Elasticsearch version 8.5.1

edit

Elasticsearch version 8.5.1

edit

Also see Breaking changes in 8.5.

Known issues

edit
  • Machine learning datafeeds cannot be listed if any are not modified since version 6.x

    If you have a datafeed that was created in version 5.x or 6.x and has not been updated since 7.0, it is not possible to list datafeeds in 8.4 and 8.5. This means that anomaly detection jobs cannot be managed using Kibana. This issue is fixed in 8.6.0.

    If you upgrade to 8.4 or 8.5 with such a datafeed, you need to work around the problem by updating each datafeed’s authorization information using these steps.

  • Orchestrators which use a settings.json file to configure Elasticsearch may encounter deadlocks during master elections (issue: #92812)

    To resolve the deadlock, remove the settings.json file and restart the affected node.

  • Parsing a request when the last element in an array is filtered out (for instance using _source_includes) fails. This is due to a bug in Jackson parser. Fixed in Elasticsearch 8.6.1 (#91456)
  • When the ingest attachment processor is used, the interaction of Tika with log4j 2.18.0 and higher (introduced in Elasticsearch 8.4.0) results in excessive logging. This logging is so excessive that it can lead to cluster instability, to the point where the cluster is unusable and nodes must be restarted. (issue: #91964). This issue is fixed in Elasticsearch 8.7.0 (#93878)

    To resolve the issue, upgrade to 8.7.0 or higher.

Bug fixes

edit
Audit
  • Fix NPE in auditing authenticationSuccess for non-existing run-as user #91171
Authentication
  • Ensure PKI’s delegated_by_realm metadata respect run-as #91173
Authorization
  • Ensure TermsEnum action works correctly with API keys #91170
Cluster Coordination
  • Fix corrupted Metadata from index and alias having the same name #91456
EQL
  • Fix EQLSearchRequest serialization (bwc) #91402
Geo
  • Fix handling indexed envelopes crossing the dateline in mvt API #91105 (issue: #91060)
Infra/CLI
  • Fix carriage return removal when reading a long line from terminal #91131 (issue: #89227)
Infra/Core
Machine Learning
  • Allow NLP truncate option to be updated when span is set #91224
  • Interim buckets should not count towards the total bucket count #91288
Network
  • Fix TransportActionProxy for local execution #91289
Transform
  • Make transform _preview request cancellable #91313 (issue: #91286)

Enhancements

edit
Authorization
  • Add privileges for connectors index creation #91026
  • Add privileges for crawler logs indices in Enterprise Search service account #91094
Infra/Core
  • Allow legacy index settings on legacy indices #90264 (issue: #84992)
  • Check for unassigned shards on node shutdown #91297 (issue: #88635)

Upgrades

edit
Packaging