49 Pull requests merged by 25 people

• Add note about direct IO on vector rescoring

  #1927 merged Jun 27, 2025

• readd cs anchors

  #1947 merged Jun 26, 2025

• Update agent/common-problems.md

  #1920 merged Jun 26, 2025

• Add documentation for failure stores.

  #1368 merged Jun 26, 2025

• [Cloud UI nav redesign] Fix navigation routes in instructions

  #1918 merged Jun 26, 2025

• Update kibana/error-server-not-ready.md

  #1937 merged Jun 26, 2025

• Remove mentions of in preview

  #1938 merged Jun 26, 2025

• Add note to clarify Serverless data storage implications

  #1930 merged Jun 26, 2025

• Remove 'in preview' tags for serverless GCP, Azure

  #1935 merged Jun 26, 2025

• Add Azure 'eastus' region

  #1774 merged Jun 26, 2025

• ECH/ECK remote clusters doc is incorrect for trust.yml

  #1647 merged Jun 26, 2025

• Update troubleshoot-ingest-pipelines.md

  #1915 merged Jun 25, 2025

• [Part 1] Update docs for Cloud UI navigation redesign

  #1833 merged Jun 25, 2025

• Update ec-vcpu-boost-instance.md

  #1911 merged Jun 25, 2025

• Update logstah/diagnostic.md

  #1902 merged Jun 25, 2025

• Update data tier _tier_preference to remove "available" as ambiguous

  #1903 merged Jun 25, 2025

• Serverless Changelog 24/06/2025

  #1907 merged Jun 24, 2025

• [E&A & SOLUTIONS] Adds section about Elastic Managed LLM to AI Assistant docs

  #1829 merged Jun 24, 2025

• Update Security reference landing page

  #1901 merged Jun 24, 2025

• [fleet / elastic agent] Add 9.0.3 release notes

  #1886 merged Jun 24, 2025

• (new troubleshoot) Elasticsearch Ingest Pipelines

  #1727 merged Jun 24, 2025

• Adds KB settings known issue to Security known issues

  #1898 merged Jun 24, 2025

• (typo) stack diags no sudo windows

  #1900 merged Jun 24, 2025

• (new page) Logstash Diag

  #1726 merged Jun 24, 2025

• [Observability docs] Update the search connector index pattern setting docs

  #1770 merged Jun 24, 2025

• Update index.md

  #1832 merged Jun 24, 2025

• [Observability] 9.0.3 release notes

  #1788 merged Jun 24, 2025

• Stack release: 7.17.29 / 8.17.8

  #1894 merged Jun 24, 2025

• Add 9.0.3 and 8.18.3 stackpacks to docs for ECE 4.0

  #1890 merged Jun 24, 2025

• [Security] 9.0.3 release notes

  #1786 merged Jun 24, 2025

• [Github Action] Label community issues

  #1746 merged Jun 24, 2025

• Elastic Defend advanced settings

  #1445 merged Jun 24, 2025

• Adjust versions page wording

  #1805 merged Jun 24, 2025

• Remove planning verbiage from search applications docs

  #1888 merged Jun 24, 2025

• Clarify snapshot docs

  #1782 merged Jun 23, 2025

• ECH: Move nodes off allocator doc updated

  #1619 merged Jun 23, 2025

• remove duplicated content in discovery-cluster-formation.md

  #1830 merged Jun 23, 2025

• [Observability Docs] add user-specific prompts docs

  #1705 merged Jun 23, 2025

• Centered logos in "Get started"

  #1827 merged Jun 23, 2025

• Update agent-command-reference.md

  #1809 merged Jun 21, 2025

• Update common-problems.md

  #1811 merged Jun 21, 2025

• Small ES|QL editor changes for 9.1

  #1818 merged Jun 20, 2025

• Update scripting.md

  #1819 merged Jun 20, 2025

• Clarify prerequisites, limitations, and troubleshooting in agent quickstart

  #1813 merged Jun 20, 2025

• Fix unused tags not rendering

  #1816 merged Jun 20, 2025

• [Security] Adds placeholder page for privileged user monitoring

  #1815 merged Jun 20, 2025

• Update agent-command-reference.md

  #1814 merged Jun 20, 2025

• Link to Kibana RN from Security RN

  #1812 merged Jun 20, 2025

• Add ESQL for security section, threat hunt tutorial

  #1689 merged Jun 20, 2025

15 Pull requests opened by 9 people

• [Security] [Serverless July 1] Runscript for MS Defender

  #1820 opened Jun 20, 2025

• Edits for Central Management for EDOT SDKs

  #1822 opened Jun 20, 2025

• Adds Rollup API examples to 'Get started with rollups using the API' page

  #1893 opened Jun 24, 2025

• Discover 9.1.0 updates

  #1905 opened Jun 24, 2025

• Expand "Configure a lifecycle policy" docs

  #1906 opened Jun 24, 2025

• ESQL CCS is going to be GA in 9.1/8.19

  #1914 opened Jun 25, 2025

• ES|QL dashboard controls in 9.1

  #1917 opened Jun 25, 2025

• [ESQL] Improve `skip_unavailable` description in CCS doc

  #1919 opened Jun 25, 2025

• add product diags to 'working with support'

  #1921 opened Jun 25, 2025

• Add Elasticsearch semantic search getting started guide

  #1922 opened Jun 26, 2025

• Add Elasticsearch vector search getting started guide

  #1923 opened Jun 26, 2025

• Rebuild onboarding docs (Get Started) for obs

  #1929 opened Jun 26, 2025

• Space awareness for Elastic Defend

  #1943 opened Jun 26, 2025

• Adds Logstash info to Security ingest page

  #1944 opened Jun 26, 2025

• Updates list of supported agentless integrations

  #1946 opened Jun 26, 2025

36 Issues closed by 17 people

• [UI copy]: Cloud connector copy review

  #1761 closed Jun 26, 2025

• [Internal]: Automatic migration incorrectly placed under "Ingest data to Elastic Security"

  #1574 closed Jun 26, 2025

• [Issue] Add note to clarify why you don't need to worry about data tiers in Serverless

  #1547 closed Jun 26, 2025

• [Serverless] Remove (in preview) for Azure and GCP Serverless regions

  #1934 closed Jun 26, 2025

• Ramp up on ResponseOps, Kibana, ML UI/AI Infra, and Observability (alerting only)

  #1693 closed Jun 26, 2025

• [REQUEST][Security]: Analyzer integrations tracking for 8.18

  #269 closed Jun 26, 2025

• [Issue]: Doc about ECH/ECK CCS/CCR is misleading

  #1378 closed Jun 26, 2025

• [Issue]: Callout location applies to wrong section

  #1392 closed Jun 25, 2025

• [Internal]: Product Diagnostic TOC

  #1725 closed Jun 25, 2025

• [Security][8.19/9.1] Collect cloud service provider metadata with Defend

  #273 closed Jun 25, 2025

• [Internal]: Cloud UI nav redesign PT1

  #1702 closed Jun 25, 2025

• [Issue]: Snowball Example Does Not Work

  #1314 closed Jun 25, 2025

• [Dataset quality] Introducing Degraded docs rule

  #1784 closed Jun 25, 2025

• [Discover] Copy value button for field Value cells in document explorer

  #1670 closed Jun 24, 2025

• [Dashboards] Document ability to create a rule from a dashboard ES|QL viz

  #1658 closed Jun 24, 2025

• [Internal]: ES|QL rule type improvements - adding grouping per row

  #1580 closed Jun 24, 2025

• [Internal]: Known issue for Assistant knowledge base setting @ 9.0.3

  #1895 closed Jun 24, 2025

• [Obs] Release notes for 9.0.3

  #1767 closed Jun 24, 2025

• [Kibana] Check which settings are available on Cloud

  #1896 closed Jun 24, 2025

• [Kibana] Release notes for 9.0.3

  #1766 closed Jun 24, 2025

• Security 9.0.3 release notes

  #1649 closed Jun 24, 2025

• [Website]: The compatibility table is broken

  #1824 closed Jun 24, 2025

• [Kibana] Release notes for 7.17.29

  #1794 closed Jun 24, 2025

• [Kibana] Release notes for 8.18.3

  #1765 closed Jun 24, 2025

• Update Elastic Cloud terminology

  #1873 closed Jun 24, 2025

• ECH - Promote KB about allocator moving nodes due to essential system maintenance

  #1527 closed Jun 23, 2025

• [Kibana] 8.17.8 release notes

  #1748 closed Jun 23, 2025

• [ES|QL] Add inline docs for SAMPLE command

  #1825 closed Jun 23, 2025

• [Website]: Data visualiazation

  #1743 closed Jun 23, 2025

• [ES|QL] Add CHANGE_POINT to Kibana inline docs

  #1810 closed Jun 23, 2025

• [Internal]: Elastic Managed LLM: Default AI Model for Elastic AI Assistant [Security Docs]

  #1754 closed Jun 23, 2025

• [ES|QL in Kibana] Support for CHANGE_POINT command

  #1681 closed Jun 20, 2025

• [ES|QL editor in Kibana] Support for aggregation filtering autocomplete

  #1680 closed Jun 20, 2025

• [ES|QL editor in Kibana] Full text search & recommendation

  #1678 closed Jun 20, 2025

• [ES|QL editor in Kibana] Keyboard shortcut updates

  #1677 closed Jun 20, 2025

• Ingest tutorial review: Monitor hosts with Elastic Agent

  #1639 closed Jun 20, 2025

34 Issues opened by 25 people

• [Ingest] Add and link to Beats/Agent feature comparison

  #1948 opened Jun 26, 2025

• [Internal]: Update the list of supported serverless integrations

  #1945 opened Jun 26, 2025

• Strategy for linking to serverless vs stateful APIs in narrative/procedue docs

  #1942 opened Jun 26, 2025

• [Internal]: Attack Discovery Scheduling and Notification

  #1941 opened Jun 26, 2025

• [Internal]: Security solution prebuilt rule reversion documentation

  #1940 opened Jun 26, 2025

• [Internal]: Persist and View Historical AD Discoveries

  #1939 opened Jun 26, 2025

• Update solution docs to include applies_to versions

  #1933 opened Jun 26, 2025

• [Internal]: Replacing default Quick Prompts with Recommendation Tiles

  #1932 opened Jun 26, 2025

• [Internal]: Update documentation for logs anomalies and categories

  #1931 opened Jun 26, 2025

• [Website]: Fleet environment providers are badly explained

  #1928 opened Jun 26, 2025

• Security 9.0.4 release notes

  #1926 opened Jun 26, 2025

• [Docker Integration] Update information for metrics

  #1925 opened Jun 26, 2025

• [Website]: Elasticsearch Serverless screen no longer has a Home button

  #1924 opened Jun 26, 2025

• [Feedback]: Error with Bulk API update command around External Versioning

  #1916 opened Jun 25, 2025

• [Streams] 9.1 on prem release, feature flag

  #1913 opened Jun 25, 2025

• [Streams] Removal of overview page

  #1912 opened Jun 25, 2025

• [Dataset quality] Introducing Degraded docs rule

  #1910 opened Jun 25, 2025

• Kibana 8.19.0 release notes and what's new

  #1909 opened Jun 25, 2025

• Kibana 9.1.0 release notes

  #1908 opened Jun 25, 2025

• [Internal]: Addition of Verbiage for Being Able to See Users in the Cases Assignee List

  #1904 opened Jun 24, 2025

• [Internal]: Fix incorrect field descriptions in the Security AI Assistant API docs.

  #1899 opened Jun 24, 2025

• [Internal]: Update LLM Performance Matrix

  #1897 opened Jun 24, 2025

• [Internal]: Update Machine Learning docs for new anomaly detection severity colors and filtering controls

  #1892 opened Jun 24, 2025

• [Internal]: Update Machine Learning docs to reflect new navigation in Kibana

  #1891 opened Jun 24, 2025

• Security 9.1 release notes

  #1889 opened Jun 24, 2025

• [Internal]: Rule gaps callout and gaps overview panel

  #1887 opened Jun 24, 2025

• [REQUEST][ResponseOps][Maintenance window]: MW going GA

  #1885 opened Jun 24, 2025

• [Elasticsearch Serverless] Add recommendation to disable response timeouts to Serverless

  #1831 opened Jun 23, 2025

• [Website]: Shared mailbox is not synchronized

  #1828 opened Jun 23, 2025

• [Request]: Remove Elastic Entity Model docs

  #1834 opened Jun 23, 2025

• [ES|QL] Add inline Kibana docs for FORK command

  #1826 opened Jun 23, 2025

• [Website]: Replace supported deployment methods badges

  #1823 opened Jun 20, 2025

• [Internal]: Incomplete Artifact List in Air-Gapped Deployment Guide

  #1821 opened Jun 20, 2025

• [Website]: provide clarity on the take_over parameter on previous versions

  #1817 opened Jun 20, 2025

96 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• ingest pipeline docs "ingest lag"

  #1672 commented on Jun 23, 2025 • 36 new comments

• Network sec: rebrand and new cloud UX, IP filters in serverless

  #1785 commented on Jun 23, 2025 • 27 new comments

• Ingest pipeline best practices

  #1381 commented on Jun 26, 2025 • 12 new comments

• Clarify index settings & APIs that are not available in serverless

  #1728 commented on Jun 25, 2025 • 7 new comments

• Update the docs about Journald support.

  #1272 commented on Jun 26, 2025 • 4 new comments

• apm: Document sampling.tail.discard_on_write_failure config

  #1453 commented on Jun 27, 2025 • 4 new comments

• Update env-provider.md

  #1807 commented on Jun 26, 2025 • 2 new comments

• Space Awareness: Update Fleet roles and privileges UI docs

  #1751 commented on Jun 24, 2025 • 1 new comment

• Data lifecycle docs: “Configure a lifecycle policy” fixes

  #1552 commented on Jun 24, 2025 • 0 new comments

• [security][8.19] Collect DNS events from Linux machines using Defend

  #276 commented on Jun 24, 2025 • 0 new comments

• Add documentation about configuring logs retention

  #1853 commented on Jun 25, 2025 • 0 new comments

• [Suggestion] Add `enable_caps` to Endpoint data volume configuration page

  #536 commented on Jun 24, 2025 • 0 new comments

• [REQUEST]: Add Linux Endpoint Malware Protection btrfs sub-volume documentation

  #913 commented on Jun 24, 2025 • 0 new comments

• [REQUEST][ResponseOps] Create alerting rules from visualizations external docs

  #1710 commented on Jun 24, 2025 • 0 new comments

• [Internal]:[ResponseOps] ES|QL rule type ungrouped alerts

  #1714 commented on Jun 24, 2025 • 0 new comments

• Cloud UI nav redesign PT2

  #1769 commented on Jun 24, 2025 • 0 new comments

• [Feedback]: examples

  #1696 commented on Jun 24, 2025 • 0 new comments

• Omitted Serverless API content during migration

  #1280 commented on Jun 24, 2025 • 0 new comments

• [DOCS] Better / improved instructions for APM Integration monitoring for on-premise

  #1859 commented on Jun 24, 2025 • 0 new comments

• Document log processors and component templates

  #1863 commented on Jun 24, 2025 • 0 new comments

• Onboarding nginx: alerting

  #1864 commented on Jun 24, 2025 • 0 new comments

• [Request]: Improve organization and structure of docs about creating/managing rules

  #1865 commented on Jun 24, 2025 • 0 new comments

• Add spell checking via CI

  #1866 commented on Jun 24, 2025 • 0 new comments

• [Request]: Document mapping of integration variable types to EUI fields, other Fleet/Integrations UI concerns

  #1867 commented on Jun 24, 2025 • 0 new comments

• [Request]: [Draft] Document additional context for observability rules

  #1869 commented on Jun 24, 2025 • 0 new comments

• [Request]: Reference the ECS fields from the integrations doc pages

  #1870 commented on Jun 24, 2025 • 0 new comments

• [Azure docs] Add a new use case on how to collect any metric using the Azure Monitor

  #1871 commented on Jun 24, 2025 • 0 new comments

• [Request]: Document how to route APM Traces, Logs, Metrics to a dedicated namespace

  #1872 commented on Jun 24, 2025 • 0 new comments

• Update ESQL for Search landing page, tutorial for 9.1

  #1797 commented on Jun 24, 2025 • 0 new comments

• Update 'Create/Update an API key'

  #1792 commented on Jun 23, 2025 • 0 new comments

• Clarify the latest version of podman 5.2.2

  #1599 commented on Jun 26, 2025 • 0 new comments

• [apm] Improve instructions for monitoring APM on premise

  #1010 commented on Jun 23, 2025 • 0 new comments

• [UI copy]: Cloud Connector

  #1688 commented on Jun 26, 2025 • 0 new comments

• Data lifecycle docs: Fix up Index management in Kibana

  #1569 commented on Jun 26, 2025 • 0 new comments

• [Meta][Kibana] 8.19 + 9.1 Analytics and Platform checklist

  #1443 commented on Jun 26, 2025 • 0 new comments

• [UI copy]: Refine copy for bulk-updating prebuilt rules

  #1063 commented on Jun 26, 2025 • 0 new comments

• [REQUEST]: Enable endpoint actions in events

  #674 commented on Jun 26, 2025 • 0 new comments

• [Website]: Universal profiling is also available for self-managed deployments

  #1736 commented on Jun 26, 2025 • 0 new comments

• Data lifecycle docs: Configure Lifecycle Policy should have Kibana steps

  #1560 commented on Jun 26, 2025 • 0 new comments

• [Meta][Observability] 8.19 + 9.1 Observability checklist

  #1776 commented on Jun 26, 2025 • 0 new comments

• [Internal]: [ResponseOps] Maintenance Windows public APIs - external docs

  #1713 commented on Jun 26, 2025 • 0 new comments

• Text for custom highlighted fields - modal, alert flyout - overview, and table tabs

  #1132 commented on Jun 26, 2025 • 0 new comments

• [Issue]: Error while pulling elastic-agent container on KSPM

  #1321 commented on Jun 26, 2025 • 0 new comments

• Improve Time series data stream (TSDS) docs

  #1502 commented on Jun 26, 2025 • 0 new comments

• [Internal]: Advanced Mode for Trusted Applications

  #1520 commented on Jun 26, 2025 • 0 new comments

• [Meta][Security] 8.19 + 9.1 Security checklist

  #1760 commented on Jun 26, 2025 • 0 new comments

• [Security][8.19] Ingest Tetragon data

  #274 commented on Jun 25, 2025 • 0 new comments

• [Feedback]: "Reindex documents" API documentation does not describe meaning of dest.routing parameter

  #1414 commented on Jun 25, 2025 • 0 new comments

• [Synthetics] Best practice guide for Synthetics

  #1848 commented on Jun 23, 2025 • 0 new comments

• [Synthetics] Clarify how stand alone agents should be used

  #1847 commented on Jun 23, 2025 • 0 new comments

• [REQUEST]: Missing APM Agents setup for Kubernetes env.

  #1846 commented on Jun 23, 2025 • 0 new comments

• Kubernetes CloudNative Documentation Posture

  #1845 commented on Jun 23, 2025 • 0 new comments

• [Docs] Create a guide for having filebeat write to logs-*-*

  #1844 commented on Jun 23, 2025 • 0 new comments

• [Alerting Docs] Questions and updates for observability alerting docs

  #1843 commented on Jun 23, 2025 • 0 new comments

• [AI Assistant]: Compile list of troubleshooting topics

  #1842 commented on Jun 23, 2025 • 0 new comments

• [AWS monitoring]: Add CloudTrail use case for Elastic Agent

  #1841 commented on Jun 23, 2025 • 0 new comments

• [Alerting]: Add example to rate aggregations page

  #1840 commented on Jun 23, 2025 • 0 new comments

• [Request]: Update OpenTelemetry plugin guidelines for Jenkins in CI/CD observability doc

  #1839 commented on Jun 23, 2025 • 0 new comments

• Enhance alerting examples

  #1838 commented on Jun 23, 2025 • 0 new comments

• Deprecate `apm_system` user

  #1837 commented on Jun 23, 2025 • 0 new comments

• Tutorial Monitor a Java Application - Feedback on some problems encountered

  #1836 commented on Jun 23, 2025 • 0 new comments

• Run Metribeat/Filebeat on Kubernetes

  #1835 commented on Jun 23, 2025 • 0 new comments

• [Request] Response Console external EDR scripts picker

  #1498 commented on Jun 23, 2025 • 0 new comments

• [Internal]: Additional Microsoft Defender for Endpoint response action

  #1532 commented on Jun 23, 2025 • 0 new comments

• [Feedback]: Is `@types/elasticsearch` still under maintenance?

  #1407 commented on Jun 22, 2025 • 0 new comments

• Add Security Warning to links in Docs

  #1734 commented on Jun 20, 2025 • 0 new comments

• Add security warning to Experience docs with dummy links

  #1806 commented on Jun 20, 2025 • 0 new comments

• Add security warning to Ingest docs with dummy links

  #1801 commented on Jun 20, 2025 • 0 new comments

• Add security warning to Developer docs with dummy links

  #1800 commented on Jun 20, 2025 • 0 new comments

• Add security warning to Admin docs with dummy links

  #1799 commented on Jun 20, 2025 • 0 new comments

• [ES|QL editor in Kibana] Upload file via lookup join

  #1682 commented on Jun 20, 2025 • 0 new comments

• [ES|QL] General improvements

  #1808 commented on Jun 20, 2025 • 0 new comments

• [Request]: Improve documentation about metrics (K8s, docker container, and AWS)

  #1874 commented on Jun 24, 2025 • 0 new comments

• Remove eBook called The Elastic Observability guide for AWS

  #1875 commented on Jun 24, 2025 • 0 new comments

• Adding multiple hosts/working with Fleet

  #1876 commented on Jun 24, 2025 • 0 new comments

• Document analyzing log patterns

  #1877 commented on Jun 24, 2025 • 0 new comments

• Explain how to modify your agent configuration after onboarding

  #1878 commented on Jun 24, 2025 • 0 new comments

• [REQUEST]: Document minimal permissions to use Observability dashboards

  #1880 commented on Jun 24, 2025 • 0 new comments

• Update tutorial about monitoring Java app to show Elastic Agent

  #1881 commented on Jun 24, 2025 • 0 new comments

• Update tutorial about monitoring GCP to show Elastic Agent

  #1882 commented on Jun 24, 2025 • 0 new comments

• [Request] Document Developer Setup Docker local

  #1884 commented on Jun 24, 2025 • 0 new comments

• [Internal]: Spaces support for Elastic Defend

  #1514 commented on Jun 23, 2025 • 0 new comments

• Add otel distro links to APM book

  #1868 commented on Jun 23, 2025 • 0 new comments

• Improve documentation for controller manager metrics

  #1883 commented on Jun 23, 2025 • 0 new comments

• [Synthetics] Document infrastructure monitoring for k8s

  #1879 commented on Jun 23, 2025 • 0 new comments

• [Request]: Include a mention of Automatic Import in the Obs docs

  #1862 commented on Jun 23, 2025 • 0 new comments

• [Request]: Update the reindex method on the Observability AI Assistant doc

  #1861 commented on Jun 23, 2025 • 0 new comments

• [Request]: Sanity check of images appearance

  #1857 commented on Jun 23, 2025 • 0 new comments

• [Request]: Document alert data for observability rule types

  #1858 commented on Jun 23, 2025 • 0 new comments

• [Request]: Document how to work around broken fleet policies after upgrading

  #1860 commented on Jun 23, 2025 • 0 new comments

• Update the tutorial Monitor Kubernetes

  #1856 commented on Jun 23, 2025 • 0 new comments

• [Serverless]: Document the full list of Observability limitations

  #1855 commented on Jun 23, 2025 • 0 new comments

• Set up release notes for Profiling

  #1854 commented on Jun 23, 2025 • 0 new comments

• [Request]: Update the guide to Switch from APM Server standalone to Fleet managed on ECH

  #1852 commented on Jun 23, 2025 • 0 new comments

• [DOCS] Warn APM Index Template cloning is dangerous

  #1851 commented on Jun 23, 2025 • 0 new comments

• [Request]: EDOT Troubleshooting section enhancements

  #1849 commented on Jun 23, 2025 • 0 new comments