Elastic Security breaking changesedit

This list summarizes the most important breaking changes in Elastic Security 8.5.3. For the complete list, go to Elastic Security breaking changes.

  • Host and user risk score features that were installed in 8.4 or earlier are not ECS-compatible and, therefore, cannot generate new risk scores in 8.5. Before upgrading, users can archive their existing risk indices if they want to keep their old host and user risk scores. Otherwise, new risk indices will be generated once users upgrade host and user risk score features (#140377).