What’s new in 8.3edit

Here are the highlights of what’s new and improved in 8.3. For detailed information about this release, check the release notes.

Previous versions: 8.2 | 8.1 | 8.0

Alerts available from Discoveredit

You can now create search threshold rules from Discover, making it easy to be notified when documents change so you can turn your data into action. Start by defining the data view, query, and filter conditions for when you want to be alerted. Then choose the messaging services where you want to be notified when your alert conditions are met, and finally, trigger workflows across third-party integrations such as ServiceNow and Slack. For information about alerts, check Alerting.

A view of the Create rule form opened from Discover

Controls for filtering dashboard dataedit

Dashboard controls bring interactive inputs in an easy drag and drop editing experience. Controls chain, disable when they need to, and offer several filtering form factors that make filtering fast. Now, you can make filtering on popular fields easy for all your dashboard users. For more information, check Filter dashboard data with controls.

A dashboard view showing the new Controls menu

Query bar refreshed across Kibanaedit

This release brings a modern and responsive query and search experience to Kibana, which makes more room for your data and content.

Data view menuedit

The new data view menu consolidates all of the options you need to create, find, and edit your data views in a single location. Need to add a field to your data view? Changed your mind and need to create a data view? No problem. These options are available in the simplified menu.

How to set the Data view

Saved query and Add filter menusedit

Querying and filtering your Elastic data is now easier with the improved Saved query and Add filter menus. The Saved query menu consolidates all of your query and filter needs, including the option to change your filtering language.

Menu for saving queries and adding filters

Support for Kibana APIs in Consoleedit

Dev Tools > Console now supports sending requests to Kibana APIs. Prepend any Kibana API endpoint with kbn: and send the request.

Console showing how to send requests to Kibana APIs

Enhancements to visualization editorsedit

Range annotations in Lensedit

Unlock insights by visualizing event data directly on your Lens visualizations. With range annotations, you can show windows of time such as releases, maintenance windows, holidays, and more to provide context to metric performance. For information about Lens annotations, check Add annotations.

Range annotation inside of the visualization

Range annotation inside a visualization

Range annotation outside of the visualization

Range annotation outside of a visualization

Anomaly jobs from Lens visualizationsedit

See something interesting on a visualization on your dashboard? Turn any Lens panel into a new anomaly detection job with the Create anomaly detection job menu option in your dashboards.

Create anomaly detection job option and transition to create job wizard

Accuracy mode in Lensedit

When creating Lens visualizations with the Top values function, you can now enable accuracy mode. This mode improves the accuracy of results for high-cardinality data by using more resources in your Elasticsearch cluster. For information, check Lens.

Accuracy mode in Lens

Synchronized tooltips in Lensedit

To make it easier to compare multiple time series visualizations, dashboards now include a Sync tooltips across panels option. When enabled and you hover your cursor over a chart, the tooltips on all other related dashboard charts automatically appear at the same data point or moment in time. For information, check Dashboard.

Sync tooltip across panels option

Collapse break downedit

When creating Lens tables and XY visualizations, you can now collapse the breakdown dimension, allowing you to summarize aggregated data. For information, check Create custom tables.

Enhancements to Mapsedit

Language selectoredit

You can now select Arabic, German, English, Spanish, French, Hindi, Italian, Japanese, Portuguese, Russian, and Chinese for country and region labels. By default, new maps use the Kibana locale setting to determine the language for basemap labels.

Menu for selecting a language for country and region labels

Vector tiles and joinsedit

Are you using vector tiles? Good news. You are now able to make joins.

Joins for vector tiles in Maps

Improved Content Security Policyedit

Kibana now has experimental support for a more restrictive Content Security Policy(CSP). Specifically, we removed the need for script-src 'unsafe-eval', which provides an additional level of protection against cross-site scripting (XSS) attacks.

To enable this feature, configure csp.disableUnsafeEval: true in your kibana.yml.

Setting for a more restrictive Content Security Policy

Test trained models in Machine Learningedit

You can now visualize machine learning trained model output. A new test model action in Machine Learning > Trained Models opens up a flyout, where you can enter input text for testing. View the output using text highlighting or as JSON output.

Trained models are available for the following tasks: language identification, named entity recognition (NER), text classification, question answering, zero-shot text classification, text embedding, and fill task.

Trained models test in Machine Learning

Enhancements to Alertingedit

OAuth support in ServiceNow connectorsedit

The ServiceNow connectors now support open authentication (OAuth). For configuration details, refer to ServiceNow ITSM, ServiceNow SecOps, and ServiceNow ITOM connector.

Severity levels on casesedit

You can now assign a severity level to each of your cases (critical, high, medium, or low). You can also view information about the average duration of your cases and delete comments in Kibana.

Enhancements to Osqueryedit

New saved queries availableedit

Osquery now includes a set of 17 saved queries that are available to run as a live query or add to a scheduled pack. These queries can help you get started using Osquery and show examples of the types of queries you can run.

Saved queries page

Support for multi-line queriesedit

Live and scheduled queries now have multi-line query support, which makes queries easier to read, understand, and maintain. This update better supports Osquery syntax, which is a superset of SQLite, so that you can save and run queries using a standard SQL format.

New live query page