--- title: Elastic Cloud Serverless changelog description: Review the changes, fixes, and more to Elastic Cloud Serverless. Adds id as a create request parameter #251975, Enables the version-specific policies... url: https://www.elastic.co/elastic/docs-builder/docs/3028/release-notes/cloud-serverless products: - Elastic Cloud Serverless --- # Elastic Cloud Serverless changelog Review the changes, fixes, and more to Elastic Cloud Serverless. ## April 1, 2026 ### Features and enhancements - Adds `id` as a create request parameter [#251975](https://github.com/elastic/kibana/pull/251975) - Enables the version-specific policies feature flag in Fleet [#258796](https://github.com/elastic/kibana/pull/258796) - Converts DSL filters to ES|QL when possible [#259260](https://github.com/elastic/kibana/pull/259260) - Consolidates LLM connector listing via the inference plugin [#258530](https://github.com/elastic/kibana/pull/258530) - Registers a streams exploration skill for Agent Builder [#258330](https://github.com/elastic/kibana/pull/258330) - Merges Observability rules and Stack Management rules into a unified interface where users can more easily manage rules [#258214](https://github.com/elastic/kibana/pull/258214) - Adds an enrich processor to Streams [#256971](https://github.com/elastic/kibana/pull/256971) - Adds a role-based access and control (RBAC) feature for detection alerts in Kibana [#244637](https://github.com/elastic/kibana/pull/244637) - Uses integration-provided schemas in Osquery [#258833](https://github.com/elastic/kibana/pull/258833) - Adds risk, temporal state, and behavioral observation modules [#256156](https://github.com/elastic/kibana/pull/256156) - Adds entity retrieval and enrichment for lead generation data [#256628](https://github.com/elastic/kibana/pull/256628) - Adds a **Resolution** grouping option to the Entity Analytics data grid [#258892](https://github.com/elastic/kibana/pull/258892) - Consolidates management of Entity Analytics and Entity Store [#255009](https://github.com/elastic/kibana/pull/255009) - Adds a **Model Settings** UI for inference endpoint assignments [#258871](https://github.com/elastic/kibana/pull/258871) - Adds a **Models** page to the Inference management pages [#259374](https://github.com/elastic/kibana/pull/259374) - Updates Security machine learning jobs to use entity analytics fields for host and user fields [#255339](https://github.com/elastic/kibana/pull/255339) - Adds `aria` labels to job wizard combo boxes [#258509](https://github.com/elastic/kibana/pull/258509) - Adds CPS unsupported labels to machine learning rules [#258162](https://github.com/elastic/kibana/pull/258162) - Automatically closes an anomaly detection job when stopping its datafeed [#259603](https://github.com/elastic/kibana/pull/259603) - Allows Agent Builder to detect outdated attachments and refreshes them in the next message [#257658](https://github.com/elastic/kibana/pull/257658) - Adds Confluence Cloud as a data source for Workplace AI, letting users connect using basic auth to list and retrieve spaces and pages [#256508](https://github.com/elastic/kibana/pull/256508) - Adds a **Badge** option to **Color by value** in Lens data tables, allowing cell values to display as colored badges instead of text or background coloring [#257408](https://github.com/elastic/kibana/pull/257408) - Allows ES|QL generation to search index patterns [#253492](https://github.com/elastic/kibana/pull/253492) - Enables OAuth on the Salesforce connector [#259826](https://github.com/elastic/kibana/pull/259826) - Enables OAuth on Google connectors [#259528](https://github.com/elastic/kibana/pull/259528) - Adds an `entries` Liquid filter for iterating over object keys [#259249](https://github.com/elastic/kibana/pull/259249) - Improves ES|QL heatmap visualizations by applying better tick labels for time-based axes [#259218](https://github.com/elastic/kibana/pull/259218) - Hardens distributed external source execution for ES|QL [#144277](https://github.com/elastic/elasticsearch/pull/144277) - Supports TS queries that have a window smaller than the bucket size in ES|QL [#143661](https://github.com/elastic/elasticsearch/pull/143661) - Adds anonymous Azure access via `auth=none` in ES|QL [#144475](https://github.com/elastic/elasticsearch/pull/144475) - Adds anonymous GCS access via `auth=none` in ES|QL [#144476](https://github.com/elastic/elasticsearch/pull/144476) - Adds anonymous S3 access via `auth=none` in ES|QL [#144471](https://github.com/elastic/elasticsearch/pull/144471) - Adds Arrow-native Block and Vector implementations for ES|QL [#142981](https://github.com/elastic/elasticsearch/pull/142981) - Adds planner implementation for new `LIMIT BY` command in ES|QL [#144069](https://github.com/elastic/elasticsearch/pull/144069) - Routes ES|QL external source I/O through the `esql_worker` pool [#144596](https://github.com/elastic/elasticsearch/pull/144596) - Adds initial support and plumbing for native `int4` vector scoring [#144215](https://github.com/elastic/elasticsearch/pull/144215) - Adds SIMD implementations for native `int4` vector scoring [#144429](https://github.com/elastic/elasticsearch/pull/144429) - Uses `vdotq_s32` for int7u/int8 distances on ARM [#144505](https://github.com/elastic/elasticsearch/pull/144505) - Adds a `semantic_text` field type to MMR Result Diversification Retriever (v2) [#141666](https://github.com/elastic/elasticsearch/pull/141666) - Returns `numSkipped` per cluster instead of all skipped shards in `CanMatch` [#142170](https://github.com/elastic/elasticsearch/pull/142170) - Defaults `index.mapping.use_doc_values_skipper` to `true` for logsdb [#142851](https://github.com/elastic/elasticsearch/pull/142851) - Adds an embedding query vector builder [#143410](https://github.com/elastic/elasticsearch/pull/143410) - Enables multimodal inputs for all chat completion integrations [#144509](https://github.com/elastic/elasticsearch/pull/144509) - Enables `synthetic_id` by default under a feature flag [#144026](https://github.com/elastic/elasticsearch/pull/144026) - Adds suffix casts for histogram types in ES|QL [#144628](https://github.com/elastic/elasticsearch/pull/144628) - Implements `to_tdigest` for the `exponential_histogram` type in ES|QL [#144537](https://github.com/elastic/elasticsearch/pull/144537) - Removes the `multi_match` function in ES|QL [#144512](https://github.com/elastic/elasticsearch/pull/144512) - Adds CSV tests for lookup join behavior with multivalues in ES|QL [#144520](https://github.com/elastic/elasticsearch/pull/144520) - Adds LZ4, Snappy, and Brotli decompression codecs to ES|QL [#144688](https://github.com/elastic/elasticsearch/pull/144688) - Builds subsets of keys for aggregations in ES|QL [#144434](https://github.com/elastic/elasticsearch/pull/144434) - Adds logical planning on the lookup node in ES|QL [#144241](https://github.com/elastic/elasticsearch/pull/144241) - Speeds up remote Parquet reads in ES|QL [#144454](https://github.com/elastic/elasticsearch/pull/144454) - Upgrades aircompressor to 2.0.3 for ES|QL [#144423](https://github.com/elastic/elasticsearch/pull/144423) - Extracts centroid from doc values for `ST_CENTROID_AGG` over `geo_shape` and `cartesian_shape` [#142528](https://github.com/elastic/elasticsearch/pull/142528) - Removes upscaling for exponential histograms to improve performance [#143393](https://github.com/elastic/elasticsearch/pull/143393) - Prevents users from creating too many nested boolean clauses while creating the Lucene query to avoid query explosion [#143220](https://github.com/elastic/elasticsearch/pull/143220) - Adds input text sanitization [#259262](https://github.com/elastic/kibana/pull/259262) - Adds support for Logs AI Insight in ES|QL mode in Discover [#258595](https://github.com/elastic/kibana/pull/258595) - Removes the `max_tokens` parameter from reasoning and updates validation logic [#144514](https://github.com/elastic/elasticsearch/pull/144514) - Stores ignored sources in binary doc values [#143784](https://github.com/elastic/elasticsearch/pull/143784) - Stores ignored wildcard fields in binary doc values [#144524](https://github.com/elastic/elasticsearch/pull/144524) - Uses bulk scoring for filtered scenarios in DiskBBQ [#144008](https://github.com/elastic/elasticsearch/pull/144008) - Validates `InferenceStringGroup` constructor arguments [#144517](https://github.com/elastic/elasticsearch/pull/144517) ### Fixes - Fixes the ES|QL suggestions logic in **Lens** [#258475](https://github.com/elastic/kibana/pull/258475) - Fixes the backups service in Dashboards [#257762](https://github.com/elastic/kibana/pull/257762) - Fixes an auto-upgrade bug where upgrading agents in other policies interfered with calculation [#258387](https://github.com/elastic/kibana/pull/258387) - Fixes space awareness for Fleet bulk agent actions (unenroll, upgrade, reassign to policy) [#258582](https://github.com/elastic/kibana/pull/258582) - Fixes processors accessibility announcements [#259096](https://github.com/elastic/kibana/pull/259096) - Fixes the selected log level when a policy override exists [#259425](https://github.com/elastic/kibana/pull/259425) - Fixes policy creation for input-only packages with the `dynamic_signal_types: true` setting in Fleet [#258143](https://github.com/elastic/kibana/pull/258143) - Returns focus to the **Create Transform** button after an action [#258095](https://github.com/elastic/kibana/pull/258095) - Fixes pipeline suggestions using wrong field names on ECS and OTel streams [#258139](https://github.com/elastic/kibana/pull/258139) - Fixes Hosts semconv metric calculations [#259372](https://github.com/elastic/kibana/pull/259372) - Fixes dashboard filters not applied to SLO embeddable for grouping fields [#255746](https://github.com/elastic/kibana/pull/255746) - Fixes missing action variables in Slack Web API text message mode [#259499](https://github.com/elastic/kibana/pull/259499) - Fixes alert tags when source tags are a string [#259729](https://github.com/elastic/kibana/pull/259729) - Fixes private locations spaces constraint [#233662](https://github.com/elastic/kibana/pull/233662) - Fixes Monaco autocomplete suggestions appearing behind modals and flyouts [#259558](https://github.com/elastic/kibana/pull/259558) - Fixes the alert count so the max alerts warning shows correctly [#259199](https://github.com/elastic/kibana/pull/259199) - Shows notes only for saved timelines, ignoring empty strings from draft timelines [#259658](https://github.com/elastic/kibana/pull/259658) - Fixes the **Convert to lookup index** action being permanently disabled on the index list view in stateful deployments [#259449](https://github.com/elastic/kibana/pull/259449) - Fixes query rules UI rejecting case variants as duplicate values [#259506](https://github.com/elastic/kibana/pull/259506) - Fixes query ruleset save deleting filtered-out rules [#259503](https://github.com/elastic/kibana/pull/259503) - Disables **Start/Update deployment** actions for Rerank models in trained models [#257400](https://github.com/elastic/kibana/pull/257400) - Ensures local routing is used for anomaly results searches [#260058](https://github.com/elastic/kibana/pull/260058) - Validates the HTTP connector URL against `allowedHosts` at execution time [#258080](https://github.com/elastic/kibana/pull/258080) - Fixes workflow tools where choice parameters accepted invalid inputs [#259282](https://github.com/elastic/kibana/pull/259282) - Fixes bugs in the ES|QL NDJSON datasource [#143969](https://github.com/elastic/elasticsearch/pull/143969) - Fixes `first`/`last` functions when used with timeseries in ES|QL [#144603](https://github.com/elastic/elasticsearch/pull/144603) - Fixes over-allocation when unpacking dimension values [#144525](https://github.com/elastic/elasticsearch/pull/144525) - Fixes ES|QL `BUCKET` date rounding selection [#144425](https://github.com/elastic/elasticsearch/pull/144425) - Fixes incorrect error message for overflowing division in ES|QL `ROW` [#138973](https://github.com/elastic/elasticsearch/pull/138973) - Fixes the reset anomaly detection API crashing when only colliding indices exist [#144545](https://github.com/elastic/elasticsearch/pull/144545) - Fixes an edge case in the `_terms_enum` API for IP fields [#144308](https://github.com/elastic/elasticsearch/pull/144308) - Fixes `geo_centroid` over `geo_shape` when merging multiple shards [#144637](https://github.com/elastic/elasticsearch/pull/144637) - Fixes request cache invalidation to use the Elasticsearch cache helper consistently [#144581](https://github.com/elastic/elasticsearch/pull/144581) - Fixes wrong return value in `ContextIndexSearcher.totalTermFreq` [#144333](https://github.com/elastic/elasticsearch/pull/144333) - Handles null columns in the ES|QL `CHANGE_POINT` value [#144388](https://github.com/elastic/elasticsearch/pull/144388) ## March 31, 2026 ### Features and enhancements - Allows Elastic Cloud API keys to authenticate directly against Elasticsearch and Kibana APIs on Serverless projects. By selecting **Cloud, Elasticsearch, and Kibana** API access when creating a key, a single credential can manage both organization resources and data operations such as queries, ingestion, and alerting. Refer to [Elastic Cloud API keys](https://www.elastic.co/elastic/docs-builder/docs/3028/deploy-manage/api-keys/elastic-cloud-api-keys) for details. - Allows you to restrict Elastic Cloud user access to the Elastic Cloud console only for Serverless projects: - When assigning roles to a user for a specific project, select **Cloud console** access. - When assigning roles [using the Elastic Cloud API](/elastic/docs-builder/docs/3028/deploy-manage/users-roles/cloud-organization/manage-users#ec-api-organizations), pass an empty `application_roles` array. Refer to [User roles and privileges](/elastic/docs-builder/docs/3028/deploy-manage/users-roles/cloud-organization/user-roles#access) for details. ## March 23, 2026 ### Features and enhancements - Makes filter pills collapsible in Dashboards and Discover when at least one filter pill appears beneath the search bar [#255887](https://github.com/elastic/kibana/pull/255887) - Migrates integration inputs and variables on package upgrade when a `migrate_from` field is defined [#242934](https://github.com/elastic/kibana/pull/242934) - Resolves and merges multiple integration configuration templates listed in `template_paths` into a single configuration in Fleet [#257730](https://github.com/elastic/kibana/pull/257730) - Improves ES|QL document highlighting so multiple occurrences of the same field are highlighted [#258764](https://github.com/elastic/kibana/pull/258764) - Registers a background maintainer that links user entities sharing the same `user.email`, with namespace-based priority for entity resolution [#257479](https://github.com/elastic/kibana/pull/257479) - Ensures that the `location` field is used to set provider config fields in the correct location [#250838](https://github.com/elastic/kibana/pull/250838) - Adds import and export functionality for workflows, enabling the sharing of workflow definitions across Kibana instances [#257976](https://github.com/elastic/kibana/pull/257976) ### Fixes - Fixes the Webhook connector's `accessTokenUrl` validation [#258290](https://github.com/elastic/kibana/pull/258290) - Fixes connector handling so additional fields are included correctly for integrations that use them [#257625](https://github.com/elastic/kibana/pull/257625) - Improves the screen reader announcement when you enter full-screen mode on a dashboard [#258230](https://github.com/elastic/kibana/pull/258230) - Fixes a bug where editing a by-reference Lens visualization from a dashboard saved changes, but the panel reverted visually until you refreshed the page [#256984](https://github.com/elastic/kibana/pull/256984) - Adjusts dashboard scroll-on-drop so the viewport does not jump when you only move a panel slightly [#258445](https://github.com/elastic/kibana/pull/258445) - Fixes incorrect screen reader announcements for filter options in Index Management component templates [#256948](https://github.com/elastic/kibana/pull/256948) - Announces when bulk actions become available or hidden in the index management tables [#257089](https://github.com/elastic/kibana/pull/257089) - Displays the current configuration in the **Retention** column in the Index Management data view list when `prefer_ilm` is set for a data stream [#254609](https://github.com/elastic/kibana/pull/254609) - Fixes a browser console error when opening the data frame analytics jobs list [#258591](https://github.com/elastic/kibana/pull/258591) - Fixes Canvas failing to load embeddables when a `savedObjectId` is present without library references [#257779](https://github.com/elastic/kibana/pull/257779) - Cancels in-flight ES|QL requests in the metrics experience when you change or clear a breakdown dimension [#258473](https://github.com/elastic/kibana/pull/258473) - Validates workflow inputs on the server before execution so API, child workflow, and agent paths cannot run with invalid or missing inputs [#254546](https://github.com/elastic/kibana/pull/254546) ## March 18, 2026 ### Features and enhancements - Improves Lens data table performance for large datasets [#256234](https://github.com/elastic/kibana/pull/256234) - Allows you to drag opened collapsible sections, improving the dashboard layout [#257191](https://github.com/elastic/kibana/pull/257191) - Pauses automatic integration upgrades when a new version introduces deprecations until you accept or decline the upgrade [#255273](https://github.com/elastic/kibana/pull/255273) - Adds support for installing integrations that declare content package dependencies in Fleet [#256700](https://github.com/elastic/kibana/pull/256700) - Adds UI warnings to distinguish between packages that will be deprecated in a future version from packages that are already deprecated [#257937](https://github.com/elastic/kibana/pull/257937) - Adds a tab selector to Discover session panels in Dashboards, letting you choose which Discover tab to display, with improved warning messages when a tab or data view can't be retrieved [#252311](https://github.com/elastic/kibana/pull/252311) - Enables the ES|QL `MMR` command in the editor [#257208](https://github.com/elastic/kibana/pull/257208) - Adds a new **Discover session** button in the new panel options of a dashboard to embed a Discover by-value session directly. [#256293](https://github.com/elastic/kibana/pull/256293) - Enables PromQL in the ES|QL editor [#257619](https://github.com/elastic/kibana/pull/257619) - Restores recently closed tab groups [#253365](https://github.com/elastic/kibana/pull/253365) - Improves ES|QL pretty printing by measuring editor width so long lines wrap more naturally [#257440](https://github.com/elastic/kibana/pull/257440) - Adds backend APIs to reset Synthetics monitor Fleet/service resources [#256696](https://github.com/elastic/kibana/pull/256696) - Lets you configure a custom timeout for browser monitors on private locations [#252156](https://github.com/elastic/kibana/pull/252156) - Updates the agent system prompt to pass attachment time ranges into tool calls when you are in the UI [#256343](https://github.com/elastic/kibana/pull/256343) - Extends the alert on no data options for the metric threshold rule to the custom threshold rule [#251976](https://github.com/elastic/kibana/pull/251976) - Adds tooltips to metric type badges in the Metrics experience flyout [#257053](https://github.com/elastic/kibana/pull/257053) - Enables monitoring of `METRICS_INFO` search requests in APM by tagging them with a dedicated execution context label on the Kibana server [#256439](https://github.com/elastic/kibana/pull/256439) - Adds a synthetics monitor attachment for the AI Agent [#256540](https://github.com/elastic/kibana/pull/256540) - Adds a `get_logs` tool and a `log_search` skill for iterative log investigation in Agent Builder [#256206](https://github.com/elastic/kibana/pull/256206) - Adds the foundational layer for the Entity Analytics Lead Generation feature [#255272](https://github.com/elastic/kibana/pull/255272) - Allows you to define custom closing reasons for alerts [#253127](https://github.com/elastic/kibana/pull/253127) - Adds server-side infrastructure and APIs so scheduled Osquery pack query results surface in live query history [#256270](https://github.com/elastic/kibana/pull/256270) - Adds a unified history table for Osquery with live and scheduled query results, cursor-based pagination, source filtering, a date range picker, and scheduled execution detail routing [#256917](https://github.com/elastic/kibana/pull/256917) - Adds scheduled Osquery execution detail pages and APIs for per-agent results and integrations [#257118](https://github.com/elastic/kibana/pull/257118) - Adds support for GCP cloud connector reusability [#253093](https://github.com/elastic/kibana/pull/253093) - Syncs Osquery history filters with URL query parameters so the state survives reloads and back navigation [#257895](https://github.com/elastic/kibana/pull/257895) - Replaces the legacy `EuiDataGrid` results table in the Osquery plugin with `UnifiedDataTable` (behind a feature flag) [#257627](https://github.com/elastic/kibana/pull/257627) - Adds UI for managing data anonymization profiles in Gen AI settings [#256246](https://github.com/elastic/kibana/pull/256246) - Injects `METADATA _id` into ES|QL detection rule queries when it is missing [#254703](https://github.com/elastic/kibana/pull/254703) - Validates Indicator match rules' `threat_index` parameter the same way as `index`, skipping execution with a partial failure when no threat indices exist [#256353](https://github.com/elastic/kibana/pull/256353) - Defaults the semantic text mappings UI to the Jina v5 inference endpoint when it is available [#257464](https://github.com/elastic/kibana/pull/257464) - Expands Agent Builder to offer the full Kibana connector catalog instead of a limited set [#257924](https://github.com/elastic/kibana/pull/257924) - Clarifies session expiry messaging to distinguish idle timeout from maximum session lifespan [#252779](https://github.com/elastic/kibana/pull/252779) - Routes AIOps and Data Visualizer pages and embeddables for cross-project search [#256244](https://github.com/elastic/kibana/pull/256244) - Adds a cross-project search warning to the anomaly detection jobs list [#256713](https://github.com/elastic/kibana/pull/256713) - Adds user-created skills in Agent Builder [#252221](https://github.com/elastic/kibana/pull/252221) - Adds a Figma data source and connector for Workplace AI [#255322](https://github.com/elastic/kibana/pull/255322) - Adds an Amazon S3 connector and data source to list buckets, list objects, and download files [#253753](https://github.com/elastic/kibana/pull/253753) - Adds a new `list` legend layout for horizontal legends (top and bottom), offering a more space-efficient alternative to the grid layout, also making this layout the default for XY charts [#257092](https://github.com/elastic/kibana/pull/257092) - Improves Lens metric trend badge styling with separate background and text color palettes [#256255](https://github.com/elastic/kibana/pull/256255) - Releases the ES|QL `MMR` command on the Elasticsearch engine for use outside snapshot builds [#143867](https://github.com/elastic/elasticsearch/pull/143867) - Splits large Parquet files into one ES|QL external read split per row group for better parallelism [#144018](https://github.com/elastic/elasticsearch/pull/144018) - Enables parallel parsing for large CSV and NDJSON external files [#143997](https://github.com/elastic/elasticsearch/pull/143997) - Prunes unused columns in ES|QL external data source plans [#143903](https://github.com/elastic/elasticsearch/pull/143903) - Adds `FormatReadContext` to consolidate `FormatReader` API [#143928](https://github.com/elastic/elasticsearch/pull/143928) - Adds a `LIMIT BY` command to the parser [#144102](https://github.com/elastic/elasticsearch/pull/144102) - Adds memory accounting to `GroupedLimitOperator` [#143941](https://github.com/elastic/elasticsearch/pull/143941) - Replaces page-count-based backpressure in `AsyncExternalSourceBuffer` with byte-based backpressure [#144218](https://github.com/elastic/elasticsearch/pull/144218) - Improves Parquet type mapping for ES|QL external sources [#144059](https://github.com/elastic/elasticsearch/pull/144059) - Pushes stats to an external source using metadata [#143940](https://github.com/elastic/elasticsearch/pull/143940) - Registers TSV as a dedicated ES|QL external format that defaults to tab delimiters [#143906](https://github.com/elastic/elasticsearch/pull/143906) - Adds remote views detection for cross-cluster search [#143384](https://github.com/elastic/elasticsearch/pull/143384) - Adds `dense_vector` equality and inequality support in ES|QL [#140005](https://github.com/elastic/elasticsearch/pull/140005) - Adds indexing pressure tracking to OTLP endpoints [#144009](https://github.com/elastic/elasticsearch/pull/144009) - Improves aggregate counter downsampling by recording first values per bucket and preserving reset boundaries [#143381](https://github.com/elastic/elasticsearch/pull/143381) - Adds a `to_exponential_histogram` conversion function in ES|QL [#143868](https://github.com/elastic/elasticsearch/pull/143868) - Implements `EXPLAIN` for local data node plans [#142748](https://github.com/elastic/elasticsearch/pull/142748) - Implements `first_over_time` and `last_over_time` for T-Digest values in ES|QL [#143832](https://github.com/elastic/elasticsearch/pull/143832) - Validates the `TOP_SNIPPETS` query argument is foldable [#142763](https://github.com/elastic/elasticsearch/pull/142763) - Adds configurable bracket-based multi-value support for CSV reader [#143890](https://github.com/elastic/elasticsearch/pull/143890) - Enhances CSV schema inference and parsing [#144050](https://github.com/elastic/elasticsearch/pull/144050) - Adds reasoning-related request fields to the inference chat completion API for supported models [#143242](https://github.com/elastic/elasticsearch/pull/143242) - Adds linked-project memory and data size totals to the internal serverless autoscaling metrics response - Makes `to` and `from` optional in ES|QL `TBUCKET` when the Kibana timestamp filter is present [#144057](https://github.com/elastic/elasticsearch/pull/144057) - Optimizes Painless scripts that call `.contains` on constant lists by hoisting values into a static set [#143311](https://github.com/elastic/elasticsearch/pull/143311) - Supports target bucket count in `TBUCKET` with explicit from/to date range [#142747](https://github.com/elastic/elasticsearch/pull/142747) - Upgrades the DiskBBQ vector index for faster filtered search and additional quantization options [#143760](https://github.com/elastic/elasticsearch/pull/143760) - Upgrades Elasticsearch to Apache Lucene v10.4 [#141882](https://github.com/elastic/elasticsearch/pull/141882) - Adds physical planning on the lookup node [#143707](https://github.com/elastic/elasticsearch/pull/143707) ### Fixes - Fixes a discrepancy between tracked alerts and alerts in task state [#257235](https://github.com/elastic/kibana/pull/257235) - Handles reporting content stream errors so large CSV exports do not surface as unhandled exceptions [#252982](https://github.com/elastic/kibana/pull/252982) - Reverts the default borderless style for horizontal **Links** panels so existing dashboards keep visible borders unless you disable them [#256354](https://github.com/elastic/kibana/pull/256354) - Fixes dashboard panel highlight animations rendering behind the dashboard viewport [#256327](https://github.com/elastic/kibana/pull/256327) - Runs Canvas **Embeddable** expressions through embeddable transforms in the Canvas API so saved configurations match the embeddable pipeline [#252191](https://github.com/elastic/kibana/pull/252191) - Fixes dashboards incorrectly adding access control metadata when the UI session had no user profile [#255065](https://github.com/elastic/kibana/pull/255065) - Fixes Canvas **Add from library** using each embeddable type's `onAdd` handler instead of a hardcoded `{ savedObjectId }` shape [#257261](https://github.com/elastic/kibana/pull/257261) - Fixes ES|QL control panels not receiving dashboard focus while editing, which could leave flyouts in a broken state [#257263](https://github.com/elastic/kibana/pull/257263) - Fixes dashboard panels stuck loading after an embeddable error [#257188](https://github.com/elastic/kibana/pull/257188) - Improves error handling and test coverage for the Fleet debug API [#258115](https://github.com/elastic/kibana/pull/258115) - Improves the accessible name for the **Index mode** control in the **Create index** modal [#256392](https://github.com/elastic/kibana/pull/256392) - Fixes an issue where autocompleting an opening brace `{` or bracket `[` in the Console request body incorrectly wrapped the suggestion in double quotes [#256286](https://github.com/elastic/kibana/pull/256286) - Fixes the Dev Tools Console losing syntax highlighting on later requests when a previous request body was indented [#257539](https://github.com/elastic/kibana/pull/257539) - Suggests an ES|QL query from an available remote index when no local data exists [#257340](https://github.com/elastic/kibana/pull/257340) - Removes `spaceId` from Synthetics monitor package policy identifiers and stores package policy IDs as saved object references [#251018](https://github.com/elastic/kibana/pull/251018) - Prevents APM URL crashes when invalid `rangeFrom` or `rangeTo` values are supplied [#256887](https://github.com/elastic/kibana/pull/256887) - Prevents APM waterfall views from crashing when span documents omit optional `span.composite` fields [#257368](https://github.com/elastic/kibana/pull/257368) - Fixes custom threshold rules not evaluating wildcard filters because the data view was omitted from evaluation [#256979](https://github.com/elastic/kibana/pull/256979) - Prevents APM service view transaction pages from crashing for mobile services [#257447](https://github.com/elastic/kibana/pull/257447) - Fixes deleting wired child streams when the parent still has query stream children [#257626](https://github.com/elastic/kibana/pull/257626) - Clears the flyout state in Elastic Security when you navigate away so flyouts do not reopen on return [#256001](https://github.com/elastic/kibana/pull/256001) - Aligns EQL sequence rule shell alerts when the same field appears in dot notation and nested object notation [#254830](https://github.com/elastic/kibana/pull/254830) - Updates tutorial **Run in Console** actions to use the empty button style [#256455](https://github.com/elastic/kibana/pull/256455) - Prevents the **Add field** button in the index mappings editor from overwriting an existing field when the name matches [#256728](https://github.com/elastic/kibana/pull/256728) - Restricts semantic text inference creation to compatible task types at the flyout [#256586](https://github.com/elastic/kibana/pull/256586) - Fixes Agent Builder relevance search to respect whether fields are searchable when mappings set `index: false` [#257993](https://github.com/elastic/kibana/pull/257993) - Removes the deprecated `exact_fuzzy` option from the Query Rules UI [#258278](https://github.com/elastic/kibana/pull/258278) - Fixes the space selector briefly showing **No spaces match** while spaces are still loading [#255654](https://github.com/elastic/kibana/pull/255654) - Fixes stack monitoring shard legends when node aggregations are missing [#257854](https://github.com/elastic/kibana/pull/257854) - Fixes stack monitoring Elasticsearch nodes sorting for CPU usage when metrics are returned as strings [#257852](https://github.com/elastic/kibana/pull/257852) - Improves screen reader announcements for data frame analytics flyouts opened from Stack Management [#256409](https://github.com/elastic/kibana/pull/256409) - Fixes Discover field statistics not refreshing saved searches when dashboard filters change [#257241](https://github.com/elastic/kibana/pull/257241) - Fixes the anomaly detection Single Metric Viewer rules flyout showing stale job data after you add or delete a rule [#257196](https://github.com/elastic/kibana/pull/257196) - Stops persisting default suggestion titles when you create ES|QL charts inline on a dashboard [#256475](https://github.com/elastic/kibana/pull/256475) - Fixes Liquid template validation incorrectly accepting variables used before assignment in workflows [#255337](https://github.com/elastic/kibana/pull/255337) - Adds support for native YAML arrays in workflow `foreach` steps [#256298](https://github.com/elastic/kibana/pull/256298) - Fixes workflow editor validation falsely flagging valid `item` and `index` references in `data.map` steps [#257703](https://github.com/elastic/kibana/pull/257703) - Fixes SLO **View in app** URLs and a nullish-coalescing bug in SLO redirects [#257910](https://github.com/elastic/kibana/pull/257910) - Fixes the Data Set Quality table layout at 200% zoom [#257097](https://github.com/elastic/kibana/pull/257097) - Returns a clear error in the response console when malware protection is turned off and a scan is requested [#255597](https://github.com/elastic/kibana/pull/255597) - Fixes a null pointer exception when validating multimodal chat completion requests in the Inference API [#144107](https://github.com/elastic/elasticsearch/pull/144107) - Stops `aggregate_metric_double` deprecation warnings from leaking into unrelated REST responses during cluster state application [#144040](https://github.com/elastic/elasticsearch/pull/144040) - Fixes missing `boost` support for `QUERY_STRING` in ES|QL [#143938](https://github.com/elastic/elasticsearch/pull/143938) - Fixes missing `zero_terms_query` support for `MATCH` in ES|QL [#143668](https://github.com/elastic/elasticsearch/pull/143668) - Evaluates `ReferenceAttributes` to potentially `FieldAttributes` for full-text functions restriction [#143893](https://github.com/elastic/elasticsearch/pull/143893) - Fixes ES|QL `FORK` optimizations when `unmapped_fields` is set to `nullify` [#143030](https://github.com/elastic/elasticsearch/pull/143030) - Fixes ES|QL `STATS` with `WHERE` under `unmapped_fields` nullify and load modes [#144029](https://github.com/elastic/elasticsearch/pull/144029) - Prevents incorrect nullification of grouping aliases inside ES|QL aggregates [#141340](https://github.com/elastic/elasticsearch/pull/141340) - Fixes a `ClassCastException` in the ES|QL `DECAY` scoring function when processing non-double numeric values [#144118](https://github.com/elastic/elasticsearch/pull/144118) - Fixes ES|QL time series queries that combine `STATS` dimensions with `LIMIT 0` [#144031](https://github.com/elastic/elasticsearch/pull/144031) - Fixes field caps synthesizing incorrect object parents for dotted subfields when `subobjects` is `false`, avoiding false ES|QL mapping conflicts [#144183](https://github.com/elastic/elasticsearch/pull/144183) - Prevents GPU-assisted merges from failing with `ClassCastException` when the store wraps the underlying directory [#143531](https://github.com/elastic/elasticsearch/pull/143531) - Fixes equality checks for empty `HistogramUnionState` instances used in percentile aggregations [#143990](https://github.com/elastic/elasticsearch/pull/143990) - Fixes the unified highlighter when phrases span multiple values in array fields [#143440](https://github.com/elastic/elasticsearch/pull/143440) - Fixes an issue where dynamic templating was overridden by the automatic `dense_vector` mapping [#143733](https://github.com/elastic/elasticsearch/pull/143733) - Uses a `SearchExecutionContext` copy for each Percolator execution [#142765](https://github.com/elastic/elasticsearch/pull/142765) - Clarifies an index not found error when a project pattern is used - Fixes exclusion handling for cross-project search - Verifies that the `TS` command works in a cross-project search environment - Verifies that the `*:concrete_index` expression is resolved on every project - Verifies that qualified expressions match the origin project ## March 9, 2026 ### Features and enhancements - Improves ES|QL controls to retrieve variable types from query results, preventing query failures when numeric values are stored as keyword fields [#254436](https://github.com/elastic/kibana/pull/254436) - Adds a size gauge to dashboard panels while resizing, showing the current grid dimensions [#255363](https://github.com/elastic/kibana/pull/255363) - Prevents time series index mode from being enabled on non-metrics data stream types in input packages [#251205](https://github.com/elastic/kibana/pull/251205) - Adds autocomplete and validation support for the `MMR` command in the ES|QL editor [#254014](https://github.com/elastic/kibana/pull/254014) - Defaults to table view in Discover when an index or data view has five or fewer columns [#255292](https://github.com/elastic/kibana/pull/255292) - Enables **Save As** for embedded Discover sessions, returning to the new saved session in Discover after saving [#255323](https://github.com/elastic/kibana/pull/255323) - Consolidates the return navigation for by-reference and by-value embeddable editing to highlight the updated panel on the dashboard in Discover [#255816](https://github.com/elastic/kibana/pull/255816) - Adds the ability to run workflows from the alerts table, including the single alert, bulk selection, and flyout actions [#252405](https://github.com/elastic/kibana/pull/252405) - Adds an **Add to chat** button to rule details, rule editing, and the alerts flyout, allowing users to attach detection rules to the AI Agent for exploration-style analysis [#253043](https://github.com/elastic/kibana/pull/253043) - Adds a security Machine Learning skill to Agent Builder for querying anomaly detection jobs based on natural language prompts [#254908](https://github.com/elastic/kibana/pull/254908) - Updates the Unusual Process for a Windows Host Machine Learning job bucket span from 15 minutes to 2 hours to reduce false positives [#255855](https://github.com/elastic/kibana/pull/255855) - Adds `split` and `sort` processors to Streams for splitting string fields into arrays and sorting array elements [#251681](https://github.com/elastic/kibana/pull/251681) - Adds the ability to dynamically create AI Connectors for Elastic Inference Service preconfigured inference endpoints [#254826](https://github.com/elastic/kibana/pull/254826) - Adds a **Rule Monitoring Overview** panel to the **Rules Monitoring** tab, showing rule execution summaries and gap fill status [#252327](https://github.com/elastic/kibana/pull/252327) - Adds a ServiceNow Search connector and data source for searching across records and knowledge bases, retrieving contents, metadata, and comments [#252430](https://github.com/elastic/kibana/pull/252430) - Adds a Zendesk data source with ticket listing, ticket retrieval, and search capabilities [#254739](https://github.com/elastic/kibana/pull/254739) - Adds a PagerDuty data source with tools for managing incidents, escalation policies, on-call schedules, and more [#255154](https://github.com/elastic/kibana/pull/255154) - Adds a Zoom connector and data source for listing meetings, retrieving participants, accessing recordings, and downloading transcripts [#255174](https://github.com/elastic/kibana/pull/255174) - Adds a Firecrawl data source and connector for scraping, searching, mapping, and crawling web content [#255004](https://github.com/elastic/kibana/pull/255004) - Adds a Google Calendar connector and data source [#252740](https://github.com/elastic/kibana/pull/252740) - Adds a Tavily data source for web search capabilities [#252717](https://github.com/elastic/kibana/pull/252717) - Exposes rule backfill operations (schedule, find, get, and delete) as public API endpoints [#253010](https://github.com/elastic/kibana/pull/253010) - Adds an **Explore traces** button to the Service Map edge popover that opens Discover with a filtered ES|QL query [#254011](https://github.com/elastic/kibana/pull/254011) - Updates chart axis title and label styling in Lens and dashboards to reduce visual prominence, letting chart data stand out [#254587](https://github.com/elastic/kibana/pull/254587) - Improves the legend UI in Lens XY and Partition charts by showing action icons only on hover [#255616](https://github.com/elastic/kibana/pull/255616) - Ensures browser monitors on private locations explicitly enable network and screenshot data streams for consistent data collection [#255967](https://github.com/elastic/kibana/pull/255967) - Makes the Agent Builder default agent editable and customizable per Kibana space [#256333](https://github.com/elastic/kibana/pull/256333) - Adds custom header support for the Azure OpenAI Service in the Inference API [#142969](https://github.com/elastic/elasticsearch/pull/142969) - Adds `dense_vector` support for the ES|QL `SUM` aggregation function [#142129](https://github.com/elastic/elasticsearch/pull/142129) - Adds limit pushdown optimization for ES|QL external data sources [#143515](https://github.com/elastic/elasticsearch/pull/143515) - Adds splittable bzip2 support for ES|QL external data sources [#143534](https://github.com/elastic/elasticsearch/pull/143534) - Improves ES|QL query performance by pruning unused regex extract nodes during optimization [#140982](https://github.com/elastic/elasticsearch/pull/140982) - Adds `dense_vector` support for the ES|QL `COALESCE` function [#142974](https://github.com/elastic/elasticsearch/pull/142974) - Supports custom rulesets in the `icu_transform` token filter for user-defined transliterations [#143060](https://github.com/elastic/elasticsearch/pull/143060) - Supports nested documents in time-series indices with synthetic ID [#143151](https://github.com/elastic/elasticsearch/pull/143151) ### Fixes - Ensures RPC route validation errors are thrown consistently, preventing schema validation regressions [#255181](https://github.com/elastic/kibana/pull/255181) - Fixes library annotation groups in Lens not syncing across panels after an update [#252640](https://github.com/elastic/kibana/pull/252640) - Fixes the pinned state for ES|QL and range slider controls when rendered through the control group renderer [#256035](https://github.com/elastic/kibana/pull/256035) - Fixes incorrect installation of integration assets [#254923](https://github.com/elastic/kibana/pull/254923) - Fixes the agent unenroll task in Fleet [#255726](https://github.com/elastic/kibana/pull/255726) - Fixes autocomplete requests piling up without cancellation [#255664](https://github.com/elastic/kibana/pull/255664) - Fixes a potential issue where the analyzer query did not use the correct values when fetching data [#255396](https://github.com/elastic/kibana/pull/255396) - Ensures the data view is ready before fetching data for the analyzer preview [#255400](https://github.com/elastic/kibana/pull/255400) - Fixes ES|QL `fetchSourceDocuments` missing the data tier exclusion filter [#255341](https://github.com/elastic/kibana/pull/255341) - Adds support for timestamp overrides in Timeline, using the data view's configured timestamp field instead of the default `@timestamp` [#251827](https://github.com/elastic/kibana/pull/251827) - Fixes Automatic Migration's compatibility with Claude 4.6 Opus and Sonnet models by removing assistant prepopulated messages [#255740](https://github.com/elastic/kibana/pull/255740) - Deprecates the `Enable CCS Warning Privileges` setting in Kibana **Advanced Settings** and reduces noisy index pattern access warnings for detection rules [#252183](https://github.com/elastic/kibana/pull/252183) - Fixes accessibility heading levels in Log Rate Analysis, Log Pattern Analysis, and Change Point Detection [#253266](https://github.com/elastic/kibana/pull/253266) - Fixes an issue in the Dev Tools console where closing nested braces broke syntax highlighting for subsequent elements [#255426](https://github.com/elastic/kibana/pull/255426) - Makes long filter matches expandable in the filter UI [#255093](https://github.com/elastic/kibana/pull/255093) - Adds the Elastic Inference Service cost callout to all AI-powered suggestion entry points in Streams [#255588](https://github.com/elastic/kibana/pull/255588) - Fixes an issue in Dev Tools Console where syntax highlighting broke when queries contained accented or non-ASCII characters [#255649](https://github.com/elastic/kibana/pull/255649) - Fixes focus behavior when there are errors in the connector flyout form [#255770](https://github.com/elastic/kibana/pull/255770) - Fixes Search Playground routes to limit the maximum size of arrays [#255881](https://github.com/elastic/kibana/pull/255881) - Fixes ES|QL tool crashes in Agent Builder when optional parameters are null [#256588](https://github.com/elastic/kibana/pull/256588) - Fixes a 500 error on the APM error group details page caused by a missing required `transaction.sampled` field [#255788](https://github.com/elastic/kibana/pull/255788) - Fixes the `platform.core.search` and `index_search` tools ignoring nested fields when searching for matching documents [#255914](https://github.com/elastic/kibana/pull/255914) - Fixes a crash on the APM service **Metrics** tab caused by a stale controls state format [#254999](https://github.com/elastic/kibana/pull/254999) - Fixes MCP connectors ignoring the proxy and SSL configuration from the actions plugin [#255813](https://github.com/elastic/kibana/pull/255813) - Fixes the content connector API key regeneration to display the newly generated key in the deployment UI [#256083](https://github.com/elastic/kibana/pull/256083) - Fixes the deanonymization offset drift that caused incorrect entity highlighting positions in chat messages [#256112](https://github.com/elastic/kibana/pull/256112) - Fixes asset details locator parameters in custom dashboards [#256412](https://github.com/elastic/kibana/pull/256412) - Fixes false liquid template validation errors caused by YAML comments [#256237](https://github.com/elastic/kibana/pull/256237) - Fixes an error on the burn rate alert details page for suppressed alerts [#256435](https://github.com/elastic/kibana/pull/256435) - Fixes the `_source` field in the Index Management mappings editor to use the correct `index.mapping.source.mode` setting instead of the deprecated `_source.mode` [#255122](https://github.com/elastic/kibana/pull/255122) - Adds `any-value` aggregators for ES|QL `FIRST` and `LAST` functions when the sort field is null-typed or foldable [#143619](https://github.com/elastic/elasticsearch/pull/143619) - Adds a circuit breaker for query construction to prevent out-of-memory errors from automaton-based queries [#142150](https://github.com/elastic/elasticsearch/pull/142150) - Fixes a missing error handling bug in `ST_SIMPLIFY` [#143480](https://github.com/elastic/elasticsearch/pull/143480) - Fixes date fields with `ignore_malformed` to properly ignore object and array values [#143533](https://github.com/elastic/elasticsearch/pull/143533) - Fixes incorrect doc-partitioning enablement for count operations in ES|QL [#143544](https://github.com/elastic/elasticsearch/pull/143544) - Fixes ES|QL `LIMIT` failing after all columns are dropped [#143463](https://github.com/elastic/elasticsearch/pull/143463) - Fixes an issue with ES|QL Lookup Join when loading large text fields [#143627](https://github.com/elastic/elasticsearch/pull/143627) - Fixes the ES|QL `TS` command ignoring aliases in the `BY` clause [#143489](https://github.com/elastic/elasticsearch/pull/143489) - Fixes anomaly detection job updates overriding `categorization_examples_limit` with the default value [#140524](https://github.com/elastic/elasticsearch/pull/140524) - Fixes CSV-escaped quotes in generated documentation examples [#143449](https://github.com/elastic/elasticsearch/pull/143449) - Fixes SQL client parsing errors for array header values [#143408](https://github.com/elastic/elasticsearch/pull/143408) - Fixes ES|QL t-digest percentile calculations to use the correct merging digest implementation [#143473](https://github.com/elastic/elasticsearch/pull/143473) - Improves document parsing performance by reusing previously seen dynamically-created mappers [#143377](https://github.com/elastic/elasticsearch/pull/143377) ## March 2, 2026 ### Features and enhancements - Adds a new line-optimized color palette for line charts in Lens [#253437](https://github.com/elastic/kibana/pull/253437) - Adds sort order controls for heatmap visualization axes [#244696](https://github.com/elastic/kibana/pull/244696) - Adds library support for the Markdown embeddable panel [#248779](https://github.com/elastic/kibana/pull/248779) - Adds a borderless option to the panel settings [#255021](https://github.com/elastic/kibana/pull/255021) - Displays warnings for deprecated integration features [#253923](https://github.com/elastic/kibana/pull/253923) - Adds an out-of-the-box alerting rule template to newly installed integrations for monitoring idle data streams [#254730](https://github.com/elastic/kibana/pull/254730) - Adds an **Alerting** tab to the integrations UI for viewing and managing alerting-related assets [#253948](https://github.com/elastic/kibana/pull/253948) - Enables dashboard and URL drilldowns for ES|QL charts in Lens [#253223](https://github.com/elastic/kibana/pull/253223) - Simplifies the ES|QL query button states to show **Search** or **Cancel** with consistent styling [#254121](https://github.com/elastic/kibana/pull/254121) - Improves the commenting and uncommenting behavior in the ES|QL editor to match standard IDE conventions [#254851](https://github.com/elastic/kibana/pull/254851) - Adds an EUI Tour to the Tab menu for switching between classic and ES|QL modes [#254183](https://github.com/elastic/kibana/pull/254183) - Adds notifications when background searches complete [#249857](https://github.com/elastic/kibana/pull/249857) - Reduces the private location monitors sync task interval and makes it configurable [#252708](https://github.com/elastic/kibana/pull/252708) - Improves the maintenance window callout for private location monitors [#252847](https://github.com/elastic/kibana/pull/252847) - Replaces the legacy waterfall component with the new unified trace waterfall in APM, supporting unprocessed OpenTelemetry data [#248629](https://github.com/elastic/kibana/pull/248629) - Adds error handling to the Observability landing page to prevent stalled navigation when status checks fail [#254171](https://github.com/elastic/kibana/pull/254171) - Adds an entity analytics skill to Agent Builder for answering risk score questions about users and hosts [#252400](https://github.com/elastic/kibana/pull/252400) - Adds a space ID filter in **Advanced Settings** [#247733](https://github.com/elastic/kibana/pull/247733) - Adds the ability to configure a space-level default project routing expression in the **Space Management** UI [#250990](https://github.com/elastic/kibana/pull/250990) - Adds the Gemini 2.5 Flash Lite, Claude 4.5 Haiku, and Claude 4.6 Sonnet preconfigured connectors [#253109](https://github.com/elastic/kibana/pull/253109) - Redesigns dashboard panel titles with updated margins, reduced font weight, and a teal hover color [#251720](https://github.com/elastic/kibana/pull/251720) - Improves the **Inference endpoints** management page by adding a view to group endpoints by service [#254296](https://github.com/elastic/kibana/pull/254296) - Adds a server-side workflow validation endpoint [#254502](https://github.com/elastic/kibana/pull/254502) - Adds Streams APIs as allowed Kibana workflow steps [#252068](https://github.com/elastic/kibana/pull/252068) - Adds Cases workflow steps [#253119](https://github.com/elastic/kibana/pull/253119) - Defaults to a line chart when dropping a timestamp field into the Lens workspace [#253930](https://github.com/elastic/kibana/pull/253930) - Adds table borders to metadata and dimensions in the **View details** flyout [#252329](https://github.com/elastic/kibana/pull/252329) - Respects the `observability:enableInspectEsQueries` setting in the **Hosts** UI [#253618](https://github.com/elastic/kibana/pull/253618) - Connects the fields list breakdown with the dimensions breakdown in Discover [#248920](https://github.com/elastic/kibana/pull/248920) - Adds server-side support for user-created skills in Agent Builder [#252493](https://github.com/elastic/kibana/pull/252493) - Adds agent and tools RBAC subfeature privileges [#254464](https://github.com/elastic/kibana/pull/254464) - Adds a modular framework for querying external data sources from ES|QL via the `EXTERNAL` command. [#141678](https://github.com/elastic/elasticsearch/pull/141678) - Adds an NDJSON data source to ES|QL [#142560](https://github.com/elastic/elasticsearch/pull/142560) - Addresses code review findings from the pluggable data source framework merge in ES|QL [#142565](https://github.com/elastic/elasticsearch/pull/142565) - Adds mapping and model changes for exposing endpoint heuristics [#141393](https://github.com/elastic/elasticsearch/pull/141393) - Supports multimodal inputs for chat completion in the Inference API [#142736](https://github.com/elastic/elasticsearch/pull/142736) - Adds FireworksAI integration to the Elasticsearch inference plugin, supporting text embeddings [#137130](https://github.com/elastic/elasticsearch/pull/137130) - Adds GPU vector indexing monitoring to the `_xpack/usage` response [#141932](https://github.com/elastic/elasticsearch/pull/141932) - Adds a search task watchdog to log hot threads on slow searches [#142746](https://github.com/elastic/elasticsearch/pull/142746) - Adds support for base64-encoded kNN query vectors [#140796](https://github.com/elastic/elasticsearch/pull/140796) - Adds the ES|QL `REGISTERED_DOMAIN` command [#142680](https://github.com/elastic/elasticsearch/pull/142680) - Allows intermediate builds in PR-based benchmarks [#142472](https://github.com/elastic/elasticsearch/pull/142472) - Adds native byte vector scorers [#142015](https://github.com/elastic/elasticsearch/pull/142015) - Delays partial results from returning until query completion [#141073](https://github.com/elastic/elasticsearch/pull/141073) - Adds multi-valued field support for the ES|QL `TOP_SNIPPETS` function [#142117](https://github.com/elastic/elasticsearch/pull/142117) - Adds telemetry for ES|QL query settings [#141836](https://github.com/elastic/elasticsearch/pull/141836) - Adds a minimum competitive aware collection for multiple shards and threads in ES|QL [#142406](https://github.com/elastic/elasticsearch/pull/142406) - Extends the external data source framework with a request/response Connector SPI for services that return data over a network protocol for ES|QL [#142667](https://github.com/elastic/elasticsearch/pull/142667) - Adds a Google Cloud Storage data source plugin for ES|QL [#142563](https://github.com/elastic/elasticsearch/pull/142563) - Adds support for the ORC file format in ES|QL [#142900](https://github.com/elastic/elasticsearch/pull/142900) - Makes ES|QL data source plugins load slowly [#142815](https://github.com/elastic/elasticsearch/pull/142815) - Removes snapshot protection from ES|QL nodes to reduce late materialization [#142834](https://github.com/elastic/elasticsearch/pull/142834) - Adds the `METRICS_INFO` command [#141667](https://github.com/elastic/elasticsearch/pull/141667) - Implements median aggregation for T-Digest [#142684](https://github.com/elastic/elasticsearch/pull/142684) - Adds API key support to the SQL JDBC driver and CLI [#142021](https://github.com/elastic/elasticsearch/pull/142021) - Supports scalar arithmetic operations for `dense_vector` fields [#141060](https://github.com/elastic/elasticsearch/pull/141060) - Adds `IndexVersion` checking to the `synthetic_id` validator [#141725](https://github.com/elastic/elasticsearch/pull/141725) - Updates view CRUD actions to be index actions [#141570](https://github.com/elastic/elasticsearch/pull/141570) - Adds an update service settings method for the AI21 inference service [#142597](https://github.com/elastic/elasticsearch/pull/142597) - Adds an update service settings method for the Alibaba Cloud Search inference service [#142738](https://github.com/elastic/elasticsearch/pull/142738) ### Fixes - Fixes uncaught errors from `scheduleUnusedUrlsCleanupTask()` [#254574](https://github.com/elastic/kibana/pull/254574) - Fixes a blank page appearing at the end of PDF exports when using the **Print format** option with an even number of dashboard visualizations [#254957](https://github.com/elastic/kibana/pull/254957) - Fixes report generation failing with multi-page Canvas workpads [#255022](https://github.com/elastic/kibana/pull/255022) - Fixes the dashboard background color not displaying correctly [#253068](https://github.com/elastic/kibana/pull/253068) - Removes mode from stored `timeRange` to prevent schema validation errors [#255178](https://github.com/elastic/kibana/pull/255178) - Filters out unenrolled agents in the cleanup policy revisions task [#254899](https://github.com/elastic/kibana/pull/254899) - Fixes incorrect KQL bar results for some indices [#254119](https://github.com/elastic/kibana/pull/254119) - Aborts in-flight long-running queries when navigating away [#254487](https://github.com/elastic/kibana/pull/254487) - Resets the default profile state when transitioning between tab modes in Discover [#255226](https://github.com/elastic/kibana/pull/255226) - Marks ES|QL rule execution errors as user-triggered for improved error reporting [#255011](https://github.com/elastic/kibana/pull/255011) - Fixes the annotation API on Elastic Cloud Serverless [#254285](https://github.com/elastic/kibana/pull/254285) - Passes the alerts data view to `buildEsQuery` for correct wildcard queries on keyword fields [#255225](https://github.com/elastic/kibana/pull/255225) - Fixes alert visibility and filters for grouped SLOs on the details page [#254601](https://github.com/elastic/kibana/pull/254601) - Falls back to the Elasticsearch API key when granting the Unified Identity and Access Management (UIAM) API key fails [#254707](https://github.com/elastic/kibana/pull/254707) - Fixes the notes filtering logic to show notes attached to alerts, events, and timelines [#248110](https://github.com/elastic/kibana/pull/248110) - Standardizes and persists the rows-per-page preference across tables [#253499](https://github.com/elastic/kibana/pull/253499) - Enables `defaultModel` for the Azure OpenAI connector to support Azure API Management (APIM) endpoints [#253577](https://github.com/elastic/kibana/pull/253577) - Fixes an issue where the analyzer was not showing when the `newDataViewPickerEnabled` feature flag was turned off [#255182](https://github.com/elastic/kibana/pull/255182) - Prevents the embeddable console from auto-closing on Chrome or overlay clicks [#253382](https://github.com/elastic/kibana/pull/253382) - Fixes API key pagination to handle more than 10,000 keys [#250826](https://github.com/elastic/kibana/pull/250826) - Fixes an issue where the AI Connector inference endpoint creation failed when adaptive allocations were enabled and the `elasticsearch` provider was used [#251357](https://github.com/elastic/kibana/pull/251357) - Fixes the trace sample title wrapping vertically in APM [#254536](https://github.com/elastic/kibana/pull/254536) - Fixes dashboard scanning to include collapsible sections when fetching related dashboards [#254600](https://github.com/elastic/kibana/pull/254600) - Updates the metrics flyout in Discover to use ES|QL instead of SQL [#254537](https://github.com/elastic/kibana/pull/254537) - Fixes focus management when entering full-screen mode in the metrics grid [#254701](https://github.com/elastic/kibana/pull/254701) - Propagates inference errors correctly to users [#254815](https://github.com/elastic/kibana/pull/254815) - Prevents the Workflows table from re-sorting when toggling a workflow's enabled state [#252724](https://github.com/elastic/kibana/pull/252724) - Fixes the dimensions dropdown position in full-screen mode [#255049](https://github.com/elastic/kibana/pull/255049) - Fixes false validation errors for template-local variables in Liquid templates [#253405](https://github.com/elastic/kibana/pull/253405) - Fixes a rendering issue where the **Attributes** tab in the Doc Viewer flyout showed erratic scroll behavior [#255173](https://github.com/elastic/kibana/pull/255173) - Fixes out-of-memory crashes and Kibana restarts caused by the gap auto-fill scheduler creating excessively large saved objects [#254788](https://github.com/elastic/kibana/pull/254788) - Fixes a race condition in the Streams data quality controller that caused incorrect Discover navigation [#254139](https://github.com/elastic/kibana/pull/254139) - Fixes the processor name overlapping the badge in streams [#251874](https://github.com/elastic/kibana/pull/251874) - Fixes transforms producing an empty destination index when the source query references runtime fields [#142450](https://github.com/elastic/elasticsearch/pull/142450) - Disables Continuous Access Evaluation (CAE) in the Microsoft Graph authorization plugin [#142848](https://github.com/elastic/elasticsearch/pull/142848) - Fixes ES|QL to account for field readers in the circuit breaker [#140666](https://github.com/elastic/elasticsearch/pull/140666) - Fixes ES|QL to account for missing `StubRelation` due to `SurrogateExpressions` replacement [#142882](https://github.com/elastic/elasticsearch/pull/142882) - Fixes ES|QL data source release-build failures [#142839](https://github.com/elastic/elasticsearch/pull/142839) - Fixes ES|QL null comparison type checking [#140660](https://github.com/elastic/elasticsearch/pull/140660) - Fixes the AVX-512 fpclass mask to classify negative infinity as negative in MIP scoring [#142514](https://github.com/elastic/elasticsearch/pull/142514) - Fixes built-in roles sync to retry on lock contention instead of silently discarding pending updates [#142433](https://github.com/elastic/elasticsearch/pull/142433) - Fixes a `NullPointerException` when no query is specified for the standard retriever [#142479](https://github.com/elastic/elasticsearch/pull/142479) - Replaces `IllegalStateException` with `IllegalArgumentException` for conflicting time series metadata [#142370](https://github.com/elastic/elasticsearch/pull/142370) - Returns a 404 instead of 500 error when scroll or point-in-time (PIT) references nodes that have left the cluster [#142405](https://github.com/elastic/elasticsearch/pull/142405) - Fixes a `QlIllegalArgumentException` with non-foldable date range queries in SQL [#142386](https://github.com/elastic/elasticsearch/pull/142386) - Makes metric names static strings for reuse - Fixes serialization of `NodeGpuStatsResponse` when no GPU is present ## February 23, 2026 ### Features and enhancements - Adds four new Microsoft Azure [regions](https://www.elastic.co/elastic/docs-builder/docs/3028/deploy-manage/deploy/elastic-cloud/regions) for Elastic Cloud Serverless: - East US 2 (`eastus2`) located in Virginia - Germany West Central (`germanywestcentral`) located in Frankfurt - Southeast Asia (`southeastasia`) located in Singapore - Spain Central (`spaincentral`) located in Madrid - Shows warnings in the UI when an integration is deprecated, including badges, callout messages, and tooltip icons [#251860](https://github.com/elastic/kibana/pull/251860) - Allows integration rollback even when not all integration policies have been upgraded [#253646](https://github.com/elastic/kibana/pull/253646) - Redesigns the ES|QL editor with a new menu for query history, help, and starring, and repositions the date picker, run button, and keyboard shortcuts [#251223](https://github.com/elastic/kibana/pull/251223) - Adds the ability to acknowledge and unacknowledge alerts directly from the alerts table, with audit logging for workflow status transitions [#252945](https://github.com/elastic/kibana/pull/252945) - Adds SLO and Service entity attachments to Agent Builder, enabling entity-grounded conversations with automatic context fetching [#252390](https://github.com/elastic/kibana/pull/252390) - Adds high-level rule execution info logging to the **Execution events** tab, showing matched events, alerts created, and suppressed alert counts [#253992](https://github.com/elastic/kibana/pull/253992) - Moves rule summary, definition, and schedule into a dedicated **Overview** tab on the rule details page, and surfaces alerts, exceptions, results, and events at the top of the page [#251662](https://github.com/elastic/kibana/pull/251662) - Adds support for fetching entity relationships in the **Entity Graph API**, including ownership, supervision, dependency, and access patterns [#251178](https://github.com/elastic/kibana/pull/251178) - Enables Splunk v2 dashboard parsing in Automatic Migrations [#253970](https://github.com/elastic/kibana/pull/253970) - Adds a **Show entity relationships** action to entity node popovers in the graph visualization [#252803](https://github.com/elastic/kibana/pull/252803) - Adds a dynamic default connector fallback in **GenAI Settings** that automatically selects a preferred connector when no default is configured [#252861](https://github.com/elastic/kibana/pull/252861) - Replaces custom agent icons with the standard EUI `productAgent` icon across all solutions [#252526](https://github.com/elastic/kibana/pull/252526) - Adds a network direction processor to Streams that calculates traffic direction from source and destination IP addresses [#250894](https://github.com/elastic/kibana/pull/250894) - Improves condition filtering in Streams data enrichment with match-rate badges and the ability to filter simulation results by condition [#251129](https://github.com/elastic/kibana/pull/251129) - Improves the **Inference Endpoints** management page by adding a view to group endpoints by model, and makes this the default view [#252984](https://github.com/elastic/kibana/pull/252984) - Displays a warning callout on the **Rules** page when the gap auto-fill scheduler encounters errors, with a link to the scheduler logs [#250393](https://github.com/elastic/kibana/pull/250393) - Migrates Agent Builder from a flyout to the sidebar API for a more consistent experience [#252918](https://github.com/elastic/kibana/pull/252918) - Adds pre-execution workflows to Agent Builder, enabling agents to run one or more workflows before each execution to modify prompts or cancel the agent run [#252452](https://github.com/elastic/kibana/pull/252452) - Adds a Slack data source for Workplace AI with message search and send capabilities [#252972](https://github.com/elastic/kibana/pull/252972) - Supports multi-dimension breakdowns in Lens series layers, allowing up to five dimensions in the **Discover** dimension dropdown [#251731](https://github.com/elastic/kibana/pull/251731) - Adds a `get_traces` tool to the Observability AI agent for retrieving distributed trace samples, including transactions, spans, errors, and correlated logs [#250952](https://github.com/elastic/kibana/pull/250952) - Adds host infrastructure metrics and service correlation to Alert AI Insights, improving root cause analysis for both APM and infrastructure alerts [#252973](https://github.com/elastic/kibana/pull/252973) - Adds a `get_service_topology` tool to the Observability AI agent for retrieving service dependencies with latency, throughput, and error rate metrics [#251770](https://github.com/elastic/kibana/pull/251770) - Adds OpenTelemetry entity support to the APM **Infrastructure** tab for Kubernetes pods, Kubernetes containers, and Docker containers [#252188](https://github.com/elastic/kibana/pull/252188) - Reduces output tokens for the `get_anomaly_detection_jobs` tool by lowering default limits and adding filtering parameters for anomaly score, job group, and influencer [#251415](https://github.com/elastic/kibana/pull/251415) - Adds support for ECS-formatted error documents in the APM service details **Errors** tab, properly displaying `error.message` and `error.type` fields [#254138](https://github.com/elastic/kibana/pull/254138) ### Fixes - Fixes a bug with PagerDuty where setting the **Custom details** field caused rules to fail [#253683](https://github.com/elastic/kibana/pull/253683) - Fixes config panel scrolling in the Lens editor so that all configuration options are accessible when content exceeds the visible area [#253247](https://github.com/elastic/kibana/pull/253247) - Fixes overly restrictive filter `meta.value` validation that rejected valid phrase and range filter values [#253537](https://github.com/elastic/kibana/pull/253537) - Fixes an issue where an agent that was rolled back after an upgrade could not be upgraded again in the Fleet UI [#253850](https://github.com/elastic/kibana/pull/253850) - Fixes incorrect ES|QL validation of the `TS` (time series) command that was wrongly applying `FROM` command rules [#253635](https://github.com/elastic/kibana/pull/253635) - Fixes the Synthetics monitor toggle state leaking between monitors in the details flyout when switching between different monitors [#253314](https://github.com/elastic/kibana/pull/253314) - Speeds up bulk rule deletion, significantly reducing the time to delete large numbers of prebuilt rules [#253116](https://github.com/elastic/kibana/pull/253116) - Fixes Comprehensive File Timeline template filters to combine with AND instead of OR [#251242](https://github.com/elastic/kibana/pull/251242) - Adds an optional `region` field to the Amazon Bedrock connector, fixing SigV4 request signing for custom endpoint domains [#252960](https://github.com/elastic/kibana/pull/252960) - Fixes rule details **Overview** tab responsiveness, preventing overflow of MITRE ATT&CK fields on narrow viewports [#252890](https://github.com/elastic/kibana/pull/252890) - Fixes the legacy `rules/prepackaged` endpoints from returning 500 errors on a Basic license when rules include machine learning rules [#253574](https://github.com/elastic/kibana/pull/253574) - Fixes **Today** and **This week** time filters for Log Rate Analysis and Log Pattern Analysis embeddables on dashboards [#252925](https://github.com/elastic/kibana/pull/252925) - Fixes autocomplete not working in the embedded console [#253306](https://github.com/elastic/kibana/pull/253306) - Fixes an error in the Streams AI pipeline suggestions when generated grok patterns contain empty strings [#251113](https://github.com/elastic/kibana/pull/251113) - Fixes the refresh button in the Streams app query bar not triggering a data refetch [#253295](https://github.com/elastic/kibana/pull/253295) - Fixes ML inference pipeline operations failing due to system-managed date fields introduced in Elasticsearch 9.2 [#252579](https://github.com/elastic/kibana/pull/252579) - Includes external reference IDs in the attached documents check when selecting cases [#253107](https://github.com/elastic/kibana/pull/253107) - Fixes Beats tutorial authentication instructions in Elastic Cloud Serverless to show the correct API key-based configuration instead of unsupported `cloud.id`/`cloud.auth` instructions [#253164](https://github.com/elastic/kibana/pull/253164) - Fixes a bug in Vega where `runtime_mappings` defined in `data[].url.body` were ignored or overridden [#253560](https://github.com/elastic/kibana/pull/253560) - Adds parameter validation to the **Entity store install API**, including KQL filter validation, index pattern checks, and minimum frequency enforcement [#252366](https://github.com/elastic/kibana/pull/252366) - Fixes execution tree rendering where steps after a large `foreach` loop were hidden or overlapped after collapsing and re-expanding the loop [#253576](https://github.com/elastic/kibana/pull/253576) - Fixes scrollbar colors in Safari when the macOS appearance setting is the opposite of the selected Kibana color mode [#253484](https://github.com/elastic/kibana/pull/253484) ## February 16, 2026 ### Features and enhancements - Suggests lines for time series queries in Lens [#252661](https://github.com/elastic/kibana/pull/252661) - Adds an alerting rule template to newly installed integration packages for inactivity monitoring [#252546](https://github.com/elastic/kibana/pull/252546) - Adds authentication fields to Elastic Agent binary download sources managed by Fleet to support connecting to self-hosted artifact registries [#250557](https://github.com/elastic/kibana/pull/250557) - Persists query mode to local storage [#250388](https://github.com/elastic/kibana/pull/250388) - Makes the `RERANK` command generally available [#252242](https://github.com/elastic/kibana/pull/252242) - Uses a restorable state in the doc viewer's **JSON** tab [#252054](https://github.com/elastic/kibana/pull/252054) - Adds a **View in Discover** link to APM rule-based alert details to view related documents in Discover [#248990](https://github.com/elastic/kibana/pull/248990) - Adds `get_runtime_metrics` tool [#251768](https://github.com/elastic/kibana/pull/251768) - Adds support for duplicating packs and saved queries in the osquery plugin [#252517](https://github.com/elastic/kibana/pull/252517) - Improves the **User** and **Host** entity details flyouts to show a skeleton loading state for observed data [#252657](https://github.com/elastic/kibana/pull/252657) - Adds an Anthropic Claude Opus 4.6 preconfigured connector [#252177](https://github.com/elastic/kibana/pull/252177) - Adds **Zoom in** button to the date picker [#252252](https://github.com/elastic/kibana/pull/252252) - Adds a new `redact` processor [#250389](https://github.com/elastic/kibana/pull/250389) - Adds a summary statistics bar to the Inference endpoints page to show counts of services, models, types, and endpoints [#251558](https://github.com/elastic/kibana/pull/251558) - Adds sorting capabilities to the Inference endpoints page to sort by endpoint, service, type, or model [#252189](https://github.com/elastic/kibana/pull/252189) - Consolidates badges under the endpoint name and removes the Type column on the Inference endpoints page [#252621](https://github.com/elastic/kibana/pull/252621) - Adds support for multi-dimension breakdowns [#250727](https://github.com/elastic/kibana/pull/250727) - Adds a data source browser to the ES|QL editor [#251897](https://github.com/elastic/kibana/pull/251897) - Adds a Jira Cloud data source [#251345](https://github.com/elastic/kibana/pull/251345) - Adds a fields browser to the ES|QL editor in Discover [#252749](https://github.com/elastic/kibana/pull/252749) - Migrates metrics in Discover flyout to the new flyout system [#251395](https://github.com/elastic/kibana/pull/251395) - Adds audit logging for agent and tool actions [#252143](https://github.com/elastic/kibana/pull/252143) - Allows sorting and retrieving latency percentiles in the `get_trace_metrics` tool [#249488](https://github.com/elastic/kibana/pull/249488) - Adds the **Indexing Tier** view to AutoOps for Elastic Cloud Serverless, which provides insights into indexing performance and ingest VCU usage. ### Fixes - Fixes rule execution failing due to null execution UUIDs [#252618](https://github.com/elastic/kibana/pull/252618) - Adjusts the horizontal link panel height to two rows [#252707](https://github.com/elastic/kibana/pull/252707) - Fixes `TypeError` when an integration has no SVG icons [#251308](https://github.com/elastic/kibana/pull/251308) - Restores support for generating CSV reports of Fleet agent data in Serverless environments [#247185](https://github.com/elastic/kibana/pull/247185) - Fixes handling of missing values [#251892](https://github.com/elastic/kibana/pull/251892) - Applies integration limit check after the deduplication step in `parseIntegrationsTSV` [#252486](https://github.com/elastic/kibana/pull/252486) - Fixes accessibility issues in the **Confirm delete** modal [#251962](https://github.com/elastic/kibana/pull/251962) - Updates the OpenAI connector to use `labelAppend` to indicate optional fields [#251857](https://github.com/elastic/kibana/pull/251857) - Replaces the deprecated `listAdd` icon with `indexOpen` icon [#251930](https://github.com/elastic/kibana/pull/251930) - Excludes failed rules from non-failed status filters [#252263](https://github.com/elastic/kibana/pull/252263) - Updates the rule management APIs to ensure that response actions are validated [#251352](https://github.com/elastic/kibana/pull/251352) - Adds an option to update mappings with index patterns instead of individual indices [#252431](https://github.com/elastic/kibana/pull/252431) - Adds `region` to the Amazon Bedrock connector schema [#252956](https://github.com/elastic/kibana/pull/252956) - Fixes file size limit checks in file uploads [#251515](https://github.com/elastic/kibana/pull/251515) - Fixes document count loading in the Index Management UI when using larger page sizes with long index names [#252422](https://github.com/elastic/kibana/pull/252422) - Improves the tooltip for missing trace/span relationships in APM [#251850](https://github.com/elastic/kibana/pull/251850) - Propagates connector API errors [#252372](https://github.com/elastic/kibana/pull/252372) - Fixes a UI issue with the workflow tool type [#252563](https://github.com/elastic/kibana/pull/252563) - Fixes an issue with the Create new tool page when switching tool types [#252811](https://github.com/elastic/kibana/pull/252811) - Adds datemath support to the KQL evaluator [#252840](https://github.com/elastic/kibana/pull/252840) ## February 9, 2026 ### Features and enhancements - Allows you to search IP fields in controls using CIDR (Classless Inter-Domain Routing) notation [#250875](https://github.com/elastic/kibana/pull/250875) - Makes `contains` the default search technique for the options list [#250992](https://github.com/elastic/kibana/pull/250992) - Allows you to drag panels while they're in focus for editing [#251327](https://github.com/elastic/kibana/pull/251327) - Allows Fleet to install integration-managed SLO templates [#250369](https://github.com/elastic/kibana/pull/250369) - Adds the By Value editing flow for Discover embeddable widgets [#250438](https://github.com/elastic/kibana/pull/250438) - Adds timezone support in ES|QL [#247917](https://github.com/elastic/kibana/pull/247917) - Adds query stats in Lens [#251029](https://github.com/elastic/kibana/pull/251029) - Uses restorable state in doc viewer's **Table** tab [#249682](https://github.com/elastic/kibana/pull/249682) - Adds health scans for SLOs to allow cluster-wide analysis of SLO operational health [#248004](https://github.com/elastic/kibana/pull/248004) - Adds support for KQL filtering in all types of aggregations in custom threshold rules [#248845](https://github.com/elastic/kibana/pull/248845) - Introduces AI-assisted detection rule creation [#247674](https://github.com/elastic/kibana/pull/247674) - Adds support for v2 Splunk dashboards to Automatic Migration [#251199](https://github.com/elastic/kibana/pull/251199) - Updates the `fast-xml-parser` package dependencies [#251644](https://github.com/elastic/kibana/pull/251644) - Adds a user feedback plugin [#225074](https://github.com/elastic/kibana/pull/225074) - Adds `maxSize` for entries in security endpoints related API schemas [#246359](https://github.com/elastic/kibana/pull/246359) - Opens matching pattern docs in a new Discover tab [#245695](https://github.com/elastic/kibana/pull/245695) - Adds missing ES|QL commands and functions documentation for inference tasks [#249089](https://github.com/elastic/kibana/pull/249089) - Refreshes the machine learning Overview page [#247573](https://github.com/elastic/kibana/pull/247573) - Adds the `xpack.productDocBase.artifactRepositoryProxyUrl` setting to `kibana.yml` [#250771](https://github.com/elastic/kibana/pull/250771) - Adds a copy-to-clipboard button next to inference endpoint names in the Inference endpoints page [#251494](https://github.com/elastic/kibana/pull/251494) - Adds a default model suggestion to AI Connector configuration menus [#250506](https://github.com/elastic/kibana/pull/250506) - Adds descriptions to the inference endpoint selection interface for the `semantic_text` field [#249265](https://github.com/elastic/kibana/pull/249265) - Introduces the SharePoint Online Data Source definition and related built-in workflow YAML files [#251544](https://github.com/elastic/kibana/pull/251544) - Adds support for array parameter types in ES|QL tools [#250386](https://github.com/elastic/kibana/pull/250386) - Enhances `get_log_groups` (formerly `get_log_categories`) with exceptions [#250331](https://github.com/elastic/kibana/pull/250331). - Adds asymmetric quantization of DiskBBQ centroids to improve query latency [#141137](https://github.com/elastic/elasticsearch/pull/141137) - Improves handling of preconfigured Inference API endpoints with embedding task type [#141788](https://github.com/elastic/elasticsearch/pull/141788) - Adds multimodal embedding task support to Elastic Inference Service (EIS) [#141547](https://github.com/elastic/elasticsearch/pull/141547) - Adds `SlowCustomBinaryDocValuesTermInSetQuery` to replace separate term queries in `TextFieldMapper` [#141891](https://github.com/elastic/elasticsearch/pull/141891) - Adds support for `doc_values` to text fields [#141225](https://github.com/elastic/elasticsearch/pull/141225) - Adds `task_settings` to the ES|QL `COMPLETION` command [#140613](https://github.com/elastic/elasticsearch/pull/140613) - Adds count aggregation for histograms [#141138](https://github.com/elastic/elasticsearch/pull/141138) - Blocks DiskBBQ encode doc vectors [#141598](https://github.com/elastic/elasticsearch/pull/141598) - Adds multi-value field support to the ES|QL `CHUNK` function [#141240](https://github.com/elastic/elasticsearch/pull/141240) - Adds APM telemetry for the ES|QL `SET` command [#141719](https://github.com/elastic/elasticsearch/pull/141719) - Adds logic to fold project tags metadata on data nodes [#141935](https://github.com/elastic/elasticsearch/pull/141935) - Adds a warning for `SORT` under `LOOKUP JOIN` [#141482](https://github.com/elastic/elasticsearch/pull/141482) - Adds failure store support for cross-cluster search (CCS) [#139760](https://github.com/elastic/elasticsearch/pull/139760) - Makes the `TDigest` field a time series metric [#141386](https://github.com/elastic/elasticsearch/pull/141386) - Optimizes search shard iterator sorting [#140747](https://github.com/elastic/elasticsearch/pull/140747) - Optimizes `TopNOperator` when the input is already sorted [#141094](https://github.com/elastic/elasticsearch/pull/141094) ### Fixes - Excludes QRadar building-block rules from migration eligibility [#250558](https://github.com/elastic/kibana/pull/250558) - Fixes KQL character escaping for queries generated from the Top values column in Lens [#250925](https://github.com/elastic/kibana/pull/250925) - Fixes `COMPLETION` quick help syntax [#251939](https://github.com/elastic/kibana/pull/251939) - Fixes SLO filter containing spaces and wildcards [#251033](https://github.com/elastic/kibana/pull/251033) - Fixes shared exception list showing ID instead of name [#249778](https://github.com/elastic/kibana/pull/249778) - Fixes backslash being removed when typed into the exception field [#250117](https://github.com/elastic/kibana/pull/250117) - Fixes `spaceId` in Agent Builder security tools [#251513](https://github.com/elastic/kibana/pull/251513) - Fixes exception list `os_types` field returning empty array [#250279](https://github.com/elastic/kibana/pull/250279) - Fixes an accessibility issue caused by a missing label in a flyout component [#251656](https://github.com/elastic/kibana/pull/251656) - Fixes ARIA announcement issue in the **Add exception list** dialog [#250624](https://github.com/elastic/kibana/pull/250624) - Fixes an issue where a timeline automatically opened when navigating to the Network page [#250469](https://github.com/elastic/kibana/pull/250469) - Fixes flyout section local storage not honoring all values [#251999](https://github.com/elastic/kibana/pull/251999) - Fixes a rounding issue in the share feature [#251073](https://github.com/elastic/kibana/pull/251073) - Hides links on the Search homepage for users without access [#251437](https://github.com/elastic/kibana/pull/251437) - Adds a badge to the Agent Builder UI when your license doesn't support it [#251484](https://github.com/elastic/kibana/pull/251484) - Reduces background polling on the index details page to avoid unnecessary API requests [#251446](https://github.com/elastic/kibana/pull/251446) - Fixes pagination dimensions list in Discover flyouts [#251250](https://github.com/elastic/kibana/pull/251250) - Improves handling of 204 responses to Cases webhooks [#251090](https://github.com/elastic/kibana/pull/251090) - Fixes ES|QL test tool failing when the numerical value is zero [#251901](https://github.com/elastic/kibana/pull/251901) - Fixes document flyout loading loop with relative time ranges [#251647](https://github.com/elastic/kibana/pull/251647) - Fixes Agent Builder index search support for special text fields `match_only_text` and `pattern_text` [#252082](https://github.com/elastic/kibana/pull/252082) - Improves errors on some ES|QL queries missing timestamps [#141503](https://github.com/elastic/elasticsearch/pull/141503) - Fixes ES|QL bug when grouping on aliases [#141568](https://github.com/elastic/elasticsearch/pull/141568) - Extends the `read` index privilege to consistently cover all actions required to run cross-cluster search queries [#141376](https://github.com/elastic/elasticsearch/pull/141376) - Adds validation to inference update operation [#140003](https://github.com/elastic/elasticsearch/pull/140003) - Fixes the parsing of `TO_IP(input, {"leading_zeros":"octal"})` in ES|QL [#141776](https://github.com/elastic/elasticsearch/pull/141776) - Prevents a possible null point exception in ES|QL [#141711](https://github.com/elastic/elasticsearch/pull/141711) - Improves handling of duplicate ES|QL doc IDs [#142055](https://github.com/elastic/elasticsearch/pull/142055) - Fixes the ES|QL `IP_PREFIX` function leaking data in scratch [#141940](https://github.com/elastic/elasticsearch/pull/141940) - Prevents ES|QL from reusing `BlockLoad.ColumnAtATimeReader` when loading many fields at once [#141672](https://github.com/elastic/elasticsearch/pull/141672)Stops - Fixes build failure due to merge collision [#141722](https://github.com/elastic/elasticsearch/pull/141722) - Fixes downsampling configuration validation [#141873](https://github.com/elastic/elasticsearch/pull/141873) - Fixes handling of empty collapse construct [#141973](https://github.com/elastic/elasticsearch/pull/141973) - Allows shadowing of time-series parameters in non-time-series mappings [#141549](https://github.com/elastic/elasticsearch/pull/141549) - Fixes top hits counts when sorting across indices [#142046](https://github.com/elastic/elasticsearch/pull/142046) - Fixes typo in ARM `int2int4` bulk implementation [#141813](https://github.com/elastic/elasticsearch/pull/141813) - Improves mutability handling of `Source#source()`'s map [#141534](https://github.com/elastic/elasticsearch/pull/141534) - Prevents large `CancelTasksRequest` descriptions by truncating nodes and actions [#141815](https://github.com/elastic/elasticsearch/pull/141815) - Reduces cancellation check interval in `CancellableBulkScorer` for better responsiveness [#141747](https://github.com/elastic/elasticsearch/pull/141747) - Refreshes SQL PIT ID after each response [#141736](https://github.com/elastic/elasticsearch/pull/141736) - Updates constant-value fields to support normalized wildcard queries [#141784](https://github.com/elastic/elasticsearch/pull/141784) ## February 2, 2026 ### Features and enhancements - Adds PromQL validation parameters to alert rules for improved query validation [#249708](https://github.com/elastic/kibana/pull/249708) - Updates the footer layout in the ES|QL editor for improved navigation [#244284](https://github.com/elastic/kibana/pull/244284) - Migrates traces in Discover to the new flyout system for a more consistent experience [#247451](https://github.com/elastic/kibana/pull/247451) - Adds a troubleshooting view for requests between nodes in the Service Map [#248646](https://github.com/elastic/kibana/pull/248646) - Makes APM SLOs available directly from the Service Inventory page [#249374](https://github.com/elastic/kibana/pull/249374) - Adds Cloud Forwarder onboarding tile to the Observability onboarding page [#250325](https://github.com/elastic/kibana/pull/250325) - Adds filtering for cloud connectors by account type and provider [#250107](https://github.com/elastic/kibana/pull/250107) - Adds granular subfeature privileges for rule exceptions [#245722](https://github.com/elastic/kibana/pull/245722) - Adds the `includes` operator to KQL queries [#248985](https://github.com/elastic/kibana/pull/248985) - Improves Index Management index list performance on large clusters with many indices [#246276](https://github.com/elastic/kibana/pull/246276) - Adds a new documentation validation CLI to streamline the development workflow [#249305](https://github.com/elastic/kibana/pull/249305) - Improves the Inference Endpoints page by adding a **Model** column and enabling search by model name [#249779](https://github.com/elastic/kibana/pull/249779) - Shows RED (Rate, Errors, Duration) metric charts for trace queries in APM [#249909](https://github.com/elastic/kibana/pull/249909) - Introduces a severity color palette for color mapping in visualizations [#250198](https://github.com/elastic/kibana/pull/250198) - Adds an auto-push option to case connectors, enabling automatic case synchronization [#249251](https://github.com/elastic/kibana/pull/249251) - Adds a stream features table with detail flyout and bulk delete functionality [#250379](https://github.com/elastic/kibana/pull/250379) - Adds a new SharePoint Online connector to the available connector list [#248737](https://github.com/elastic/kibana/pull/248737) - Renders `tdigest` and `exponential_histogram` metric types in the metrics grid [#249269](https://github.com/elastic/kibana/pull/249269) - Simplifies parameter types in the ES|QL test tool [#249855](https://github.com/elastic/kibana/pull/249855) - Exposes `configuration_overrides` in the Agent Builder converse API [#249256](https://github.com/elastic/kibana/pull/249256) - Reorganizes the unified metrics grid package for improved maintainability [#248992](https://github.com/elastic/kibana/pull/248992) - Prevents flyout remount when switching document types in the trace waterfall view [#250406](https://github.com/elastic/kibana/pull/250406) - Adds support for IP and boolean types in the ES|QL `FIRST` and `LAST` functions [#140097](https://github.com/elastic/elasticsearch/pull/140097) - Adds support for reranking multi-valued fields in ES|QL [#140672](https://github.com/elastic/elasticsearch/pull/140672) - Optimizes ARM SVE functions for BBQ (Better Binary Quantization) Int4 to 1-bit dot product calculations [#141047](https://github.com/elastic/elasticsearch/pull/141047) - Adds `max_batch_size` setting to Elastic Inference Service (EIS) sparse embedding settings [#141185](https://github.com/elastic/elasticsearch/pull/141185) - Adds an optimized hash table for grouping by two long fields in ES|QL aggregations [#140838](https://github.com/elastic/elasticsearch/pull/140838) - Adds `_size` metadata attribute support from the mapper-size plugin [#141427](https://github.com/elastic/elasticsearch/pull/141427) - Adds native operations for float-based scoring, improving search performance [#140169](https://github.com/elastic/elasticsearch/pull/140169) - Adds the `MV_INTERSECTS` function to ES|QL for testing if two multi-value fields share common values [#140662](https://github.com/elastic/elasticsearch/pull/140662) - Adds approximate query execution mode to ES|QL, enabling faster results for exploratory queries [#131828](https://github.com/elastic/elasticsearch/pull/131828) - The ES|QL `RERANK` command is now generally available (GA) [#141508](https://github.com/elastic/elasticsearch/pull/141508) - Adds Views support to ES|QL for creating reusable query definitions [#134995](https://github.com/elastic/elasticsearch/pull/134995) - Limits IDs queries to the `max_result_window` setting (default: 10,000) for improved resource protection [#140515](https://github.com/elastic/elasticsearch/pull/140515) - Introduces an adaptive block hash for improved ES|QL aggregation performance with high-cardinality data [#141237](https://github.com/elastic/elasticsearch/pull/141237) - Adds configurable quantization levels (1, 2, or 4 bits) for `bbq_disk` dense vector index type [#139944](https://github.com/elastic/elasticsearch/pull/139944) - Enables cross-project search compatibility for the scroll API [#140977](https://github.com/elastic/elasticsearch/pull/140977) - Optimizes count grouping aggregation in ES|QL for improved performance [#141499](https://github.com/elastic/elasticsearch/pull/141499) - Periodically emits partial aggregation results in ES|QL, reducing memory usage for high-cardinality queries [#141392](https://github.com/elastic/elasticsearch/pull/141392) - Supports point-in-time (PIT) context relocation when nodes shut down and shards relocate [#137675](https://github.com/elastic/elasticsearch/pull/137675) - Enables ES|QL `FIRST` and `LAST` functions for general use (removes snapshot restriction) [#141617](https://github.com/elastic/elasticsearch/pull/141617) - Improves IP field term query performance using doc values for low-cardinality fields [#140735](https://github.com/elastic/elasticsearch/pull/140735) ### Fixes - Fixes the handling of quote character as a dead key in the ES|QL editor [#246773](https://github.com/elastic/kibana/pull/246773) - Adds support for functions and aggregators in PromQL autocomplete [#250078](https://github.com/elastic/kibana/pull/250078) - Reverts a change that removed infrastructure UI custom dashboards [#249973](https://github.com/elastic/kibana/pull/249973) - Fixes index update failures caused by invalid API payload format [#250758](https://github.com/elastic/kibana/pull/250758) - Fixes an issue where the **Add connector** button appeared inactive and could not be clicked [#250921](https://github.com/elastic/kibana/pull/250921) - Fixes an issue where alert info in the privileged user monitoring table did not re-query when the time range changed [#250618](https://github.com/elastic/kibana/pull/250618) - Fixes occasional file preview corruption during file upload [#250532](https://github.com/elastic/kibana/pull/250532) - Fixes persistence issues in Streams [#247544](https://github.com/elastic/kibana/pull/247544) - Updates connector description terminology for consistency [#250649](https://github.com/elastic/kibana/pull/250649) - Fixes an issue where clearing AI Connector form fields with a backspace reset them to default values [#251095](https://github.com/elastic/kibana/pull/251095) - Fixes incorrect dependencies statistics in APM service views [#249434](https://github.com/elastic/kibana/pull/249434) - Fixes the waterfall summary width for traces in Discover [#250556](https://github.com/elastic/kibana/pull/250556) - Propagates ES|QL execution errors correctly to users [#250605](https://github.com/elastic/kibana/pull/250605) - Handles empty results correctly in ES|QL alerting rule execution [#250759](https://github.com/elastic/kibana/pull/250759) - Adjusts panel height in Discover for improved layout [#250778](https://github.com/elastic/kibana/pull/250778) - Fixes an issue where metrics grid titles were not updated when the column order changed [#250963](https://github.com/elastic/kibana/pull/250963) - Fixes server-side search in the user prompts API [#250882](https://github.com/elastic/kibana/pull/250882) - Fixes incorrect handling of action metadata in Workflows `elasticsearch.bulk` steps, ensuring proper support for all bulk operation types [#249771](https://github.com/elastic/kibana/pull/249771) - Fixes an infinite loop in ES|QL Analyzer when subqueries reference indices with empty mappings [#141371](https://github.com/elastic/elasticsearch/pull/141371) - Fixes ES|QL to use standard logic for conflicting metric types in time-series data, preserving the original type information [#141496](https://github.com/elastic/elasticsearch/pull/141496) - Appends an implicit limit to ES|QL subqueries with an unbounded sort for consistent behavior [#141025](https://github.com/elastic/elasticsearch/pull/141025) - Fixes machine learning the model cache to evict old models before loading new ones, preventing circuit breaker exceptions [#140844](https://github.com/elastic/elasticsearch/pull/140844) - Fixes potential data corruption in ES|QL when creating constant vector blocks with BytesRef values [#141242](https://github.com/elastic/elasticsearch/pull/141242) - Fixes folding of the ES|QL `CASE()` function when using date period and time duration values [#141157](https://github.com/elastic/elasticsearch/pull/141157) - Fixes attribute ID generation in ES|QL `UNION ALL` branches for unmapped fields [#141262](https://github.com/elastic/elasticsearch/pull/141262) - Fixes ES|QL `TOP_SNIPPETS` function to accept string-formatted numeric parameters [#141130](https://github.com/elastic/elasticsearch/pull/141130) - Fixes `match_only_text` field incorrectly delegating value loading to a parent keyword field [#141399](https://github.com/elastic/elasticsearch/pull/141399) - Reduces locking contention when persisting machine learning job statistics [#141519](https://github.com/elastic/elasticsearch/pull/141519) - Fixes OpenTelemetry dynamic mappings to resolve `*.geo.location` fields as `geo_point` type [#141397](https://github.com/elastic/elasticsearch/pull/141397) ## January 26, 2026 ### Features and enhancements - Elastic will regularly be adding new ML models which will appear as pre-configured AI connectors in your projects. Refer to [the Elastic Inference Service page](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/explore-analyze/elastic-inference/eis) for more details - Adds support for PromQL queries in the ES|QL editor [#249230](https://github.com/elastic/kibana/pull/249230) - Opts in to the flyout session for the Unified Doc Viewer flyout [#246719](https://github.com/elastic/kibana/pull/246719) - Enables cascading documents for `STATS` queries in ES|QL [#220119](https://github.com/elastic/kibana/pull/220119) - Adds the ability to create and manage SLOs from the Service Inventory page [#249259](https://github.com/elastic/kibana/pull/249259) - Adds a `concat` processor for data management [#247940](https://github.com/elastic/kibana/pull/247940) - Enables ES|QL multi-terms charts in Lens [#244743](https://github.com/elastic/kibana/pull/244743) - Adds support for unmapped fields in Discover [#248606](https://github.com/elastic/kibana/pull/248606) - Supports KQL autocomplete in the search visor in ES|QL [#247224](https://github.com/elastic/kibana/pull/247224) - Adds support for restorable state for **Doc Viewer** flyout tabs [#249030](https://github.com/elastic/kibana/pull/249030) - Adds basic support for PromQL in Kibana [#249854](https://github.com/elastic/kibana/pull/249854) - Allows you to filter ES|QL sessions within a dashboard [#249357](https://github.com/elastic/kibana/pull/249357) - Supports autocomplete functionality inside KQL functions [#249510](https://github.com/elastic/kibana/pull/249510) - Adds a new `approximate` ES|QL setting [#248946](https://github.com/elastic/kibana/pull/248946) - Improves the context for AI Assistant insights in Alerts [#248195](https://github.com/elastic/kibana/pull/248195) - Adds Elastic Inference Service (EIS) pricing communication for Knowledge Base models in Elastic AI Assistant [#249298](https://github.com/elastic/kibana/pull/249298) - Moves the results view buttons closer to the job selection controls in Anomaly Detection [#249261](https://github.com/elastic/kibana/pull/249261) - Adds new preconfigured connectors [#249379](https://github.com/elastic/kibana/pull/249379) - Replaces the AJV library with Zod for improved schema validation across Kibana [#248317](https://github.com/elastic/kibana/pull/248317) - Adds an option to convert an index to a lookup index in the **Manage index** dropdown [#248730](https://github.com/elastic/kibana/pull/248730) - Adds Chat Completion to Amazon Bedrock for the Inference API [#139411](https://github.com/elastic/elasticsearch/pull/139411) - Adds dot product functions for Int4 to 1-bit in BBQ [#140264](https://github.com/elastic/elasticsearch/pull/140264) - Adds IntRangeVector for selected groups in aggregation [#141205](https://github.com/elastic/elasticsearch/pull/141205) - Adds Case and Coalesce Support for Compound Types [#140677](https://github.com/elastic/elasticsearch/pull/140677) - Adds ES|QL support for project METADATA [#140592](https://github.com/elastic/elasticsearch/pull/140592) - Adds partitioning for time-series sources to speed up queries and improve memory management [#140475](https://github.com/elastic/elasticsearch/pull/140475) - Adds preconditioning utilities to help with edge cases where quantization causes vectors to become indistinguishable [#140198](https://github.com/elastic/elasticsearch/pull/140198) - Implements the Observability Agent in AI Assistant insights and flyout configurations [#249776](https://github.com/elastic/kibana/pull/249776) ### Fixes - Fixes an issue with reporting in dashboards and visualizations [#249644](https://github.com/elastic/kibana/pull/249644) - Updates the logs overview component to use Zod v4 [#249583](https://github.com/elastic/kibana/pull/249583) - Fixes KQL autocomplete functionality during custom threshold rule creation [#250044](https://github.com/elastic/kibana/pull/250044) - Fixes a bug that caused an incorrect number of users to be displayed for CSV uploads [#249032](https://github.com/elastic/kibana/pull/249032) - Removes the **Technical preview** badge for the privileged access detection package [#249500](https://github.com/elastic/kibana/pull/249500) - Fixes a bug where tooltip information for status tags was not displayed on the Gap fill scheduler logs flyout [#247695](https://github.com/elastic/kibana/pull/247695) - Fixes pagination issues in the Installation review frontend [#248259](https://github.com/elastic/kibana/pull/248259) - Fixes an issue where schedules and conversations referencing outdated connector IDs using Elastic Managed LLMs failed to execute or display correctly [#249891](https://github.com/elastic/kibana/pull/249891) - Disables the **Rule summary** button when a user lacks the required rule privileges [#248221](https://github.com/elastic/kibana/pull/248221) - Fixes broken breadcrumbs and sidebar navigation for Data Visualizer and AIOps [#248167](https://github.com/elastic/kibana/pull/248167) - Ensures the abort signal is passed to Elasticsearch during file uploads [#249623](https://github.com/elastic/kibana/pull/249623) - Fixes a word-breaking issue in Anomaly Detection page titles [#250058](https://github.com/elastic/kibana/pull/250058) - Ensures child stream names do not contain spaces [#249384](https://github.com/elastic/kibana/pull/249384) - Fixes an error that occurred when adding items to an index template [#249168](https://github.com/elastic/kibana/pull/249168) - Ensures that parsing of `on_disk_rescore` accounts for valid false values [#141158](https://github.com/elastic/elasticsearch/pull/141158) - Fixes incorrect pruning of the `INLINE STATS GROUP BY null` ES|QL expression [#140027](https://github.com/elastic/elasticsearch/pull/140027) - Fixes date fields sort formatting with missing values [#135899](https://github.com/elastic/elasticsearch/pull/135899) - Quantizes ST_X, ST_Y and related functions [#140963](https://github.com/elastic/elasticsearch/pull/140963) - Uses Double.compare to compare doubles in `tdigest.Sort` [#141049](https://github.com/elastic/elasticsearch/pull/141049) - Refactors ES|QL lookup join to allow for streaming [#139406](https://github.com/elastic/elasticsearch/pull/139406) ## January 19, 2026 ### Features and enhancements - [Elastic Agent Builder](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/explore-analyze/ai-features/elastic-agent-builder) is now generally available in Elastic Cloud Serverless. Enabled by default in Elasticsearch projects, you can now [opt in](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/explore-analyze/ai-features/ai-chat-experiences/ai-agent-or-ai-assistant) in Observability and Security projects. Learn how to [get started](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/explore-analyze/ai-features/agent-builder/get-started). - [Elastic Workflows](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/workflows) is now available in technical preview. Build YAML-based workflows to automate actions across Elasticsearch,Kibana, external systems, and AI. Workflows support manual, scheduled, and alert-based triggers, conditional logic, and integrations with existing connectors and Agent Builder. You must turn on the feature to get started. - Adds support for ES|QL in Vega [#247186](https://github.com/elastic/kibana/pull/247186) - Improves Fleet setup memory usage by deferring package reinstalls to async tasks [#248235](https://github.com/elastic/kibana/pull/248235) - Adds tab-scoped, retainable flyout behavior in Discover [#246612](https://github.com/elastic/kibana/pull/246612) - Adds hover previews to the recently closed tabs menu in Discover [#246973](https://github.com/elastic/kibana/pull/246973) - Adds unified rules list [#242208](https://github.com/elastic/kibana/pull/242208) - Adds Windows support to the OTel host onboarding flow [#248478](https://github.com/elastic/kibana/pull/248478) - Integrates the new app menu with dashboards [#246153](https://github.com/elastic/kibana/pull/246153) - Enhances anomaly detection model memory estimation for user-supplied configurations [#248479](https://github.com/elastic/kibana/pull/248479) - Adds time window buttons to the date picker in Machine Learning views [#248142](https://github.com/elastic/kibana/pull/248142) - Adds a `timeout` parameter to `InferenceChatModel` [#248326](https://github.com/elastic/kibana/pull/248326) - Redesigns the empty state for the Streams listing [#248636](https://github.com/elastic/kibana/pull/248636) - Redesigns the empty states for the **Partitioning** and **Processing** tabs [#248463](https://github.com/elastic/kibana/pull/248463) - Allows filtering from legend actions in ES|QL when supported [#248789](https://github.com/elastic/kibana/pull/248789) - Adds a **Queries** tab to the Significant Events Discovery page [#248243](https://github.com/elastic/kibana/pull/248243) - Adds a `get_trace_change_points` tool for trace change point analysis [#247810](https://github.com/elastic/kibana/pull/247810) - Adds a background task for significant events query generation [#248608](https://github.com/elastic/kibana/pull/248608) - Refactors the ES|QL inference operator architecture to support multi-value fields [#139694](https://github.com/elastic/elasticsearch/pull/139694) - Removes the implicit `limit` appended to each subquery branch in ES|QL [#139058](https://github.com/elastic/elasticsearch/pull/139058) - Makes the ES|QL `TEXT_EMBEDDING` function generally available (GA) [#140555](https://github.com/elastic/elasticsearch/pull/140555) - Adds support for the multimodal embedding task type to the JinaAI service [#140323](https://github.com/elastic/elasticsearch/pull/140323) - Adds `CHICKEN` function to ES|QL [#140645](https://github.com/elastic/elasticsearch/pull/140645) - Adds a suggestion for resolving the Machine learning node allocation error [#139520](https://github.com/elastic/elasticsearch/pull/139520) - Adds top-level arithmetic operations support to `TS | STATS` [#140135](https://github.com/elastic/elasticsearch/pull/140135) - Adds `dense_vector` support for `COUNT`, `PRESENT`, and `ABSENT` aggregations in ES|QL [#139914](https://github.com/elastic/elasticsearch/pull/139914) - Enables `NULLIFY` and `FAIL` unmapped field resolution in technical preview [#140528](https://github.com/elastic/elasticsearch/pull/140528) - Adds support for mapping unavailable fields [#140463](https://github.com/elastic/elasticsearch/pull/140463) - Moves union types out of `BlockLoader` in ES|QL [#140384](https://github.com/elastic/elasticsearch/pull/140384) - Adds timezone support to `TO_STRING`, `TO_DATETIME`, and `TO_DATENANOS` converters in ES|QL [#138985](https://github.com/elastic/elasticsearch/pull/138985) - Adds timezone support to `TRange` in ES|QL [#139911](https://github.com/elastic/elasticsearch/pull/139911) - Increases DiskBBQ vector block bulk size to 32 [#138217](https://github.com/elastic/elasticsearch/pull/138217) - Prefetches vectors during rescoring [#139955](https://github.com/elastic/elasticsearch/pull/139955) - Stores fallback match-only text fields in binary doc values [#140189](https://github.com/elastic/elasticsearch/pull/140189) - Stores flattened field data in binary doc values [#140246](https://github.com/elastic/elasticsearch/pull/140246) - Stores raw pattern text fields in binary doc values [#140191](https://github.com/elastic/elasticsearch/pull/140191) - Updates Grok to use `Matcher#setTimeout` [#139405](https://github.com/elastic/elasticsearch/pull/139405) - Makes vector functions generally available (GA) [#140545](https://github.com/elastic/elasticsearch/pull/140545) - Makes the auto-expand indices functionality use the desired cluster topology when one is available - Runs replica topology boundary enforcement when receiving the desired topology - Adds tests for ES|QL index exclusion ### Fixes - Fixes incorrect time zone for CSV reports that use local date comparison [#244405](https://github.com/elastic/kibana/pull/244405) - Fixes timestamp override for ES|QL CSV-formatted scheduled reports with relative time ranges [#248169](https://github.com/elastic/kibana/pull/248169) - Limits variable suggestions to in-scope variables [#248365](https://github.com/elastic/kibana/pull/248365) - Expands the time range of all documents with `date_nanos` time fields [#248495](https://github.com/elastic/kibana/pull/248495) - Fixes query drafts when switching tabs [#247968](https://github.com/elastic/kibana/pull/247968) - Prevents loss of UI state in signal-specific Discover flyout tabs when refreshing a query [#248203](https://github.com/elastic/kibana/pull/248203) - Fixes missing spans when viewing a trace with a large number of spans in Discover [#247689](https://github.com/elastic/kibana/pull/247689) - Uses monitor query ID for project monitor package policies [#248762](https://github.com/elastic/kibana/pull/248762) - Fixes duplicated test results in the monitor status heat map at higher granularity [#248761](https://github.com/elastic/kibana/pull/248761) - Adds no-data behavior options for metric threshold alerts [#247669](https://github.com/elastic/kibana/pull/247669) - Prevents unauthorized delete attempts for Notes and improves the error message [#247617](https://github.com/elastic/kibana/pull/247617) - Fixes an issue where the pagination on the Notes tab was showing `1-0 of 0` when no notes exist [#248481](https://github.com/elastic/kibana/pull/248481) - Fixes an issue with share modal where all time ranges were shared as absolute [#248804](https://github.com/elastic/kibana/pull/248804) - Fixes missing `counter` fields in the anomaly detection dropdown [#248187](https://github.com/elastic/kibana/pull/248187) - Updates Packetbeat DNS tunneling datafeed to include runtime mappings [#249317](https://github.com/elastic/kibana/pull/249317) - Fixes the document rejection when partitioning streams while data is ingested [#247953](https://github.com/elastic/kibana/pull/247953) - Fixes the timestamps in the Recent Log Entries table to respect the time zone setting in Kibana (`dateFormat:tz`) [#249016](https://github.com/elastic/kibana/pull/249016) - Fixes an issue where the agent count was not updating on the homepage [#248657](https://github.com/elastic/kibana/pull/248657) - Fixes missing service environment in custom links [#248631](https://github.com/elastic/kibana/pull/248631) - Fixes an issue where duplicated managed ILM (index lifecycle management) policies were marked as managed [#248586](https://github.com/elastic/kibana/pull/248586) - Adds a `cold start` badge to unified waterfall visualization [#248857](https://github.com/elastic/kibana/pull/248857) - Fixes broken links pointing from the View in context modal to Discover [#248939](https://github.com/elastic/kibana/pull/248939) - Fixes series tooltips not working in full screen [#248148](https://github.com/elastic/kibana/pull/248148) - Changes the Gauge chart default color palette to the status palette [#246734](https://github.com/elastic/kibana/pull/246734) - Fixes EIS OpenAI GPT-OSS 120B reasoning error [#248943](https://github.com/elastic/kibana/pull/248943) - Adds `maxQueue` backpressure to the anonymization regex worker pool [#249108](https://github.com/elastic/kibana/pull/249108) - Adds a check to ensure ES|QL is valid before matching a metrics profile [#248917](https://github.com/elastic/kibana/pull/248917) - Makes the static lookup formatter work with aggregated boolean fields [#249311](https://github.com/elastic/kibana/pull/249311) - Adds datasource name to namespace [#249123](https://github.com/elastic/kibana/pull/249123) - Fixes an issue where the Discover histogram legend in ES|QL mode was not filtering out null values correctly [#249302](https://github.com/elastic/kibana/pull/249302) - Fixes class cast exceptions in pipeline aggregations [#140069](https://github.com/elastic/elasticsearch/pull/140069) - Fixes an issue where `numCands` was passed instead of `k` [#140839](https://github.com/elastic/elasticsearch/pull/140839) - Fixes an issue where `ENRICH` in ES|QL didn't work when using `dense_vector` as a column for adding as part of the `ENRICH` command [#139774](https://github.com/elastic/elasticsearch/pull/139774) - Fixes aggregation on null values in ES|QL [#139797](https://github.com/elastic/elasticsearch/pull/139797) - Fixes nested aggregation `top_hits` with query `inner_hits` [#137351](https://github.com/elastic/elasticsearch/pull/137351) - Fixes converted fields not propagating through projections [#137923](https://github.com/elastic/elasticsearch/pull/137923) - Reduces priority of clear-cache tasks [#139685](https://github.com/elastic/elasticsearch/pull/139685) - Rejects `max_number_of_allocations` > 1 for low-priority model deployments [#140163](https://github.com/elastic/elasticsearch/pull/140163) - Sorts legacy histogram values during downsampling [#140771](https://github.com/elastic/elasticsearch/pull/140771) - Uses a sub keyword block loader with `ignore_above` for text fields [#140622](https://github.com/elastic/elasticsearch/pull/140622) - Fixes auto-expand code for replicas ## January 13, 2026 ### Features and enhancements - Adds controls as a panel type, allowing you to place them anywhere in dashboards with section-scoped output filters or pin them globally [#245588](https://github.com/elastic/kibana/pull/245588) - Adds the ability to roll back a recent upgrade of a Fleet-managed Elastic Agent using the Fleet UI or API [#247398](https://github.com/elastic/kibana/pull/247398) - Marks the `MATCH_PHRASE` second argument as constant-only [#247003](https://github.com/elastic/kibana/pull/247003) - Enhances the SLO details page to properly handle grouped SLOs when no specific instance is selected, allowing you to search SLO instances [#247638](https://github.com/elastic/kibana/pull/247638) - Enhances the Monitoring Entity Source CRUD APIs [#246978](https://github.com/elastic/kibana/pull/246978) - Improves Attack Discovery hallucination detection [#247965](https://github.com/elastic/kibana/pull/247965) - Improves error handling for 429 errors related to the Inference and AI connectors [#246640](https://github.com/elastic/kibana/pull/246640) - Adds a **Synchronize saved objects** button to the Trained models page [#247691](https://github.com/elastic/kibana/pull/247691) - Adds full end-to-end support for the range operator in the condition editor for Streams [#243011](https://github.com/elastic/kibana/pull/243011) - Adds `uppercase`, `lowercase`, and `trim` processors to Streamlang [#246540](https://github.com/elastic/kibana/pull/246540) - Sets the default Node.js heap limit for containers to 75% of available memory, up to a maximum of 4096 MB [#246073](https://github.com/elastic/kibana/pull/246073) - Improves the inference endpoint selector layout to keep long endpoint names readable and stable while clarifying ML-node startup behavior [#247417](https://github.com/elastic/kibana/pull/247417) - Improves the Connection Details flyout by hiding the **API Keys** tab for users without API key management permissions [#246979](https://github.com/elastic/kibana/pull/246979) - Improves default Synthetics rule creation [#245441](https://github.com/elastic/kibana/pull/245441) - Changes the placement of **Migrations** and **Inventory** in the Security solution's navigation menu [#247002](https://github.com/elastic/kibana/pull/247002) - Changes the alert suppression icon [#247964](https://github.com/elastic/kibana/pull/247964) - Hides tabs for generic attack groups [#248444](https://github.com/elastic/kibana/pull/248444) - Updates the total event count in Elasticsearch documents when you attach an event to a case [#247996](https://github.com/elastic/kibana/pull/247996) - Converts `PackedValuesBlockHash.bytes` to `BreakingBytesRefBuilder` for better memory tracking in ES|QL [#140171](https://github.com/elastic/elasticsearch/pull/140171) - Logs connection failures at `WARN` level for sniffed nodes [#140149](https://github.com/elastic/elasticsearch/pull/140149) - Adds base64 format for dense vector doc values [#140094](https://github.com/elastic/elasticsearch/pull/140094) - Ensures DiskBBQ tail centroids are always block-encoded [#139835](https://github.com/elastic/elasticsearch/pull/139835) - Adds syntax support and parsing for `SET approximate` in ES|QL [#139908](https://github.com/elastic/elasticsearch/pull/139908) - Adds timezone support to `add` and `sub` operators and planning support for `ConfigurationAware` in ES|QL [#140101](https://github.com/elastic/elasticsearch/pull/140101) - Improves Lookup Join performance with `CachedDirectoryReader` in ES|QL [#139314](https://github.com/elastic/elasticsearch/pull/139314) - Improves locality by placing parent-child centroids next to each other [#140293](https://github.com/elastic/elasticsearch/pull/140293) - Retrieves routing hash from synthetic ID for translog operations [#140221](https://github.com/elastic/elasticsearch/pull/140221) - Includes rerank in supported tasks for the IBM Watsonx integration in the Inference API [#140331](https://github.com/elastic/elasticsearch/pull/140331) ### Fixes - Ensures ES|QL control options get updated when the time range changes [#248068](https://github.com/elastic/kibana/pull/248068) - Increases the default top values for new Lens visualizations to nine categories [#247015](https://github.com/elastic/kibana/pull/247015) - Fixes the icon in the **Elastic documentation not available** callout in AI Assistant settings [#247885](https://github.com/elastic/kibana/pull/247885) - Prevents extra Synthetics package policies from being updated when maintenance windows are updated or deleted, even if the monitor itself does not use maintenance windows [#246088](https://github.com/elastic/kibana/pull/246088) - Fixes a validation error with maintenance windows on lightweight Synthetics monitors [#247880](https://github.com/elastic/kibana/pull/247880) - Fixes a bug that prevented user and host names from being escaped when they appeared in URLs [#247707](https://github.com/elastic/kibana/pull/247707) - Fixes an issue where the rule settings pop-up remained open after clicking **Save** when enabling or disabling auto gap fill [#247678](https://github.com/elastic/kibana/pull/247678) - Fixes an issue where the Security AI Assistant API did not apply the system prompt associated with a conversation [#248020](https://github.com/elastic/kibana/pull/248020) - Fixes Attack Discovery misclassifying the system error "Security AI Anonymization settings configured to not allow any fields" [#248439](https://github.com/elastic/kibana/pull/248439) - Fixes the display of map view for small screen sizes in Data Visualizer [#247615](https://github.com/elastic/kibana/pull/247615) - Removes ES|QL field stats for the `TS` command [#247641](https://github.com/elastic/kibana/pull/247641) - Fixes an accessibility issue where the **Show API key** button did not update to **Hide API key** when toggled [#247982](https://github.com/elastic/kibana/pull/247982) - Deactivates the **API keys** button on the Elasticsearch homepage when you have insufficient permissions [#248072](https://github.com/elastic/kibana/pull/248072) - Fixes the OpenAI connector's add header flow so the newly added header key input receives focus instead of leaving focus on the **Add header** button [#248204](https://github.com/elastic/kibana/pull/248204) - Fixes an issue that could cause errors when updating index mappings [#248462](https://github.com/elastic/kibana/pull/248462) - Fixes a bug where Agent Builder Index Search tools would fail on aliases that contained `semantic_text` fields [#247877](https://github.com/elastic/kibana/pull/247877) - Fixes link color contrast [#247721](https://github.com/elastic/kibana/pull/247721) - Fixes `ToolbarSelector` when clicking on tabs in Discover [#247836](https://github.com/elastic/kibana/pull/247836) - Fixes trace links calculating date ranges incorrectly in Discover [#247531](https://github.com/elastic/kibana/pull/247531) - Fixes decoding errors for terms with symbols in Cases [#247992](https://github.com/elastic/kibana/pull/247992) - Fixes an issue where API requests returned deleted async searches [#140385](https://github.com/elastic/elasticsearch/pull/140385) - Fixes double scroll in fullscreen flyouts [#247744](https://github.com/elastic/kibana/pull/247744) - Fixes the React DOM nesting warning `validateDOMNesting(...):