Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DO NOT MERGE] 9.0.0-beta release notes #6520

Closed
wants to merge 12 commits into from
Closed

[DO NOT MERGE] 9.0.0-beta release notes #6520

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
18c5b86
First draft
nastasha-solomon Feb 10, 2025
f2103a7
Fixing conflict
nastasha-solomon Feb 10, 2025
135f762
Update docs/release-notes/9.0.asciidoc
benironside Feb 12, 2025
fad8a8a
Update docs/release-notes/9.0.asciidoc
benironside Feb 12, 2025
6f7179c
Update docs/release-notes/9.0.asciidoc
benironside Feb 12, 2025
c0031d4
Adds KIs and make minor edits
nastasha-solomon Feb 12, 2025
2a639ca
Revised summaries
nastasha-solomon Feb 12, 2025
0da14ae
Update docs/release-notes/9.0.asciidoc
nastasha-solomon Feb 12, 2025
1b9d295
Update docs/release-notes/9.0.asciidoc
nastasha-solomon Feb 12, 2025
5dbf720
Update docs/release-notes/9.0.asciidoc
nastasha-solomon Feb 12, 2025
33f0e08
Update docs/release-notes/9.0.asciidoc
nastasha-solomon Feb 14, 2025
196f116
Update docs/release-notes/9.0.asciidoc
nastasha-solomon Feb 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/release-notes.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@

This section summarizes the changes in each release.

* <<release-notes-9.0.0, {elastic-sec} version 9.0.0>>
* <<release-notes-9.0.0-beta, {elastic-sec} version 9.0.0-beta>>

include::release-notes/9.0.asciidoc[]
56 changes: 46 additions & 10 deletions docs/release-notes/9.0.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,29 +4,65 @@
coming::[9.0.0]

[discrete]
[[release-notes-9.0.0]]
=== 9.0.0
[[release-notes-9.0.0-beta]]
=== 9.0.0-beta

[discrete]
[[known-issue-9.0.0]]
[[breaking-changes-9.0.0-beta]]
==== Breaking changes
* Refactors the Timeline HTTP API endpoints ({kibana-pull}200633[#200633]).
* Removes deprecated API endpoints for {elastic-defend} ({kibana-pull}199598[#199598]).
* Removes deprecated API endpoints for bulk CRUD actions on detection rules ({kibana-pull}197422[#197422], {kibana-pull}207906[#207906]).

[discrete]
[[deprecations-9.0.0-beta]]
==== Deprecations
* Renames the `integration-assistant` plugin to `automatic-import` to match the associated feature ({kibana-pull}207325[#207325]).
* Removes all legacy risk engine code and features ({kibana-pull}201810[#201810]).
* Removes deprecated API endpoints for {elastic-defend} ({kibana-pull}199598[#199598]).
* Deprecates the SIEM signals migration APIs ({kibana-pull}202662[#202662]).

[discrete]
[[known-issue-9.0.0-beta]]
==== Known issues

// tag::known-issue[]
[discrete]
[[breaking-changes-9.0.0]]
==== Breaking changes
.Duplicate alerts can be produced from manually running threshold rules
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Was this in 8.17 or this is the next release since these known issues were reported? I thought I read this in another release notes, but could be totally wrong.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was first introduced as a known issue in 8.16, and we've been carrying it forward through the releases since it hasn't been fixed yet.

Since there's no ETA on the fix, I've been considering moving this out of the known issues and into the feature docs. If that sounds like a plan, I'll remove this and the other manual rule runs known issue from the 9.0.0 beta release notes now and file a doc issue for myself to update the feature docs and release notes for 8.16-8.18 later.

[%collapsible]
====
*Details* +
On November 12, 2024, it was discovered that manually running threshold rules could produce duplicate alerts if the date range was already covered by a scheduled rule execution.
====
// end::known-issue[]

// tag::known-issue[]
[discrete]
[[deprecations-9.0.0]]
==== Deprecations
.Manually running custom query rules with suppression could suppress more alerts than expected
[%collapsible]
====
*Details* +
On November 12, 2024, it was discovered that manually running a custom query rule with suppression could incorrectly inflate the number of suppressed alerts.
====
// end::known-issue[]

[discrete]
[[features-9.0.0]]
[[features-9.0.0-beta]]
==== New features
* Enables Automatic Import to accept CEL log samples ({kibana-pull}206491[#206491]).
* Applies the latest Elastic UI framework (EUI) to {elastic-sec} features ({kibana-pull}204007[#204007], {kibana-pull}204908[#204908]).
nastasha-solomon marked this conversation as resolved.
Show resolved Hide resolved
* Adds the option to view {es} queries that run during rule execution for threshold, custom query, and {ml} rules ({kibana-pull}203320[#203320]).

[discrete]
[[enhancements-9.0.0]]
[[enhancements-9.0.0-beta]]
==== Enhancements
* Enhances Automatic Import by including setup and troubleshooting documentation for each input type that's selected in the readme ({kibana-pull}206477[#206477]).
* Allows users to include `closed` alerts in risk score calculations ({kibana-pull}201909[#201909]).
* Adds the ability to continue to the Entity Analytics dashboard when there is no data ({kibana-pull}201363[#201363]).
* Modifies the privilege-checking behavior during rule execution. Now, only read privileges of extant indices are checked during rule execution ({kibana-pull}177658[#177658]).

[discrete]
[[bug-fixes-9.0.0]]
[[bug-fixes-9.0.0-beta]]
==== Bug fixes
* Ensures that table actions use standard colors ({kibana-pull}207743[#207743]).

Loading