- Kibana Guide: other versions:
- What is Kibana?
- What’s new in 8.17
- Kibana concepts
- Quick start
- Set up
- Install Kibana
- Configure Kibana
- AI Assistant settings
- Alerting and action settings
- APM settings
- Banners settings
- Cases settings
- Enterprise Search settings
- Fleet settings
- i18n settings
- Logging settings
- Logs settings
- Metrics settings
- Monitoring settings
- Reporting settings
- Search sessions settings
- Secure settings
- Security settings
- Spaces settings
- Task Manager settings
- Telemetry settings
- URL drilldown settings
- Start and stop Kibana
- Access Kibana
- Securing access to Kibana
- Add data
- Upgrade Kibana
- Configure security
- Configure reporting
- Configure logging
- Configure monitoring
- Command line tools
- Production considerations
- Discover
- Dashboards
- Canvas
- Maps
- Build a map to compare metrics by country or region
- Track, visualize, and alert on assets in real time
- Map custom regions with reverse geocoding
- Heat map layer
- Tile layer
- Vector layer
- Plot big data
- Search geographic data
- Configure map settings
- Connect to Elastic Maps Service
- Import geospatial data
- Troubleshoot
- Reporting and sharing
- Machine learning
- Graph
- Alerting
- Observability
- Search
- Security
- Dev Tools
- Fleet
- Osquery
- Stack Monitoring
- Stack Management
- Cases
- Connectors
- Amazon Bedrock
- Cases
- CrowdStrike
- D3 Security
- Google Gemini
- IBM Resilient
- Index
- Jira
- Microsoft Teams
- Observability AI Assistant
- OpenAI
- Opsgenie
- PagerDuty
- SentinelOne
- Server log
- ServiceNow ITSM
- ServiceNow SecOps
- ServiceNow ITOM
- Swimlane
- Slack
- TheHive
- Tines
- Torq
- Webhook
- Webhook - Case Management
- xMatters
- Preconfigured connectors
- License Management
- Maintenance windows
- Manage data views
- Numeral Formatting
- Rollup Jobs
- Manage saved objects
- Security
- Spaces
- Advanced Settings
- Tags
- Upgrade Assistant
- Watcher
- REST API
- Get features API
- Kibana spaces APIs
- Kibana role management APIs
- User session management APIs
- Saved objects APIs
- Data views API
- Index patterns APIs
- Alerting APIs
- Action and connector APIs
- Cases APIs
- Import and export dashboard APIs
- Logstash configuration management APIs
- Machine learning APIs
- Osquery manager API
- Short URLs APIs
- Get Task Manager health
- Upgrade assistant APIs
- Synthetics APIs
- Uptime APIs
- Kibana plugins
- Troubleshooting
- Accessibility
- Release notes
- Upgrade notes
- Kibana 8.17.1
- Kibana 8.17.0
- Kibana 8.16.3
- Kibana 8.16.2
- Kibana 8.16.1
- Kibana 8.16.0
- Kibana 8.15.5
- Kibana 8.15.4
- Kibana 8.15.3
- Kibana 8.15.2
- Kibana 8.15.1
- Kibana 8.15.0
- Kibana 8.14.3
- Kibana 8.14.2
- Kibana 8.14.1
- Kibana 8.14.0
- Kibana 8.13.4
- Kibana 8.13.3
- Kibana 8.13.2
- Kibana 8.13.1
- Kibana 8.13.0
- Kibana 8.12.2
- Kibana 8.12.1
- Kibana 8.12.0
- Kibana 8.11.4
- Kibana 8.11.3
- Kibana 8.11.2
- Kibana 8.11.1
- Kibana 8.11.0
- Kibana 8.10.4
- Kibana 8.10.3
- Kibana 8.10.2
- Kibana 8.10.1
- Kibana 8.10.0
- Kibana 8.9.2
- Kibana 8.9.1
- Kibana 8.9.0
- Kibana 8.8.2
- Kibana 8.8.1
- Kibana 8.8.0
- Kibana 8.7.1
- Kibana 8.7.0
- Kibana 8.6.1
- Kibana 8.6.0
- Kibana 8.5.2
- Kibana 8.5.1
- Kibana 8.5.0
- Kibana 8.4.3
- Kibana 8.4.2
- Kibana 8.4.1
- Kibana 8.4.0
- Kibana 8.3.3
- Kibana 8.3.2
- Kibana 8.3.1
- Kibana 8.3.0
- Kibana 8.2.3
- Kibana 8.2.2
- Kibana 8.2.1
- Kibana 8.2.0
- Kibana 8.1.3
- Kibana 8.1.2
- Kibana 8.1.1
- Kibana 8.1.0
- Kibana 8.0.0
- Kibana 8.0.0-rc2
- Kibana 8.0.0-rc1
- Kibana 8.0.0-beta1
- Kibana 8.0.0-alpha2
- Kibana 8.0.0-alpha1
- Developer guide
Kibana 8.15.0
editKibana 8.15.0
editFor information about the Kibana 8.15.0 release, review the following information.
The 8.15.0 release includes the following known issues.
Known issues
editKibana fails to start when processing YAML configuration keys that contain dotted notation in objects in arrays
Details
In 8.15.1, We fixed a bug when processing YAML configuration keys that contain dotted notation in objects in arrays.
This can manifest as a validation error causing Kibana to not start.
For more information, refer to #190590.
Connectors require update due to Microsoft Teams product retirement
Details
The original method for configuring incoming webhooks in Microsoft Teams is being retired.
Refer to Retirement of Office 365 connectors within Microsoft Teams and #187823.
Impact
If you used the Incoming Webhook app in Microsoft Teams to generate a webhook URL for a Microsoft Teams connector, it will stop working in December 2024.
Workaround
Use the Workflows app in Microsoft Teams to create a new webhook URL, as described in Configure Microsoft Teams.
Update your Microsoft Teams connector to use the new URL before the end of December 2024.
Incorrect index errors related to inference endpoints
Details
In 8.15.1, we fixed a UI bug where an index error about the semantic_text
field would be incorrectly displayed when the inference endpoint was configured and available.
You can ignore this error if you’ve confirmed that the inference endpoint is configured and the model is deployed.
This bug is fixed in #189283.
Deprecations
editThe following functionality is deprecated in 8.15.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.15.0.
Uptime is deprecated in 8.15.0 and will be removed in 9.0.0.
Details
The Uptime app is already hidden from Kibana when there is no recent Heartbeat data, but will be completely removed in 9.0.0. You should migrate to Synthetics as an alternative. For more details, refer to the Uptime documentation.
Search sessions are deprecated in 8.15.0 and will be removed in a future version.
Details
Search sessions are now deprecated and will be removed in a future version. By default, queries that take longer than 10 minutes (the default for the advanced setting search:timeout
) will be canceled. To allow queries to run longer, consider increasing search:timeout
or setting it to 0
which will allow queries to continue running as long as a user is waiting on-screen for results.
Breaking changes
editBreaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.15.0, review the breaking changes, then mitigate the impact to your application.
Adds rate limiting to install by upload endpoint.
Details
Rate limiting was added to the upload api/fleet/epm/packages
endpoint. For more information, refer to #184036.
Impact
If you do two or more requests in less than 10 seconds, the subsequent requests fail with 429 Too Many Requests
.
Wait 10 seconds before uploading again.
This change could potentially break automations for users that rely on frequent package uploads.
Features
editKibana 8.15.0 adds the following new and notable features.
- Alerting
-
- Allow decimals in the threshold filed for the Failed transaction rate threshold rule (#184647).
- Cases
- Dashboards
-
- Adding a panel to a dashboard now opens a flyout and the list of panels available is now organized more logically (#183764).
- Discover
- Elastic Security
-
- For the Elastic Security 8.15.0 release information, refer to Elastic Security Solution Release Notes.
- Fleet
-
- UI for the custom integration creation with AI (#186304).
- Surface option to delete diagnostics files (#183690).
- Allow to reset log level for agents >= 8.15.0 (#183434).
- Adds warning if need root integrations trying to be used with unprivileged agents (#183283).
- Adds unprivileged vs privileged agent count to Fleet UI (#183077).
- Lens & Visualizations
-
- You can now show additional statistics in the legend of your time series charts created with Lens (#182357).
- Machine Learning
-
- Adds Field statistics to the list of available panels in Dashboards (#184030).
- Adds ES|QL support for field statistics table in Discover (#180849).
- AIOps: Moves Pattern analysis to a tab instead of a flyout in Discover (#178916).
- AIOps: Adds AI Assistant contextual insights to the Log Rate Analysis page in the Machine Learning plugin for Observability serverless projects (#186509).
- Management
-
-
Adds an advanced
search:timeout
setting and changes the timeout behavior to display partial results instead of just an error (#179679).
-
Adds an advanced
- Observability
-
- Updates links for integration buttons in Observability solution (#184477).
- Adds SLO status, SLI value, error budget remaining and consumed to the burn rate alert context (#184471).
- Adds an option to prevent initial backfill for SLOs (#184312).
-
Updates
Add data
links to use improved deep linking (#184164). - Changes the navigation behavior for the Observability guide cards to pre-select the correct solution (#184065).
- Updates the Alerts details to now show an history chart for all types of alerts (#181824).
- Adds Docs count, Size, Services, Hosts, and Degraded docs KPIs to the dataset quality flyout (#179479).
- Platform
-
- Improves the Share menu to let you navigate through a tabbed modal to copy links for Discover, Dashboards, and Lens. (#180406).
- Changes the behavior of the "Endpoints and API keys" button in the header to open the Connection details flyout (#183236).
- Adds a quick way to create an API keys with a 90-days expiration to the Connection details flyout, and clarifies the Elasticsearch endpoint and Cloud ID information (#180912).
- Adds a feedback button to the header in Serverless projects(#180942).
For more information about the features introduced in 8.15.0, refer to What’s new in 8.15.
On this page