From 039e16ff4057c5e450772fc8e7b7d5b2c5907b0c Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Tue, 3 Dec 2024 17:08:26 +0000 Subject: [PATCH 01/12] [Entity Analytics] Add deprecation warning for the legacy risk score modules --- ...register_risk_score_modules_deprecation.ts | 76 +++++++++++++++++++ .../security_solution/server/plugin.ts | 5 ++ 2 files changed, 81 insertions(+) create mode 100644 x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts diff --git a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts new file mode 100644 index 0000000000000..74d176ecf34dc --- /dev/null +++ b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts @@ -0,0 +1,76 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ + +import { i18n } from '@kbn/i18n'; +import type { DeprecationsServiceSetup, IScopedClusterClient } from '@kbn/core/server'; + +interface Dependencies { + deprecationsService: DeprecationsServiceSetup; +} + +/* + * Deprecations are not space aware, so we look for the presence of the legacy risk engine in at least one space. + * This is done by checking if at least one legacy transform is present. + * Legacy transforms are deleted as part of the upgrade process, so if they are present, the user has not yet upgraded. + */ +const isModuleInAtLeastOneSpace = async ({ + esClient, +}: { + esClient: IScopedClusterClient; +}): Promise => { + // space is the last part of the transform id + const transformPrefixes = [ + 'ml_hostriskscore_pivot_transform_*', + 'ml_hostriskscore_latest_transform_*', + 'ml_userriskscore_pivot_transform_*', + 'ml_userriskscore_latest_transform_*', + ]; + + const { transforms } = await esClient.asInternalUser.transform.getTransform({ + transform_id: transformPrefixes, + size: 1, + }); + + return transforms.length > 0; +}; + +export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dependencies) => { + deprecationsService.registerDeprecations({ + getDeprecations: async ({ esClient }) => { + if (!(await isModuleInAtLeastOneSpace({ esClient }))) { + return []; + } + + return [ + { + title: i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.title', { + defaultMessage: 'The original user and host risk score modules are deprecated.', + }), + message: i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.message', { + defaultMessage: `We have detected that you have the original user and host risk score modules installed in at least one space. These modules are deprecated and your data will not be displayed in the next release (data will not be deleted). Please migrate to the new risk engine in each space before upgrading.`, + }), + level: 'warning', + deprecationType: 'feature', + correctiveActions: { + manualSteps: [ + i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep1', { + defaultMessage: 'In the left bar, under "Security", click on "Manage".', + }), + i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep2', { + defaultMessage: 'Select "Entity Risk Score"', + }), + i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep3', { + defaultMessage: + 'If the original user and host risk score modules are enabled, you will see a button to "Start update". Click on it and follow the instructions.', + }), + ], + }, + }, + ]; + }, + }); +}; diff --git a/x-pack/plugins/security_solution/server/plugin.ts b/x-pack/plugins/security_solution/server/plugin.ts index b4849907a9ef3..60ac08e5ab8cd 100644 --- a/x-pack/plugins/security_solution/server/plugin.ts +++ b/x-pack/plugins/security_solution/server/plugin.ts @@ -128,6 +128,7 @@ import { turnOffAgentPolicyFeatures } from './endpoint/migrations/turn_off_agent import { getCriblPackagePolicyPostCreateOrUpdateCallback } from './security_integrations'; import { scheduleEntityAnalyticsMigration } from './lib/entity_analytics/migrations'; import { SiemMigrationsService } from './lib/siem_migrations/siem_migrations_service'; +import { registerRiskScoreModulesDeprecation } from './deprecations/register_risk_score_modules_deprecation'; export type { SetupPlugins, StartPlugins, PluginSetup, PluginStart } from './plugin_contract'; @@ -439,6 +440,10 @@ export class Plugin implements ISecuritySolutionPlugin { this.completeExternalResponseActionsTask.setup({ taskManager: plugins.taskManager }); } + registerRiskScoreModulesDeprecation({ + deprecationsService: core.deprecations, + }); + core .getStartServices() .then(async ([coreStart, depsStart]) => { From 0d692ec056952a548bb579d3e6b3532f09d70e10 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Wed, 11 Dec 2024 12:13:08 +0000 Subject: [PATCH 02/12] Update x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts Co-authored-by: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com> --- .../deprecations/register_risk_score_modules_deprecation.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts index 74d176ecf34dc..ecd37c76cabaf 100644 --- a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts +++ b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts @@ -51,7 +51,7 @@ export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dep defaultMessage: 'The original user and host risk score modules are deprecated.', }), message: i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.message', { - defaultMessage: `We have detected that you have the original user and host risk score modules installed in at least one space. These modules are deprecated and your data will not be displayed in the next release (data will not be deleted). Please migrate to the new risk engine in each space before upgrading.`, + defaultMessage: `We have detected that you have the original user and host risk score modules installed in at least one space. These modules are deprecated, and your risk score data will not be displayed after you upgrade (your data will not be deleted). Please migrate to the latest risk engine in each space before upgrading.`, }), level: 'warning', deprecationType: 'feature', From 547d45326d182ac5cc82cba7ae4fc0137e609a85 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Wed, 11 Dec 2024 12:13:29 +0000 Subject: [PATCH 03/12] Update x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts Co-authored-by: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com> --- .../deprecations/register_risk_score_modules_deprecation.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts index ecd37c76cabaf..1c7026f2ecd54 100644 --- a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts +++ b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts @@ -65,7 +65,7 @@ export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dep }), i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep3', { defaultMessage: - 'If the original user and host risk score modules are enabled, you will see a button to "Start update". Click on it and follow the instructions.', + 'If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions.', }), ], }, From 94c124fa98dce34be59b4d357ec7ebd3c82cd6cf Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Wed, 11 Dec 2024 12:13:39 +0000 Subject: [PATCH 04/12] Update x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts Co-authored-by: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com> --- .../deprecations/register_risk_score_modules_deprecation.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts index 1c7026f2ecd54..c79923d106b49 100644 --- a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts +++ b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts @@ -61,7 +61,7 @@ export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dep defaultMessage: 'In the left bar, under "Security", click on "Manage".', }), i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep2', { - defaultMessage: 'Select "Entity Risk Score"', + defaultMessage: 'Select Entity Risk Score.', }), i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep3', { defaultMessage: From 9546bf693b20c7b35536267b585ba2f494f6d9e6 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Wed, 11 Dec 2024 14:06:10 +0000 Subject: [PATCH 05/12] merge step 1 and 2 --- .../register_risk_score_modules_deprecation.ts | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts index c79923d106b49..513b187c15f64 100644 --- a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts +++ b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts @@ -58,14 +58,11 @@ export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dep correctiveActions: { manualSteps: [ i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep1', { - defaultMessage: 'In the left bar, under "Security", click on "Manage".', - }), - i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep2', { - defaultMessage: 'Select Entity Risk Score.', + defaultMessage: 'In the main menu, go to Security > Manage > Entity Risk Score.', }), i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.manualStep3', { defaultMessage: - 'If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions.', + 'If the original user and host risk score modules are enabled, you\'ll see a button to "Start update". Click the button, and follow the instructions.', }), ], }, From 320bd5d10b285d588a410c4da0757e39fefd05a6 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Wed, 11 Dec 2024 17:35:28 +0000 Subject: [PATCH 06/12] Add upgrade notes for removal of legacy user and host risk scoring modules in 9.0.0 --- docs/upgrade-notes.asciidoc | 38 +++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/docs/upgrade-notes.asciidoc b/docs/upgrade-notes.asciidoc index 65d47946df4a3..a5d72b4b37536 100644 --- a/docs/upgrade-notes.asciidoc +++ b/docs/upgrade-notes.asciidoc @@ -84,6 +84,44 @@ Replace references to endpoints listed as deprecated by it's replacement. See `D The updated APIs can be found here https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-alerting ==== +[discrete] +[[breaking-201810]] +.Remove original user and host risk scoring and all associated UIs (9.0.0) +[%collapsible] +==== +*Details* + +-- +The original host and risk score modules have been superseded since v8.10.0 by the Risk Engine. + +In 9.0.0 these modules will no longer be supported, the scores will no longer display in the UI +and all UI controls associated with managing or upgrading the legacy modules will be removed. +Additionally, +-- + +*Impact* + +As well as the legacy risk scores not being shown in the UI, alerts will no longer have the legacy risk score added to them in the `.risk.calculated_level` +and `.risk.calculated_score_norm` fields. + +The legacy risk scores are stored in the `ml_host_risk_score_` and `ml_user_risk_score_` +indices, these indices will not be deleted if the user chooses not to upgrade. + +Legacy risk scores are generated by the following transforms: + +- `ml_hostriskscore_pivot_transform_` +- `ml_hostriskscore_latest_transform_` +- `ml_userriskscore_pivot_transform_` +- `ml_userriskscore_latest_transform_` + +If a user does not upgrade to use the Risk Engine, these transforms will continue to run in 9.0.0, but it will be up to the user to manage them. + +*Action* + + +Upgrade to use the Risk Engine in all spaces which use the legacy risk scoring modules: + +- In the main menu, go to Security > Manage > Entity Risk Score. +- If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions. +==== + [[breaking-201004]] .Removed legacy cases endpoints (9.0.0) [%collapsible] From 0126f5b76b2d0fd927489326b0fc26c53fc661d4 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Thu, 12 Dec 2024 16:51:57 +0000 Subject: [PATCH 07/12] move deprecation into security solution --- docs/upgrade-notes.asciidoc | 76 ++++++++++++++++++------------------- 1 file changed, 38 insertions(+), 38 deletions(-) diff --git a/docs/upgrade-notes.asciidoc b/docs/upgrade-notes.asciidoc index a5d72b4b37536..12ed31ed75f7f 100644 --- a/docs/upgrade-notes.asciidoc +++ b/docs/upgrade-notes.asciidoc @@ -84,44 +84,6 @@ Replace references to endpoints listed as deprecated by it's replacement. See `D The updated APIs can be found here https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-alerting ==== -[discrete] -[[breaking-201810]] -.Remove original user and host risk scoring and all associated UIs (9.0.0) -[%collapsible] -==== -*Details* + --- -The original host and risk score modules have been superseded since v8.10.0 by the Risk Engine. - -In 9.0.0 these modules will no longer be supported, the scores will no longer display in the UI -and all UI controls associated with managing or upgrading the legacy modules will be removed. -Additionally, --- - -*Impact* + -As well as the legacy risk scores not being shown in the UI, alerts will no longer have the legacy risk score added to them in the `.risk.calculated_level` -and `.risk.calculated_score_norm` fields. - -The legacy risk scores are stored in the `ml_host_risk_score_` and `ml_user_risk_score_` -indices, these indices will not be deleted if the user chooses not to upgrade. - -Legacy risk scores are generated by the following transforms: - -- `ml_hostriskscore_pivot_transform_` -- `ml_hostriskscore_latest_transform_` -- `ml_userriskscore_pivot_transform_` -- `ml_userriskscore_latest_transform_` - -If a user does not upgrade to use the Risk Engine, these transforms will continue to run in 9.0.0, but it will be up to the user to manage them. - -*Action* + - -Upgrade to use the Risk Engine in all spaces which use the legacy risk scoring modules: - -- In the main menu, go to Security > Manage > Entity Risk Score. -- If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions. -==== - [[breaking-201004]] .Removed legacy cases endpoints (9.0.0) [%collapsible] @@ -1520,6 +1482,44 @@ To access the assistant, go to **Stack Management** > **Upgrade Assistant**. [float] ==== Kibana APIs +[discrete] +[[breaking-201810]] +.Remove original user and host risk scoring and all associated UIs (9.0.0) +[%collapsible] +==== +*Details* + +-- +The original host and risk score modules have been superseded since v8.10.0 by the Risk Engine. + +In 9.0.0 these modules will no longer be supported, the scores will no longer display in the UI +and all UI controls associated with managing or upgrading the legacy modules will be removed. +Additionally, +-- + +*Impact* + +As well as the legacy risk scores not being shown in the UI, alerts will no longer have the legacy risk score added to them in the `.risk.calculated_level` +and `.risk.calculated_score_norm` fields. + +The legacy risk scores are stored in the `ml_host_risk_score_` and `ml_user_risk_score_` +indices, these indices will not be deleted if the user chooses not to upgrade. + +Legacy risk scores are generated by the following transforms: + +- `ml_hostriskscore_pivot_transform_` +- `ml_hostriskscore_latest_transform_` +- `ml_userriskscore_pivot_transform_` +- `ml_userriskscore_latest_transform_` + +If a user does not upgrade to use the Risk Engine, these transforms will continue to run in 9.0.0, but it will be up to the user to manage them. + +*Action* + + +Upgrade to use the Risk Engine in all spaces which use the legacy risk scoring modules: + +- In the main menu, go to Security > Manage > Entity Risk Score. +- If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions. +==== + [discrete] [[kibana-152236]] .Deprecated Agent reassign API PUT endpoint. (8.8) From e66e3e0e82e475aa2138748305e0a2789224820b Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Fri, 13 Dec 2024 10:59:49 +0000 Subject: [PATCH 08/12] add documentation link --- packages/kbn-doc-links/src/get_doc_links.ts | 1 + packages/kbn-doc-links/src/types.ts | 1 + .../register_risk_score_modules_deprecation.ts | 14 ++++++++++++-- x-pack/plugins/security_solution/server/plugin.ts | 1 + 4 files changed, 15 insertions(+), 2 deletions(-) diff --git a/packages/kbn-doc-links/src/get_doc_links.ts b/packages/kbn-doc-links/src/get_doc_links.ts index 2f71674ac7208..caf804a3ce637 100644 --- a/packages/kbn-doc-links/src/get_doc_links.ts +++ b/packages/kbn-doc-links/src/get_doc_links.ts @@ -504,6 +504,7 @@ export const getDocLinks = ({ kibanaBranch, buildFlavor }: GetDocLinkOptions): D riskScorePrerequisites: `${SECURITY_SOLUTION_DOCS}ers-requirements.html`, entityRiskScoring: `${SECURITY_SOLUTION_DOCS}entity-risk-scoring.html`, assetCriticality: `${SECURITY_SOLUTION_DOCS}asset-criticality.html`, + legacyRiskScoreModuleDeprecation: `${KIBANA_DOCS}breaking-changes-summary.html#breaking-201810`, }, detectionEngineOverview: `${SECURITY_SOLUTION_DOCS}detection-engine-overview.html`, aiAssistant: `${SECURITY_SOLUTION_DOCS}security-assistant.html`, diff --git a/packages/kbn-doc-links/src/types.ts b/packages/kbn-doc-links/src/types.ts index 300aacaaea98f..b74f55153a816 100644 --- a/packages/kbn-doc-links/src/types.ts +++ b/packages/kbn-doc-links/src/types.ts @@ -372,6 +372,7 @@ export interface DocLinks { readonly riskScorePrerequisites: string; readonly entityRiskScoring: string; readonly assetCriticality: string; + readonly legacyRiskScoreModuleDeprecation: string; }; readonly detectionEngineOverview: string; }; diff --git a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts index 513b187c15f64..71b2a2ef5e2c6 100644 --- a/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts +++ b/x-pack/plugins/security_solution/server/deprecations/register_risk_score_modules_deprecation.ts @@ -6,10 +6,15 @@ */ import { i18n } from '@kbn/i18n'; -import type { DeprecationsServiceSetup, IScopedClusterClient } from '@kbn/core/server'; +import type { + DeprecationsServiceSetup, + DocLinksServiceSetup, + IScopedClusterClient, +} from '@kbn/core/server'; interface Dependencies { deprecationsService: DeprecationsServiceSetup; + docLinks: DocLinksServiceSetup; } /* @@ -38,7 +43,10 @@ const isModuleInAtLeastOneSpace = async ({ return transforms.length > 0; }; -export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dependencies) => { +export const registerRiskScoreModulesDeprecation = ({ + deprecationsService, + docLinks, +}: Dependencies) => { deprecationsService.registerDeprecations({ getDeprecations: async ({ esClient }) => { if (!(await isModuleInAtLeastOneSpace({ esClient }))) { @@ -47,6 +55,8 @@ export const registerRiskScoreModulesDeprecation = ({ deprecationsService }: Dep return [ { + documentationUrl: + docLinks.links.securitySolution.entityAnalytics.legacyRiskScoreModuleDeprecation, title: i18n.translate('xpack.securitySolution.deprecations.riskScoreModules.title', { defaultMessage: 'The original user and host risk score modules are deprecated.', }), diff --git a/x-pack/plugins/security_solution/server/plugin.ts b/x-pack/plugins/security_solution/server/plugin.ts index 2db324f14ba36..bada38f70e621 100644 --- a/x-pack/plugins/security_solution/server/plugin.ts +++ b/x-pack/plugins/security_solution/server/plugin.ts @@ -443,6 +443,7 @@ export class Plugin implements ISecuritySolutionPlugin { registerRiskScoreModulesDeprecation({ deprecationsService: core.deprecations, + docLinks: core.docLinks, }); core From e18e87188caf2d7f80b83418b36afdf9bd919963 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Fri, 13 Dec 2024 11:28:59 +0000 Subject: [PATCH 09/12] Move under secutiy solution --- docs/upgrade-notes.asciidoc | 56 +++++++++++++++++++------------------ 1 file changed, 29 insertions(+), 27 deletions(-) diff --git a/docs/upgrade-notes.asciidoc b/docs/upgrade-notes.asciidoc index 12ed31ed75f7f..77e6a6d334483 100644 --- a/docs/upgrade-notes.asciidoc +++ b/docs/upgrade-notes.asciidoc @@ -1455,33 +1455,6 @@ Enable X-Pack Security. NOTE: For the complete Elastic Security solution release information, refer to {security-guide}/release-notes.html[_Elastic Security Solution Release Notes_]. -[discrete] -[[breaking-161806]] -.[Elastic Defend] Converted filterQuery to KQL.(8.11) -[%collapsible] -==== -*Details* + -Converts `filterQuery` to a KQL query string. For more information, refer to ({kibana-pull}161806[#161806]). -==== - - - -[float] -=== Deprecation notices - -The following functionality is deprecated and will be removed at a future date. Deprecated functionality -does not have an immediate impact on your application, but we strongly recommend you make the necessary -updates to avoid use of deprecated features. - -Use the **Kibana Upgrade Assistant** to prepare for your upgrade to the next version of the Elastic Stack. -The assistant identifies deprecated settings in your configuration and guides you through the process of -resolving issues if any deprecated features are enabled. -To access the assistant, go to **Stack Management** > **Upgrade Assistant**. - - -[float] -==== Kibana APIs - [discrete] [[breaking-201810]] .Remove original user and host risk scoring and all associated UIs (9.0.0) @@ -1520,6 +1493,35 @@ Upgrade to use the Risk Engine in all spaces which use the legacy risk scoring m - If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions. ==== +[discrete] +[[breaking-161806]] +.[Elastic Defend] Converted filterQuery to KQL.(8.11) +[%collapsible] +==== +*Details* + +Converts `filterQuery` to a KQL query string. For more information, refer to ({kibana-pull}161806[#161806]). +==== + + + +[float] +=== Deprecation notices + +The following functionality is deprecated and will be removed at a future date. Deprecated functionality +does not have an immediate impact on your application, but we strongly recommend you make the necessary +updates to avoid use of deprecated features. + +Use the **Kibana Upgrade Assistant** to prepare for your upgrade to the next version of the Elastic Stack. +The assistant identifies deprecated settings in your configuration and guides you through the process of +resolving issues if any deprecated features are enabled. +To access the assistant, go to **Stack Management** > **Upgrade Assistant**. + + +[float] +==== Kibana APIs + + + [discrete] [[kibana-152236]] .Deprecated Agent reassign API PUT endpoint. (8.8) From dc57e0f2cf310b5b7127a6ee1aaf00ba92022c99 Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Fri, 13 Dec 2024 11:31:17 +0000 Subject: [PATCH 10/12] remove whistespace --- docs/upgrade-notes.asciidoc | 2 -- 1 file changed, 2 deletions(-) diff --git a/docs/upgrade-notes.asciidoc b/docs/upgrade-notes.asciidoc index d87ebf0767bfb..f0c503c5066a8 100644 --- a/docs/upgrade-notes.asciidoc +++ b/docs/upgrade-notes.asciidoc @@ -1570,8 +1570,6 @@ To access the assistant, go to **Stack Management** > **Upgrade Assistant**. [float] ==== Kibana APIs - - [discrete] [[kibana-152236]] .Deprecated Agent reassign API PUT endpoint. (8.8) From 0b723a472d350142288199c1ce0010536c0a57cf Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Mon, 16 Dec 2024 15:30:50 +0000 Subject: [PATCH 11/12] Update docs/upgrade-notes.asciidoc Co-authored-by: Lisa Cawley --- docs/upgrade-notes.asciidoc | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/upgrade-notes.asciidoc b/docs/upgrade-notes.asciidoc index f0c503c5066a8..e8015e741d0a6 100644 --- a/docs/upgrade-notes.asciidoc +++ b/docs/upgrade-notes.asciidoc @@ -1516,7 +1516,6 @@ The original host and risk score modules have been superseded since v8.10.0 by t In 9.0.0 these modules will no longer be supported, the scores will no longer display in the UI and all UI controls associated with managing or upgrading the legacy modules will be removed. -Additionally, -- *Impact* + From d8dc71d2d08f927736642b4f76e36077e214a35e Mon Sep 17 00:00:00 2001 From: Mark Hopkin Date: Mon, 16 Dec 2024 15:31:02 +0000 Subject: [PATCH 12/12] Update docs/upgrade-notes.asciidoc Co-authored-by: Lisa Cawley --- docs/upgrade-notes.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/upgrade-notes.asciidoc b/docs/upgrade-notes.asciidoc index e8015e741d0a6..ab26d5e71615c 100644 --- a/docs/upgrade-notes.asciidoc +++ b/docs/upgrade-notes.asciidoc @@ -1538,7 +1538,7 @@ If a user does not upgrade to use the Risk Engine, these transforms will continu Upgrade to use the Risk Engine in all spaces which use the legacy risk scoring modules: -- In the main menu, go to Security > Manage > Entity Risk Score. +- In the main menu, go to *Security > Manage > Entity Risk Score*. - If the original user and host risk score modules are enabled, you'll see a button to "Start update". Click the button, and follow the instructions. ====