]
[[new-features-8.17.8]]
=== New features
Expand Down Expand Up @@ -144,6 +177,13 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.7]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====

[discrete]
[[bug-fixes-8.17.7]]
=== Bug fixes
Expand Down Expand Up @@ -188,6 +228,13 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.6]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====

[discrete]
[[enhancements-8.17.6]]
=== Enhancements
Expand Down Expand Up @@ -233,6 +280,14 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.5]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====


[discrete]
[[enhancements-8.17.5]]
=== Enhancements
Expand Down Expand Up @@ -319,6 +374,14 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.4]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====


[discrete]
[[new-features-8.17.4]]
=== New features
Expand Down Expand Up @@ -415,6 +478,13 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.3]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====

[discrete]
[[enhancements-8.17.3]]
=== Enhancements
Expand Down Expand Up @@ -475,6 +545,14 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.2]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====


[discrete]
[[enhancements-8.17.2]]
=== Enhancements
Expand Down Expand Up @@ -555,6 +633,14 @@ After the output confirms all files were successfully processed, run the `enroll

====

[[known-issue-5515-8.17.1]]
.fleet-agents template is missing mappings
[%collapsible]
====
include::release-notes-8.17.asciidoc[tag=known-issue-5515-8.17]
====


[discrete]
[[new-features-8.17.1]]
=== New features
Expand Down Expand Up @@ -634,6 +720,39 @@ curl -XPOST -H 'Authorization: Bearer ${TOKEN}' -H 'x-elastic-product-origin:fle
----
====

[[known-issue-5515-8.17.0]]
.fleet-agents template is missing mappings
[%collapsible]
====
// tag::known-issue-5515-8.17[]
*Details* +

On May 2, 2025 a known issue was discovered that the `.fleet-agents` index template was missing a mapping for the `local_metadata.complete` attribute. This may cause agent checkins to be rejected and the agents to appear as offline.

In this {fleet}'s logs this will appear as:
[source,shell]
----
elastic fail 400: document_parsing_exception: [1:209] object mapping for [local_metadata] tried to parse field [local_metadata] as object, but found a concrete value
Eat bulk checkin error; Keep on truckin'
----
And in the {agent} logs it will appear as:
[source,shell]
----
"log.level":"error","@timestamp":"2025-04-22:12:35:25.295Z","message":"Eat bulk checkin error; Keep on truckin'","component":{"binary":"fleet-server","dataset":"elastic_agent.fleet_server","id":"fleet-server-es-containerhost","type":"fleet-server"},"log":{"source":"fleet-server-es-containerhost"},"service.type":"fleet-server","error.message":"elastic fail 400: document_parsing_exception: [1:209] object mapping for [local_metadata] tried to parse field [local_metadata] as object, but found a concrete value","ecs.version":"1.6.0","service.name":"fleet-server","ecs.version":"1.6.0"
----
This attribute was added to the template in versions: 8.17.11 8.18.3, and 8.19.3.

Further investigation revealed that the `.fleet-agents` index template was not correctly applied due to an unchanged `_meta.managed_index_mappings_version` number.
This change also affects other attributes as well, such as `upgrade_attempts`, `namespaces`, `unprivileged`, and `unhealthy_reason`.
If there is an error related to any of these attributes, there will be a similar error message in the logs.

*Impact* +

Updating to a version with a fixed `_meta.managed_index_mappings_version` will correctly apply the new index template.
The fixed versions are 8.18.8, 8.19.4, 9.0.8, 9.1.4.
// end::known-issue-5515-8.17[]
====

[discrete]
[[new-features-8.17.0]]
=== New features
Expand Down