Elastic Release Notes

Fixes

Elastic Agent Builder:

• Fix auto-created conversations overwriting an existing conversation that shares the same ID #280189.

Alerting and cases:

• Fix attaching AIOps charts (change point, pattern analysis, log rate analysis) to a case failing with an "Attachment type is not registered" error #281157.
• Fix CSV exports covering a different time window than what was shown in Discover for relative time ranges. For scheduled reports, the corrected behavior applies only to reports created or re-saved after upgrading; existing schedules keep their previous time-window behavior until they are recreated #278305.
• Fix the alerts-as-data setup overriding an index's total fields limit that was already set to a higher value #277402.

Dashboards and Visualizations:

• Fix duplicated Lens panels backed by a form-based ad hoc data view failing to load after you rename the data view or add a runtime field, caused by colliding ad hoc data view IDs #281786.
• Fix ad hoc data view resolution for Lens XY annotation layers created through the Visualizations API #281079. …

<important> The 9.4.6 release contains fixes for potential security vulnerabilities. For details, go to [security announcements](https://discuss.elastic.co/c/announcements/security-announcements/31). </important>

Features and enhancements

Alerting:

• Add [Elastic Cloud Trial] prefix to email subjects sent through the built-in Elastic Cloud email service on trial deployments #276705.

Workflows:

• Add step-level if skip conditions to all workflow step types except the if step, which continues to use condition #279210.

Fixes

Agent Builder:

• Fix Agent Builder entering an infinite retry loop and hitting a recursion error when the plain-text answering path receives an empty model response #285823.
• Fix Anthropic inference endpoint stream parsing and Agent Builder silent retry loops on empty model responses #281616.
• Fix Agent Builder queries failing with a security exception on Elasticsearch 9.4 when cross-cluster search index patterns are configured without the remote cluster client role #281609. …

Fixes

Alerting and cases:

• Fix alerting resource installation using unbounded concurrency, which could exhaust Kibana heap when many contexts and namespaces install at once #287643.
• Fix the Additional fields editor on the ServiceNow ITSM, ServiceNow SecOps, and Jira connectors rejecting Mustache context variables as invalid JSON #286578.

Dashboards and Visualizations:

• Fix the Update filter button being unreachable when the filter editor is taller than the screen #289163.
• Fix Options list filters stopping after you delete a collapsible dashboard section #287923.
• Fix Canvas functions API creating data tables with more than 50 columns per row #287935.
• Fix the Maps timeslider close button registering clicks only on the top quarter of the control #287441.

Data ingestion and Fleet:

• Fix Fleet blocking a package policy save when every enrolled agent is incompatible with the package version, including agents that report a pre-release version. Fleet shows a warning instead of blocking the save #289596. …

<important> The 9.4.8 release contains fixes for potential security vulnerabilities. Check our [security advisory](https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866) for more details. </important>

Fixes

Elastic Agent Builder:

• Fix Agent Builder tools hanging or timing out on data streams that span the frozen tier. Tools now skip frozen tier indices #292349.

Alerting and cases:

• Fix forced rule runs and schedule changes being silently dropped when you request them while the rule is finishing a run #293492.
• Fix bulk alert tag updates also changing matching alerts in other Kibana spaces #285874.
• Fix Jira Service Management and Opsgenie connector actions failing when the rendered alert message exceeds 130 characters. The connectors now truncate the message instead #291698.

Dashboards and Visualizations:

• Increase the TinyMath expression length limit so longer visualization formulas don't fail #290314.
• Fix Go to URL drilldowns leaving Mustache tokens such as event.values.[0] unreplaced in the drilldown name #290363.

Data ingestion and Fleet: …

Features and enhancements

Elastic Agent Builder:

• Create skills in Agent Builder chat, preview drafts in attachments, and save them from the conversation #265883.
• Enable Agent Builder to pause and ask up to five clarifying multiple-choice questions before acting, then resume after you answer #274672.
• Share private agents with selected people using per-agent access control alongside Public, Shared, and Private visibility #267530.
• Add an embeddable Agent Builder conversation input that opens Agent Builder and sends the message with attachments preserved #272166.
• Enable Agent Builder tracing by default so you can view trace waterfalls for each response, use the built-in traces skill, and monitor activity in the overview dashboard while excluding sensitive prompts and tool parameters by default #276174.
• Add install, open, and delete controls to the Agent Builder Traces option on the GenAI Settings page, and prevent deleted dashboards from being reinstalled when Kibana restarts #276643. …

Features and enhancements

Alerting and cases:

• Add limits on case templates and fields (200 templates and 200 fields per owner, and size limits on template and field definitions) to keep large template libraries performant, and clean up the field library editor #281650.
• Store assignee usernames, full names, and email addresses on cases so case analytics dashboards can show assignee details without an extra lookup. Available by default in traditional deployments #281579.

Data management:

• Add an Import from another stream flow in the Data lifecycle tab to reuse another stream's lifecycle configuration #275948.
• Add transition animations to the Streams data lifecycle phase preview so editing or switching lifecycle methods no longer flashes between states #277149.

Elastic Observability solution: For the Elastic Observability 9.5.1 release information, refer to Elastic Observability Solution Release Notes. Elastic Security solution: For the Elastic Security 9.5.1 release information, refer to Elastic Security Solution Release Notes.

Fixes

Elastic Agent Builder: …

Features and enhancements

Alerting and cases:

• Add a public API to create, update, and delete case templates (POST, PUT, and DELETE /api/cases/templates), including a dry-run mode that validates a template without saving it #280144.
• Improve the Cases view, cases list, and field library by keeping the case details panel in view as you scroll, saving status and other fields immediately when changed, and adding drag-and-drop field reordering to the field library #282197.
• Add an Agent Builder tool to attach saved dashboards, maps, Discover sessions, and Lens visualizations to a case #279680.

Dashboards and Visualizations:

• Restore Defer loading panels below "the fold" (labs:dashboard:deferBelowFold) so off-screen dashboard panels wait to fetch data until they scroll into view. The setting is off by default #284004.

Elastic Observability solution: For the Elastic Observability 9.5.2 release information, refer to Elastic Observability Solution Release Notes. Elastic Security solution: For the Elastic Security 9.5.2 release information, refer to Elastic Security Solution Release Notes. Elasticsearch solution: …

Features and enhancements

Alerting and cases:

• Warn in the field library and template editors when a required case field has no default value, because automated case creation can't fill it in, and show a field's name and type as permanent as soon as you create it #285453.
• Enforce required global fields on API and workflow case creation when case templates are enabled, and accept extended_fields on the public and workflow case create and update APIs #283350.

Developer tools:

• Raise the Dev Tools Console Copy to curl limit so a request-body string of up to 100000 characters copies successfully #287526.

Fixes

Elastic Agent Builder:

• Fix the research agent re-asking clarifying questions you already answered in the same round #284800.
• Fix disabled pre-execution workflows disappearing from Agent Builder settings so you cannot remove them. A disabled workflow stays visible and is labeled (disabled) #286826.

Alerting and cases:

• Fix legacy custom fields and their v2 field-definition counterparts falling out of sync, by linking each legacy field to its definition and keeping both representations equal on every write #282772. …

Fixes

Elastic Agent Builder:

• Fix MCP tools dropping extra arguments that the schema allows through additionalProperties before execution #287815.

Alerting and cases:

• Relabel the top-level Alerting privilege as Alerting V2 in the Roles UI and mark it experimental #288163.
• Fix the Tracking containment rule editor breaking when you select a data view #289778.
• Fix Sync alerts and Extract observables not applying when you change a case template from the sidebar #288636.
• Fix Alerting V2 rules from not saving when you remove all rule tags #288962.

Dashboards and Visualizations:

• Fix the Update filter button being unreachable when the filter editor is taller than the screen #289163.
• Fix sibling dashboard panels not dimming during inline editing on dashboards that have no controls #288939.
• Fix ES|QL visualizations dropping field variable controls (??field) after you save them through the Visualizations API #288785. …

<important> The 9.5.5 release contains fixes for potential security vulnerabilities. Check our [security advisory](https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866) for more details. </important>

Fixes

Elastic Agent Builder:

• Fix Agent Builder tools hanging or timing out on data streams that span the frozen tier. Tools now skip frozen tier indices #292349.
• Fix Agent Builder tracing applying the default space's GenAI privacy settings in every space. Each conversation now uses the privacy settings of its own space #290750.
• Add the case template ID and version fields to the Agent Builder cases-analytics skill so agents can filter and group cases by template #291716.

Alerting and cases:

• Fix forced rule runs and schedule changes being silently dropped when you request them while the rule is finishing a run #293492.
• Fix Agent Builder rules failing after about an hour because they kept the agent's temporary API key #291318.
• Fix bulk alert tag updates also changing matching alerts in other Kibana spaces #285874. …

Highlights

<dropdown title="Verify overwrite protection in repository analysis"> The safety of the snapshot algorithm relies on the repository preventing certain objects from being overwritten. From version 9.5.0 onwards, Elasticsearch will verify that the repository implements overwrite protection correctly during repository analysis. </dropdown><dropdown title="Batched execution in the query phase"> Searches that target multiple shards on the same data node now batch shards into a single round-trip per data node, with partial reductions performed on the data nodes. This reduces transport layer overhead and spreads the load of reductions across multiple nodes. The enhancement is controlled by a setting `search.batched_query_phase`, which is enabled by default in 9.5.0. </dropdown><dropdown title="Improved reindex resilience and new reindex management APIs"> We're making multiple changes to the resilience and ease-of-use of the reindex API. Firstly, asynchronous reindex operations will now survive the graceful shutdown of the node where they are running. This makes long-running operations much more reliable, especially in a managed cluster. Secondly, reindex operations will now normally use the point-in-time API instead of the scroll API for paginated search. This is the preferred approach for deep pagination, and allows reindex to benefit from recent improvements to PIT resilience (where available). …

Features and enhancements

FIPS:

• Update Bouncy Castle FIPS TLS libraries #155937

Infra/Core:

• Upgrade lz4-java to 1.11.1 #155598

Machine Learning:

• Add EuroBERT and Jina v5 ops to the graph validation allowlist #3015
• Downgrade log severity for a batch of recoverable errors #2889
• Harden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
• Improve adherence to memory limits for the bucket gatherer #2848
• Improve error handling for quantiles state documents #2894
• Improve handling of invalid JSON state documents #2895
• Improve messaging for OOM process termination #2841
• Report the actual memory usage of the autodetect process #2846
• Update the PyTorch library to version 2.7.1 #2863

Security:

• Upgrade Apache HttpComponents 5.x to address CVEs #153057 …

Features and enhancements

FIPS:

• Update Bouncy Castle FIPS TLS libraries #155937

Infra/Core:

• Upgrade lz4-java to 1.11.1 #155598

Infra/Plugins:

• Add policy_base_id field to fleet-agents and fleet-policies index templates #154521

Machine Learning:

• Add EuroBERT and Jina v5 ops to the graph validation allowlist #3015
• Downgrade log severity for a batch of recoverable errors #2889
• Harden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
• Improve adherence to memory limits for the bucket gatherer #2848
• Improve error handling for quantiles state documents #2894
• Improve handling of invalid JSON state documents #2895
• Improve messaging for OOM process termination #2841
• Report the actual memory usage of the autodetect process #2846
• Restrict file system access for PyTorch models #2851 …

Features and enhancements

FIPS:

• Upgrade Bouncy Castle FIPS to 1.0.2.7 and 2.0.2 #156296

Infra/Core:

• Upgrade ASM to 9.10.1 #156213
• Upgrade the bundled JDK to 26.0.2 #156203

Mapping:

• Upgrade to Lucene 10.5.1 #156643

Security:

• Upgrade Jackson to 2.21.5 for ES|QL and Arrow #156368

Fixes

Aggregations:

• Fix rank estimation ignoring min and max in exponential histograms #156268 (issue: #156057)

Downsampling:

• Fix duplicate field in the cumulative histogram reset document #156287 (issue: #156276)

ES|QL:

• Account for deferred aggregation memory in the request circuit breaker #155600 (issue: #148516)
• Account for t-digest percentiles memory in the request circuit breaker #155586 …

Features and enhancements

Authorization:

• Grant kibana_system access to PingDirectory indices so ILM can delete them #156029

FIPS:

• Upgrade Bouncy Castle FIPS to 1.0.2.7 and 2.0.2 #156296

Infra/Core:

• Upgrade ASM to 9.10.1 #156213
• Upgrade the bundled JDK to 26.0.2 #156203

Machine Learning:

• Add EuroBERT and Jina v5 ops to graph validation allowlist #3015
• Harden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
• Improve adherence to memory limits for the bucket gatherer #2848
• Improve error handling for quantiles state documents #2894
• Improve handling of invalid JSON state documents #2895
• Improve messages when a process is stopped after running out of memory #2841
• Lower the log severity of recoverable errors #2889
• Report the actual memory usage of the autodetect process #2846 …

Features and enhancements

Audit:

• Add request.raw_body to audit events for protobuf request bodies #158143
• Reject oversized request bodies when request-body auditing is enabled #157760

Vector Search:

• Speed up vector quantization calibration during index merge #153577

Fixes

Analysis:

• Limit min_hash filter parameters to prevent integer overflow #158211
• Prevent out-of-memory errors from extreme min_hash filter settings #154480

Authorization:

• Fix field-level security filtering for _field_names terms #157889

CRUD:

• Prevent indexing-pressure rejections from stopping an entire bulk shard request #158235 (issue: #158212)

Columnar:

• Fix BYTE_LENGTH returning 0 for keyword fields in columnar mode #157858
• Fix incorrect MV_MIN and MV_PERCENTILE results in columnar mode #157857 (issue: #157817)

Data streams: …

Features and enhancements

Authorization:

• Add manage, create_index, read, index, write, delete, permission for third party agent indices kibana_system #156029

Infra/Core:

• Upgrade Jackson to 2.21.6 #157295 (issue: #141442)

Machine Learning:

• Add EuroBERT and Jina v5 ops to graph validation allowlist #3015
• Better error handling regarding quantiles state documents #2894
• Better handling of invalid JSON state documents #2895
• Better messaging regarding out of memory process termination #2841
• Downgrade log severity for a batch of recoverable errors #2889
• Harden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
• Improve adherence to memory limits for the bucket gatherer #2848
• Report the actual memory usage of the autodetect process #2846 …

Features and enhancements

Audit:

• Add request.raw_body to audit events for protobuf request bodies #158143
• Reject oversized request bodies when request-body auditing is enabled #157760

Machine Learning:

• Add EuroBERT and Jina v5 ops to graph validation allowlist #3015
• Better error handling regarding quantiles state documents #2894
• Better handling of invalid JSON state documents #2895
• Better messaging regarding out of memory process termination #2841
• Downgrade log severity for a batch of recoverable errors #2889
• Harden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
• Improve adherence to memory limits for the bucket gatherer #2848
• Report the actual memory usage of the autodetect process #2846
• Restrict file system access for PyTorch models #2851
• Update the PyTorch library to version 2.7.1 #2863 …

<applies-to> - Elastic Stack: Generally available since 9.4 </applies-to>

Features and enhancements

Aggregations:

• Limits the multi_terms aggregation to a maximum of 128 fields #157906

Authorization:

• Grants the kibana_system role the manage, create_index, read, index, write, and delete privileges on the XM Cyber indices (logs-xm_cyber.device-*, logs-xm_cyber.product-*, and logs-xm_cyber.vulnerability_index-*), so the index lifecycle management (ILM) delete step can succeed for these indices #160185

ES|QL:

• Upgrades the Parquet Hadoop bundle #158981
• Upgrades OpenTelemetry to 1.62.0 in the Google Cloud Storage (GCS) modules #152499
• Upgrades zstd-jni to 1.5.7-16 #159621

Inference:

• Passes the reasoning effort setting through to OpenAI chat completion requests #156505

Infra/Core:

• Upgrades Jackson to 2.21.7 #160501

Network:

• Upgrades Netty to 4.1.138.Final #159561

Fixes

CRUD: …

<applies-to> - Elastic Stack: Generally available since 9.5 </applies-to>

Features and enhancements

Aggregations:

• Limit the multi_terms aggregation to a maximum of 128 fields #157906

Authorization:

• Add the manage, create_index, read, index, write, and delete privileges on third-party agent indices to the kibana_system role #160185

ES|QL:

• Upgrade the Parquet Hadoop bundle dependency #158981
• Upgrade zstd-jni to 1.5.7-16 #159621

Inference:

• Pass the reasoning effort setting through to OpenAI chat completion requests #156505

Infra/Core:

• Upgrade Jackson to 2.21.7 #160501

Network:

• Upgrade Netty to 4.1.138.Final #159561

Fixes

CRUD:

• Fix replica divergence on indices that have sequence numbers disabled #158870 (issue: #150408)

Distributed: …