Kibana 7.6.0

See also breaking changes in 7.6.

Known issue

  • When you use the default dateFormat:tz: browser setting, the timestamps appear in UTC instead of the local time of the user browser. To use the local time of the user browser, set dateFormat:tz: to the timezone of the user. #57457
  • The server.customResponseHeaders option prevents Kibana from starting if headers are set using a type other than string. To fix this, convert your boolean and number headers to strings. For example, use my-header: "true" instead of my-header: true. #66146

Enhancements

APM

  • Updates apm index pattern #54095
  • Adds service name to jvm #50830
  • Adds filter option to Metadata table #48520
  • Updates Error occurrences graph tooltip to display start and end for bucket period #49638
  • Pagination of top 10 trace samples #51911
  • Makes it possible to link directly to a trace with just the trace.id #51450
  • Transaction page throws unhandled exception if transactions doesn’t have http.request #53760
  • Adds message fields to metadata table #54017
  • Shows errors on the timeline instead of under the transaction #53756
  • Traces with identical transactions names are combined, even though they are from different services #54247
  • Uses indexPatternsService for kuery bar suggestions #49169
  • Migrates server routes to NP #49455
  • Adds service.version filter to transaction views #52748
  • Adds version annotations to timeseries charts #52640
  • Error stack trace improvements #49254
  • Performance comparison charts by user agent (browser) #49582
  • Adds UI Indices runtime configuration #48079
  • Updates apm index pattern #54693
  • Clears cache when updating indices via UI #51767

Canvas

  • Enables Embeddable maps #53971
  • Uses compressed forms in sidebar #49419

Dashboard

  • Redesigns empty screen #53681
  • Adds visualization from dasbhoard empty screen #52670
  • Redesigns empty screen in readonly mode #54073
  • Adds Lens to Dashboard #53110
  • Improves “Create new” UI in dashboard #49189

Discover

  • Refactors discover index pattern selector to Lens ChangeIndexPattern Component #51973
  • Adds nested field support to KQL #47070
  • Supports nested fields in existing filter types #49537
  • Disables/enables filter with click+shift on a filter badge #52751
  • Possibility to filter when testing scripted fields (#35379) #44220
  • Adds label and icon to nested fields in the doc table #54199

Graph

  • Improves error message on graph requests #54230
  • Adds sample data #54558

Lens

  • Allows numeric terms aggs #50177
  • Adds support for scripted fields and default index pattern #53948
  • Loads Lens together with kibana app #50164
  • Disables saving visualization until there are no changes to the document #52982
  • Adds clear layer feature #53627
  • Adds support for scripted fields and aliases to the existence API #54064

Logs

  • Log rate setup index validation #50008
  • Adds categories table to the categorization tab #53004
  • Disables ML job setup form while setup is pending #54705

Machine Learning

  • Updates Anomaly Detection job wizard button styles, page panel and titles #53340
  • Improves processing of groups in data recognizer wizard #49310
  • Indicates missing required privileges for import in File Data Visualizer #50147
  • Stats bar for data frame analytics #49464
  • Adds the job message tab to data frame analytics #50468
  • Reactive time-range selection in Single Metric Viewer #51008
  • Adds Custom URLs and Calendars to the Job wizards #51281
  • Performs cardinality check on enabling the model plot #51915
  • Fetches the latest job messages and enables sorting by time #52388
  • Persists the time range brush when expanded to full width #54020
  • Supports search for partitions on Single Metric Viewer #53879
  • APM modules configs for RUM Javascript and NodeJS #53792
  • Model memory limit calculator enhancements for multi-metric job wizard #54573
  • Data Visualizer redesign #54358
  • Formatting for additional timing and model size stats #55062
  • Adds ML node warning to overview and analytics pages #50766
  • Enables lat_long detector function in advanced wizard #50787
  • Categorization wizard #53009
  • Regression results view #49667
  • Auto-populate model_memory_limit #50714
  • Reruns evaluate endpoint for search bar queries #50991
  • Adds search bar #51235
  • Creates classification jobs via the UI #51619
  • Adds description field to job creation and display in jobs list #52217
  • Creates classification jobs results view #52584
  • Adds excludes input field to form #53856
  • Adds link to docs #54189
  • Uses field caps api to set column type #54543
  • Truncates text in Overview page Latest timestamp column #50004
  • Color Range Legend component #52794

Management

  • Support scheme field when creating a Threshold alert with a Webhook action #53757
  • Adds Mappings Editor to Index Template Wizard #47562
  • SearchProfiler to NP #48795
  • Upgrade Assistant to New Platform Ready #50163
  • License Management to New Platform #51886
  • New Platform (NP) Migration #50908
  • Console with better SQL support #51446
  • Allows User to Cleanup Repository from UI #53047
  • Updates advanced settings text for usage data #52657

Maps

  • Makes grid rectangles the default symbolization for geo grid source #50169
  • Focuses inputs when editor opens popovers #51487
  • Uses style metadata to calculate symbolization bands #51713
  • Better style defaults #52420
  • Vector style UI redesign #53946
  • Allows editing EMS basemap selection #53631
  • Adds text halo color and width style properties #53827
  • Adds labels to sample data maps #54671
  • Adds categorical styling #54408
  • Hides map visualization types with default kibana.yml settings #49103
  • Hides header panel in embeddable panel #50728

Metrics

  • Calculates interval based on the dataset’s period #50194
  • Ports graphql query for snapshot and node details to hapijs #50730
  • Adds ability to filter snapshot view by account and region #53307
  • Adds inventory metadata api with regions and accounts #52660
  • Removes graphql types #54176
  • Adds AWS Metricsets to Inventory Models #49983

Monitoring

  • Fetches shard data more efficiently #54028
  • Displays APM server memory in bytes #54275

Operations

  • Adds support for log rotation #49750

Monitoring

  • h1 elements for accessibility #52276

Platform

  • Allows routes to define some payload config values #50783
  • Moves IndexPatterns into the NP #51199
  • Moves configuration validation to new platform #51880
  • Improves “Browser client is out of date” error message #50296

Reporting

  • Converts main Reporting index to TS #49129
  • Removes any types and references to Hapi #49250
  • Updates some runtime validations #53975

Security

  • Role Mappings UI #53620
  • Adds message to login page #51557
  • Updates Node.js to version 10.18.0 #52865
  • Improves session idle timeout, add session lifespan #49855
  • Adds support for certificates in PKCS#12 (P12) key stores #53810

SIEM

  • New Overview Page #54783
  • Adds DNS histogram #50409
  • Adds alerts table #51959
  • Histogram enhancement #54544
  • Dns histogram enhancement #54902
  • Tests for search_after and bulk index #50129
  • Adds ecs threat properties to rules #51782
  • Sets Signal status open closed REST API #52356
  • Search signals index #52661
  • Adds created_at and updated_at timestamps to rules #53137
  • Rule Status Monitoring #54452
  • Adds filtering abilities to the KQL REST API #49451
  • REST API Additions #50514
  • REST API improvements and changes from UI/UX feedback #50797
  • Adds of risk score, output index, rule copying, and more #51190
  • Adds signal data index per spaces through index naming conventions #52237
  • Adds privileges API endpoint #52707
  • Adds a tags service and optimizes alert_id lookups #52838
  • Adds prepackaging rules capability #53062
  • Adds timeline_id string to rules #53343
  • Bulk REST API for create, update, and delete #53543
  • Import/Export REST endpoints #54332
  • Time gap detection and logging #54547
  • Adds Rules Table #50839
  • Adds Signals Table and additional configuration options to StatefulEventsViewer #52044
  • Adds support for apm-* to the network map #54876
  • HTTP Requests table #49955
  • Adds Authentications histogram #48260
  • Adds hosts and network anomalies histogram #50295
  • Detection engine placeholders #50220
  • Adds SavedQuery in Timeline #49813
  • Adds creation rule #51376
  • Adds edit on rule creation #51670
  • Adds MITRE ATT&CK #52398
  • Details and Edit view for a rule #53252
  • Permission II #54292
  • Adds status to rule details #54812
  • From signals to timeline #54769
  • Detections create prepackage rules #55403
  • Feedback to user about generated encryption key #56464

Uptime

  • Updates snapshot counts #48035
  • Migrates Uptime server routing to new platform #51125
  • Adds tags dropdown to Overview filters group #50837
  • New monitor list expanded row #46567
  • Adds options to disable zoom, hide tool tips, widgets/overlays in embeddable maps #50663
  • New details panel and location map #50518
  • Lists external linking #53098
  • Monitor details page left side title #53529
  • Monitor SSL Certificate Color version for warning #54040

Bug fixes

APM

  • Upgrades APM migration script v1 support #52824
  • Adds missing semi-colon to styled component #51436
  • Quick fix for ACM to ensure more than 10 items are displayed #52262
  • Sets no of ticks based on available width for chart #50904
  • Make sure errors per minute are reported correctly #54751
  • Fixes firefox SVG NaN errors when rendering charts #56578
  • Fixes initial error sort field #56577
  • Empty message “No data available” for Labels and User metadata sections missing #49846

Canvas

  • Fixes axisConfig position argument UI #50717
  • Fixes #45896 #50229
  • Fixes bugs with full screen filters #54792
  • Fixes the Copy Post Url link #54831
  • Fixes color and toggle accessibility #54661

Dashboard

  • Removes double handler #53707
  • Decodes url params, so they are not encoded twice #54738
  • Changes background color to align with EUI color #54060
  • Fixes hide edit button for mobile for dashboards #50639

Discover

  • Fixes histogram min interval #53979
  • Improves kql error message handling and avoid fetching twice #54239
  • Fixes double fetch errors #54701
  • Fixes pagination controls should not scroll horizontally for saved search #50764
  • Don’t throw exception when refreshing fields of an index pattern #55836
  • Fixes filter pill label for filters with negated alias #50743
  • Filters scripted fields preview field list to source fields #53826
  • Fixes operator overflowing out popover #50030

Graph

  • Only show explorable fields #54101

Lens

  • Modifies merge tables to use the same logic as auto date #52931
  • Selects Records field when count operation is chosen #53911
  • Shows keyword fields for pre-7.3 index patterns #52410
  • Fixes sorting crash when removing a Y axis that is being used for sorting #52694
  • Shows fields when using index pattern without time field #54804
  • Fixes bugs in Lens filters #56441

Logs

  • Adds missing headers in Logs & metrics #52405
  • Uses the correct icons and labels in the feature cont… #55292
  • Allows Logs/ML integration result access with machine… #55884
  • Fixes the scale of the search markers #55731

Machine Learning

  • Fixes escape special characters for Lucene query language #50494
  • Keeps rule editor flyout open on refresh #53458
  • Fixes counters and percentages for array fields on the Data Visualizer page #55209
  • Fixes tooltip’s persistence on mouse leave #55694
  • Fixes Anomaly Explorer swimlane tooltip issue #55827
  • Fixes the annotation area tooltip offset #55955
  • Fixes info content detector field selection #51914
  • Job validation loading spinner #54450
  • Improves job wizards with datafeed aggregations #55180
  • Fixes missing job_type in job messages search #55330
  • Fixes module setup error for insufficient index pattern privileges #55989
  • Ensures advanced editor can be validated when empty #52831
  • Ensures advanced editor validates model memory unit correctly #54011
  • Ensures result field columns can be deselected and re-selected #54766
  • Only render tablist if it contains tabs #54838
  • Improves handling of text fields #55002
  • Filters out docs with no prediction data from results table #54826
  • Fixes word wrap in Overview page sidebar on IE #50668
  • Fixes lat_long anomalies table links menu and value formatting #50916
  • Fixes loading of Data Visualizer with KQL saved search #51882
  • Corrects URL of the create job tips docs page #53576
  • Displays anomaly actual in chart tooltip when model plot enabled #54364
  • Fixes permissions checks for Data Visualizer create job links #55431
  • Fixes empty table header cell and duplicate ID accessibility issues #54917
  • Accessibility fix for structural markup on table rows #55075

Management

  • Kibana should allow a min_age setting of 0ms in ILM policy phases #53719
  • Adds try/catch when parsing index filter from URI #56051
  • Passes termOrder and hasTermsAgg properties to serializeThresholdWatch function #54391
  • Adds support for capitalized date formats in snapshot names #53751
  • Index Lifecycle Policies show wrong unit in Kibana UI #55228
  • Theme and Mode imports #50473
  • Proxy fallback #50185
  • Fixes load from remote #52814
  • Fixes suggested value for time_zone in range query #53841
  • Handle double quote special case #54474
  • Fixes handling of bad profile data and update tab behavior #55806
  • Fixes icon path in tutorial introduction #49684
  • Fixes index templates editor to support mappings types #55804

Maps

  • Fixes regression preventing maps telemetry from populating & remove task manager logic #52834
  • Categorical palettes #54918
  • Do not re-fetch data on empty filter setting changes #49382
  • Fixes removal of multi fields for tooltip field selection #49816
  • Prevents users from overflowing URL when filtering by shape #50747
  • Only provide visibility check when vector layer has joins #51388
  • Fixes too_many_buckets_exception for top hits #51497
  • Only show styles that apply to layer feature types in legend #52335
  • Fixes tooltips for CCS #52793
  • Passes getFieldFormatter to DynamicTextProperty #53937
  • Expands extent filter to tile boundaries #54276
  • Fixes warning about missing key in react element #55372
  • Fixes join metric field selection bugs #56044
  • Adds mapbox-gl-rtl-text library for RTL languages #54842
  • Ensures the query-object is populated #49917
  • Delays vector tile layer syncing until spritesheet is loaded #48955
  • Sanitizes attribution #52309
  • Only show legend when layer is visible #53781
  • Shows custom color ramps in legend #53780
  • Enforces file-type check in file dialog #55063

Metrics

  • Fixes Metrics Explorer exception when deleting metric #55893
  • Fixes title truncation in Metrics Explorer #55917
  • Passes relevant shouldAllowEdit capabilities into SettingsPage #49781
  • Don’t allow duplicate saved views with the same name #52040
  • Adds aria labels to fields #54510

Monitoring

  • Fixes Logstash pipelines page in multi-cluster environment #50166
  • Improves permissions required around setup mode #50421
  • Adds error state for unstructured logs #53299
  • Ensures setup mode work in a CCS environment #54361
  • Clarifies that these auth settings are for sending data #48437

Operations

  • Adds missing docker settings #56411
  • Prevents xpack.task_manager.index being set to .tasks #52002

Platform

  • Displays changed field formats without requiring hard page refresh. #52874
  • Kibana 7.0.0 URL field formatter doesn’t render relative hyperlinks properly #53265
  • Interpreter conversion of string to number should throw on NaN #27788 #50063
  • Cancels discarded KQL value suggestion requests #51411
  • Performs successful Elasticsearch version check before migrations #51311

Reporting

  • Do not fail the report if request is aborted #52344
  • Fixes map tiles not loading by using Chrome’s Remote Protocol #55137
  • Corrects the docvalue_fields params in the search query Download CSV from Dashboard Panel #52833

Security

  • Uses the server’s basePath when building the SAML ACS #51391
  • Fixes elasticsearch.ssl.alwaysPresentCertificate default #52242
  • Forces line-break if username is a solid long string #50807
  • Fixes infinite redirect loop when multiple cookies are sent #50452
  • Honors configured base path when logging out #50946

SIEM

  • Fixes Empty Source / Destination shown when only ports are populated #50843
  • Removes placeholder from pinned event tooltips #52361
  • Adds filter feature and fixes misc bugs around false values #50999
  • Fixes a bug to allow empty query string when filters are set #51398
  • Adds signal to ECS event.kind and fixes status in signals #51772

Uptime

  • Removes react-router-dom warning in browse #52008
  • Fixes broken functional tests in master #54395
  • Donut chart loader position centered vertically #50219
  • Fixes monitor list pagination arrows #51912
  • Expanded list update most recent error timestamp #51935
  • Feature/monitor details view avoid empty column #51892
  • Feature/expandable row in details ping list #51890
  • Date picker will use commonly used ranges from advance settings #52944
  • Fixes broken Duration chart on Monitor Page #54251
  • Ping List Disable expand row if no body present #54898
  • Fixes Date Range picker stop refresh button #55499
  • Ping histogram uses auto date histogram #55605
  • Uses dynamic index pattern in Uptime #55446
  • Refreshes absolute date ranges for Ping Histogram #56381

Visualizations

  • Adds domain fit option for 0 opacity TSVB line charts #54314
  • Adds default filename when exporting CSV #54003
  • Fixes height of CodeEditor - Safari #56050
  • Fixes missing labels on certain axes and label filter configurations #47563
  • Formats CSV properly #54127
  • Flags nested fields as non-aggregatable #51774

Deprecations

Metrics

  • Deprecates the override fields in settings #54206

Security

  • Additional validation for elasticsearch username #48247

Most Popular