Merge branch 'master' into incremental-without-tests

elastic · Apr 1, 2021 · f26066a · f26066a
2 parents d9fdd3f + 07a3f9e
commit f26066a
Show file tree

Hide file tree

Showing 154 changed files with 2,102 additions and 479 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -348,6 +348,7 @@
 
 # Security Solution sub teams
 /x-pack/plugins/case @elastic/security-threat-hunting
+/x-pack/plugins/timelines @elastic/security-threat-hunting
 /x-pack/test/case_api_integration @elastic/security-threat-hunting
 /x-pack/plugins/lists @elastic/security-detections-response
 

diff --git a/docs/api/actions-and-connectors/legacy/create.asciidoc b/docs/api/actions-and-connectors/legacy/create.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Create connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<create-connector-api>> instead.
+deprecated::[7.13.0,Use <<create-connector-api>> instead.]
 
 Creates a connector.
 

diff --git a/docs/api/actions-and-connectors/legacy/delete.asciidoc b/docs/api/actions-and-connectors/legacy/delete.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Delete connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<delete-connector-api>> instead.
+deprecated::[7.13.0,Use <<delete-connector-api>> instead.]
 
 Deletes a connector by ID.
 

diff --git a/docs/api/actions-and-connectors/legacy/execute.asciidoc b/docs/api/actions-and-connectors/legacy/execute.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Execute connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<execute-connector-api>> instead.
+deprecated::[7.13.0,Use <<execute-connector-api>> instead.]
 
 Executes a connector by ID.
 

diff --git a/docs/api/actions-and-connectors/legacy/get.asciidoc b/docs/api/actions-and-connectors/legacy/get.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Get connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-connector-api>> instead.
+deprecated::[7.13.0,Use <<get-connector-api>> instead.]
 
 Retrieves a connector by ID.
 

diff --git a/docs/api/actions-and-connectors/legacy/get_all.asciidoc b/docs/api/actions-and-connectors/legacy/get_all.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Get all connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-all-connectors-api>> instead.
+deprecated::[7.13.0,Use <<get-all-connectors-api>> instead.]
 
 Retrieves all connectors.
 

diff --git a/docs/api/actions-and-connectors/legacy/list.asciidoc b/docs/api/actions-and-connectors/legacy/list.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy List all connector types</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<list-connector-types-api>> instead.
+deprecated::[7.13.0,Use <<list-connector-types-api>> instead.]
 
 Retrieves a list of all connector types.
 

diff --git a/docs/api/actions-and-connectors/legacy/update.asciidoc b/docs/api/actions-and-connectors/legacy/update.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Update connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<update-connector-api>> instead.
+deprecated::[7.13.0,Use <<update-connector-api>> instead.]
 
 Updates the attributes for an existing connector.
 

diff --git a/docs/api/alerting/legacy/create.asciidoc b/docs/api/alerting/legacy/create.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy create alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<create-rule-api>> instead.
+deprecated::[7.13.0,Use <<create-rule-api>> instead.]
 
 Create {kib} alerts.
 

diff --git a/docs/api/alerting/legacy/delete.asciidoc b/docs/api/alerting/legacy/delete.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy delete alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<delete-rule-api>> instead.
+deprecated::[7.13.0,Use <<delete-rule-api>> instead.]
 
 Permanently remove an alert.
 

diff --git a/docs/api/alerting/legacy/disable.asciidoc b/docs/api/alerting/legacy/disable.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy disable alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<disable-rule-api>> instead.
+deprecated::[7.13.0,Use <<disable-rule-api>> instead.]
 
 Disable an alert.
 

diff --git a/docs/api/alerting/legacy/enable.asciidoc b/docs/api/alerting/legacy/enable.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy enable alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<enable-rule-api>> instead.
+deprecated::[7.13.0,Use <<enable-rule-api>> instead.]
 
 Enable an alert.
 

diff --git a/docs/api/alerting/legacy/find.asciidoc b/docs/api/alerting/legacy/find.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy find alerts</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<find-rules-api>> instead.
+deprecated::[7.13.0,Use <<find-rules-api>> instead.]
 
 Retrieve a paginated set of alerts based on condition.
 

diff --git a/docs/api/alerting/legacy/get.asciidoc b/docs/api/alerting/legacy/get.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy get alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-rule-api>> instead.
+deprecated::[7.13.0,Use <<get-rule-api>> instead.]
 
 Retrieve an alert by ID.
 

diff --git a/docs/api/alerting/legacy/health.asciidoc b/docs/api/alerting/legacy/health.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy get Alerting framework health</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-alerting-framework-health-api>> instead.
+deprecated::[7.13.0,Use <<get-alerting-framework-health-api>> instead.]
 
 Retrieve the health status of the Alerting framework.
 

diff --git a/docs/api/alerting/legacy/list.asciidoc b/docs/api/alerting/legacy/list.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy list all alert types</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<list-rule-types-api>> instead.
+deprecated::[7.13.0,Use <<list-rule-types-api>> instead.]
 
 Retrieve a list of all alert types.
 

diff --git a/docs/api/alerting/legacy/mute.asciidoc b/docs/api/alerting/legacy/mute.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy mute alert instance</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<mute-alert-api>> instead.
+deprecated::[7.13.0,Use <<mute-alert-api>> instead.]
 
 Mute an alert instance.
 

diff --git a/docs/api/alerting/legacy/mute_all.asciidoc b/docs/api/alerting/legacy/mute_all.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy mute all alert instances</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<mute-all-alerts-api>> instead.
+deprecated::[7.13.0,Use <<mute-all-alerts-api>> instead.]
 
 Mute all alert instances.
 

diff --git a/docs/api/alerting/legacy/unmute.asciidoc b/docs/api/alerting/legacy/unmute.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy unmute alert instance</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<unmute-alert-api>> instead.
+deprecated::[7.13.0,Use <<unmute-alert-api>> instead.]
 
 Unmute an alert instance.
 

diff --git a/docs/api/alerting/legacy/unmute_all.asciidoc b/docs/api/alerting/legacy/unmute_all.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy unmute all alert instances</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<unmute-all-alerts-api>> instead.
+deprecated::[7.13.0,Use <<unmute-all-alerts-api>> instead.]
 
 Unmute all alert instances.
 

diff --git a/docs/api/alerting/legacy/update.asciidoc b/docs/api/alerting/legacy/update.asciidoc
@@ -4,7 +4,7 @@
 <titleabbrev>Legacy update alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<update-rule-api>> instead.
+deprecated::[7.13.0,Use <<update-rule-api>> instead.]
 
 Update the attributes for an existing alert.
 

diff --git a/docs/developer/plugin-list.asciidoc b/docs/developer/plugin-list.asciidoc
@@ -537,6 +537,10 @@ Documentation: https://www.elastic.co/guide/en/kibana/master/task-manager-produc
 |Gathers all usage collection, retrieving them from both: OSS and X-Pack plugins.
 
 
+|{kib-repo}blob/{branch}/x-pack/plugins/timelines/README.md[timelines]
+|Timelines is a plugin that provides a grid component with accompanying server side apis to help users identify events of interest and perform root cause analysis within Kibana.
+
+
 |{kib-repo}blob/{branch}/x-pack/plugins/transform/readme.md[transform]
 |This plugin provides access to the transforms features provided by Elastic.
 

diff --git a/...s/data/server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.md b/...s/data/server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.md
@@ -14,6 +14,6 @@ export declare class IndexPatternsServiceProvider implements Plugin<void, IndexP
 
 |  Method | Modifiers | Description |
 |  --- | --- | --- |
-|  [setup(core, { expressions })](./kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md) |  |  |
+|  [setup(core, { expressions, usageCollection })](./kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md) |  |  |
 |  [start(core, { fieldFormats, logger })](./kibana-plugin-plugins-data-server.indexpatternsserviceprovider.start.md) |  |  |
 
diff --git a/.../server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md b/.../server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md
@@ -7,15 +7,15 @@
 <b>Signature:</b>
 
 ```typescript
-setup(core: CoreSetup<DataPluginStartDependencies, DataPluginStart>, { expressions }: IndexPatternsServiceSetupDeps): void;
+setup(core: CoreSetup<IndexPatternsServiceStartDeps, DataPluginStart>, { expressions, usageCollection }: IndexPatternsServiceSetupDeps): void;
 ```
 
 ## Parameters
 
 |  Parameter | Type | Description |
 |  --- | --- | --- |
-|  core | <code>CoreSetup&lt;DataPluginStartDependencies, DataPluginStart&gt;</code> |  |
-|  { expressions } | <code>IndexPatternsServiceSetupDeps</code> |  |
+|  core | <code>CoreSetup&lt;IndexPatternsServiceStartDeps, DataPluginStart&gt;</code> |  |
+|  { expressions, usageCollection } | <code>IndexPatternsServiceSetupDeps</code> |  |
 
 <b>Returns:</b>
 

diff --git a/.../server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.start.md b/.../server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.start.md
@@ -8,7 +8,7 @@
 
 ```typescript
 start(core: CoreStart, { fieldFormats, logger }: IndexPatternsServiceStartDeps): {
-        indexPatternsServiceFactory: (savedObjectsClient: SavedObjectsClientContract, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
+        indexPatternsServiceFactory: (savedObjectsClient: Pick<import("../../../../core/server").SavedObjectsClient, "get" | "delete" | "create" | "bulkCreate" | "checkConflicts" | "find" | "bulkGet" | "resolve" | "update" | "addToNamespaces" | "deleteFromNamespaces" | "bulkUpdate" | "removeReferencesTo" | "openPointInTimeForType" | "closePointInTime" | "createPointInTimeFinder" | "errors">, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
     };
 ```
 
@@ -22,6 +22,6 @@ start(core: CoreStart, { fieldFormats, logger }: IndexPatternsServiceStartDeps):
 <b>Returns:</b>
 
 `{
-        indexPatternsServiceFactory: (savedObjectsClient: SavedObjectsClientContract, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
+        indexPatternsServiceFactory: (savedObjectsClient: Pick<import("../../../../core/server").SavedObjectsClient, "get" | "delete" | "create" | "bulkCreate" | "checkConflicts" | "find" | "bulkGet" | "resolve" | "update" | "addToNamespaces" | "deleteFromNamespaces" | "bulkUpdate" | "removeReferencesTo" | "openPointInTimeForType" | "closePointInTime" | "createPointInTimeFinder" | "errors">, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
     }`
 
diff --git a/docs/management/managing-fields.asciidoc b/docs/management/managing-fields.asciidoc
@@ -78,6 +78,7 @@ include::field-formatters/color-formatter.asciidoc[]
 
 [[scripted-fields]]
 === Scripted fields
+deprecated::[7.13,Use {ref}/runtime.html[runtime fields] instead of scripted fields. Runtime fields support Painless scripts and provide greater flexibility.]
 
 Scripted fields compute data on the fly from the data in your {es} indices. The data is shown on
 the Discover tab as part of the document data, and you can use scripted fields in your visualizations. You query scripted fields with the <<kuery-query, {kib} query language>>, and can filter them using the filter bar. The scripted field values are computed at query time, so they aren't indexed and cannot be searched using the {kib} default
@@ -87,7 +88,7 @@ WARNING: Computing data on the fly with scripted fields can be very resource int
 {kib} performance. Keep in mind that there's no built-in validation of a scripted field. If your scripts are
 buggy, you'll get exceptions whenever you try to view the dynamically generated data.
 
-When you define a scripted field in {kib}, you have a choice of the {ref}/modules-scripting-expression.html[Lucene expressions] or the 
+When you define a scripted field in {kib}, you have a choice of the {ref}/modules-scripting-expression.html[Lucene expressions] or the
 {ref}/modules-scripting-painless.html[Painless] scripting language.
 
 You can reference any single value numeric field in your expressions, for example:

diff --git a/docs/migration/migrate_8_0.asciidoc b/docs/migration/migrate_8_0.asciidoc
@@ -320,6 +320,15 @@ All supported operating systems support using systemd service files.  Any system
 *Impact:*
 Any installations using `.deb` or `.rpm` packages using SysV will need to migrate to systemd.
 
+[float]
+=== TLS v1.0 and v1.1 are disabled by default
+
+*Details:*
+Support can be re-enabled by setting `--tls-min-1.0` in the `node.options` config file that can be found inside `kibana/config` folder or any other configured with the environment variable `KBN_PATH_CONF` (for example in Debian based system would be `/etc/kibana`).
+
+*Impact:*
+Browser and proxy clients communicating over TLS v1.0 and v1.1.
+
 [float]
 === Platform removed from root folder name for `.tar.gz` and `.zip` archives
 

diff --git a/docs/settings/reporting-settings.asciidoc b/docs/settings/reporting-settings.asciidoc
@@ -260,19 +260,21 @@ For information about {kib} memory limits, see <<production, using {kib} in a pr
 
 [cols="2*<"]
 |===
-| `xpack.reporting.index`
-  | *deprecated* This setting is deprecated and will be removed in 8.0. Multitenancy by changing
-  `kibana.index` will not be supported starting in 8.0. See https://ela.st/kbn-remove-legacy-multitenancy[8.0 Breaking Changes]
-  for more details. Reporting uses a weekly index in {es} to store the reporting job and
-  the report content. The index is automatically created if it does not already
-  exist. Configure this to a unique value, beginning with `.reporting-`, for every
-  {kib} instance that has a unique <<kibana-index, `kibana.index`>> setting. Defaults to `.reporting`.
-
 | `xpack.reporting.capture.networkPolicy`
   | Capturing a screenshot from a {kib} page involves sending out requests for all the linked web assets. For example, a Markdown
   visualization can show an image from a remote server. You can configure what type of requests to allow or filter by setting a
   <<reporting-network-policy, network policy>> for Reporting.
 
+| `xpack.reporting.index`
+  | deprecated:[7.11.0,This setting will be removed in 8.0.] Multitenancy by 
+  changing `kibana.index` will not be supported starting in 8.0. See
+  https://ela.st/kbn-remove-legacy-multitenancy[8.0 Breaking Changes] for more 
+  details. Reporting uses a weekly index in {es} to store the reporting job and
+  the report content. The index is automatically created if it does not already
+  exist. Configure this to a unique value, beginning with `.reporting-`, for
+  every {kib} instance that has a unique <<kibana-index, `kibana.index`>> 
+  setting. Defaults to `.reporting`.
+
 | `xpack.reporting.roles.allow`
   | Specifies the roles in addition to superusers that can use reporting.
   Defaults to `[ "reporting_user" ]`. +

diff --git a/docs/setup/settings.asciidoc b/docs/setup/settings.asciidoc
@@ -25,12 +25,14 @@ which may cause a delay before pages start being served.
 Set to `false` to disable Console. *Default: `true`*
 
 | `cpu.cgroup.path.override:`
- | *deprecated* This setting has been renamed to <<ops-cGroupOverrides-cpuPath, `ops.cGroupOverrides.cpuPath`>>
-and the old name will no longer be supported as of 8.0.
+ | deprecated:[7.10.0,"This setting will no longer be supported as of 8.0."]
+ This setting has been renamed to
+ <<ops-cGroupOverrides-cpuPath,`ops.cGroupOverrides.cpuPath`>>.
 
 | `cpuacct.cgroup.path.override:`
- | *deprecated* This setting has been renamed to <<ops-cGroupOverrides-cpuAcctPath, `ops.cGroupOverrides.cpuAcctPath`>>
-and the old name will no longer be supported as of 8.0.
+ | deprecated:[7.10.0,"This setting will no longer be supported as of 8.0."]
+ This setting has been renamed to
+ <<ops-cGroupOverrides-cpuAcctPath, `ops.cGroupOverrides.cpuAcctPath`>>.
 
 | `csp.rules:`
  | A https://w3c.github.io/webappsec-csp/[content-security-policy] template
@@ -64,10 +66,12 @@ To enable SSL/TLS for outbound connections to {es}, use the `https` protocol
 in this setting.
 
 | `elasticsearch.logQueries:`
- | *deprecated* This setting is no longer used and will get removed in Kibana 8.0. Instead, configure the `elasticsearch.query` logger.
-This is useful for seeing the query DSL generated by applications that
-currently do not have an inspector, for example Timelion and Monitoring.
-*Default: `false`*
+ | deprecated:[7.12.0,"This setting is no longer used and will be removed in Kibana 8.0."]
+ Instead, configure the `elasticsearch.query` logger.
+ +
+ This is useful for seeing the query DSL generated by applications that
+ currently do not have an inspector, for example Timelion and Monitoring.
+ *Default: `false`*
 
 The following example shows a valid `elasticsearch.query` logger configuration:
 |===
@@ -240,18 +244,22 @@ on the {kib} index at startup. {kib} users still need to authenticate with
   | Enables use of interpreter in Visualize. *Default: `true`*
 
 | `kibana.defaultAppId:`
- | *deprecated* This setting is deprecated and will get removed in Kibana 8.0.
-Please use the `defaultRoute` advanced setting instead.
-The default application to load. *Default: `"home"`*
+ | deprecated:[7.9.0,This setting will be removed in Kibana 8.0.]
+ Instead, use the <<defaultroute,`defaultRoute` advanced setting>>.
+ +
+ The default application to load. *Default: `"home"`*
 
 |[[kibana-index]] `kibana.index:`
- | *deprecated* This setting is deprecated and will be removed in 8.0. Multitenancy by changing
-`kibana.index` will not be supported starting in 8.0. See https://ela.st/kbn-remove-legacy-multitenancy[8.0 Breaking Changes]
-for more details. {kib} uses an index in {es} to store saved searches, visualizations, and
-dashboards. {kib} creates a new index if the index doesn’t already exist.
-If you configure a custom index, the name must be lowercase, and conform to the
-{es} {ref}/indices-create-index.html[index name limitations].
-*Default: `".kibana"`*
+ | deprecated:[7.11.0,This setting will be removed in 8.0.] Multitenancy by
+ changing `kibana.index` will not be supported starting in 8.0. See
+ https://ela.st/kbn-remove-legacy-multitenancy[8.0 Breaking Changes] for more
+ details.
+ +
+ {kib} uses an index in {es} to store saved searches, visualizations, and
+ dashboards. {kib} creates a new index if the index doesn’t already exist. If
+ you configure a custom index, the name must be lowercase, and conform to the
+ {es} {ref}/indices-create-index.html[index name limitations].
+ *Default: `".kibana"`*
 
 | `kibana.autocompleteTimeout:` {ess-icon}
  | Time in milliseconds to wait for autocomplete suggestions from {es}.

diff --git a/docs/user/dashboard/timelion.asciidoc b/docs/user/dashboard/timelion.asciidoc
@@ -4,17 +4,7 @@
 Instead of using a visual editor to create charts, you define a graph by chaining functions together, using the *Timelion*-specific syntax. 
 The syntax enables some features that classical point series charts don't offer, such as pulling data from different indices or data sources into one graph.
 
-[NOTE]
-====
-Timelion app deprecation
-
-*Timelion* is still supported, the *Timelion app* is deprecated in 7.0, replaced by
-dashboard features. In 8.0 and later, the *Timelion app* is removed from {kib}. 
-To prepare for the removal of *Timelion app*, you must migrate *Timelion app* worksheets to a dashboard.
-
-For information on how to migrate *Timelion app* worksheets, refer to the 
-link:https://www.elastic.co/guide/en/kibana/7.10/release-notes-7.10.0.html#deprecation-v7.10.0[7.10.0 Release Notes].
-====
+deprecated::[7.0.0,"*Timelion* is still supported. The *Timelion app* is deprecated in 7.0, replaced by dashboard features. In 8.0 and later, the *Timelion app* is removed from {kib}. To prepare for the removal of *Timelion app*, you must migrate *Timelion app* worksheets to a dashboard. For information on how to migrate *Timelion app* worksheets, refer to the link:https://www.elastic.co/guide/en/kibana/7.10/release-notes-7.10.0.html#deprecation-v7.10.0[7.10.0 Release Notes]."]
 
 [float]
 ==== Timelion expressions