Skip to content

Commit

Permalink
Add known issues about fieldless searches
Browse files Browse the repository at this point in the history
  • Loading branch information
zmoog committed Sep 17, 2024
1 parent 8cdfa06 commit 19aa77a
Showing 1 changed file with 51 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,23 @@ This issue has been link:https:/elastic/elastic-stack-installers/pul
====

[[known-issue-242-8.13.0]]
.ECS fields are not included to the `index.query.default_field` in {agent} integrations
[%collapsible]
====
*Details*
Due to changes introduced to support ecs@mappings component template (see link:https:/elastic/kibana/pull/174855[elastic/kibana/pull/174855]), {fleet} no longer include ECS fields to the integrations' `index.query.default_field`. This may affect integrations that rely fieldless queries (when no field is specified for a query).
*Impact* +
In version 8.14.0 and later, the {fleet} sets `index.query.default_field` to `*`, so agentless queries will work as expected. We recommend users of {fleet} to upgrade to 8.14 when that release becomes available.
If you are unable to upgrade to 8.14.0, you can follow the workaround described in the link:https://support.elastic.co/knowledge/bbdbeb57.
====

[discrete]
[[bug-fixes-8.13.2]]
=== Bug fixes
Expand Down Expand Up @@ -127,6 +144,23 @@ This issue has been link:https:/elastic/elastic-stack-installers/pul
====

[[known-issue-242-8.13.0]]
.ECS fields are not included to the `index.query.default_field` in {agent} integrations
[%collapsible]
====
*Details*
Due to changes introduced to support ecs@mappings component template (see link:https:/elastic/kibana/pull/174855[elastic/kibana/pull/174855]), {fleet} no longer include ECS fields to the integrations' `index.query.default_field`. This may affect integrations that rely fieldless queries (when no field is specified for a query).
*Impact* +
In version 8.14.0 and later, the {fleet} sets `index.query.default_field` to `*`, so agentless queries will work as expected. We recommend users of {fleet} to upgrade to 8.14 when that release becomes available.
If you are unable to upgrade to 8.14.0, you can follow the workaround described in the link:https://support.elastic.co/knowledge/bbdbeb57.
====

[discrete]
[[enhancements-8.13.1]]
=== Enhancements
Expand Down Expand Up @@ -233,6 +267,23 @@ This issue has been link:https:/elastic/elastic-stack-installers/pul
====

[[known-issue-242-8.13.0]]
.ECS fields are not included to the `index.query.default_field` in {agent} integrations
[%collapsible]
====
*Details*
Due to changes introduced to support ecs@mappings component template (see link:https:/elastic/kibana/pull/174855[elastic/kibana/pull/174855]), {fleet} no longer include ECS fields to the integrations' `index.query.default_field`. This may affect integrations that rely fieldless queries (when no field is specified for a query).
*Impact* +
In version 8.14.0 and later, the {fleet} sets `index.query.default_field` to `*`, so agentless queries will work as expected. We recommend users of {fleet} to upgrade to 8.14 when that release becomes available.
If you are unable to upgrade to 8.14.0, you can follow the workaround described in the link:https://support.elastic.co/knowledge/bbdbeb57.
====

[discrete]
[[new-features-8.13.0]]
=== New features
Expand Down

0 comments on commit 19aa77a

Please sign in to comment.