Kibana 8.10.0edit

Kibana 8.10.0 has been withdrawn.

For information about the Kibana 8.10.0 release, review the following information.

Security updatesedit

  • An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern.

    The issue is resolved in Kibana 8.10.1. Version 8.10.0 has been removed from our download sites.

    For more information, see our related security announcement.

Breaking changesedit

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade to 8.10.0, review the breaking changes, then mitigate the impact to your application.

New summary search capabilities

New summary search capabilities introduce breaking changes in various places, and we have decided to not handle backward compatibility:

  • SLO find API body parameters have changed
  • The index mapping used by the rollup data has changed, and we have added a summary index that becomes the new source of truth for search
  • The rollup transform have been updated, but existing SLO with their transform won’t be updated.

If some SLOs have been installed in a prior version at 8.10, the user will need to remove them manually from the UI, or by deleting the Saved Object and the associated Transform.

Get case metrics APIs now internal

The get case metrics APIs are now internal. For more information, refer to (#162506).

Case limits

Limits are now imposed on the number of objects cases can process or the amount of data those objects can store.

For the full list, refer to #146945.

addProcessorDefinition is removed

The function addProcessorDefinition is removed from the Console plugin start contract (server side). For more information, refer to (#159041).


The following functionality is deprecated in 8.10.0, and will be removed in 9.0.0. Deprecated functionality does not have an immediate impact on your application, but we strongly recommend you make the necessary updates after you upgrade to 8.10.0.

Action variables in the UI and in tests that were no longer used have been replaced

The following rule action variables have been deprecated; use the recommended variables (in parentheses) instead:

  • alertActionGroup (alert.actionGroup)
  • alertActionGroupName (alert.actionGroupName)
  • alertActionSubgroup (alert.actionSubgroup)
  • alertId (
  • alertInstanceId (
  • alertName (
  • params (rule.params)
  • spaceId (rule.spaceId)
  • tags (rule.tags)

For more information, refer to (#161136).


Kibana 8.10.0 adds the following new and notable features.

  • Adds support for self-signed SSL certificate authentication in webhook connector (#161894).
  • Allow runtime fields to be selected for Elasticsearch query rule type group by or aggregate over options (#160319).
  • Adds KQL filtering in APM rules (#163825).
  • Make service group saved objects exportable (#163569).
  • Added ability to manage Cross-Cluster API keys (#162363).
  • Enable Trace Explorer by default (#162308).
  • Adds error.grouping_name to group alerts in Error Count rule (#161810).
  • Adds query to check for overflow bucket in service groups (#159990).
Elastic Security
For the Elastic Security 8.10.0 release information, refer to Elastic Security Solution Release Notes.
Enterprise Search
For the Elastic Enterprise Search 8.10.0 release information, refer to Elastic Enterprise Search Documentation Release notes.
  • Only enable secret storage once all fleet servers are above 8.10.0 (#163627).
  • Kafka integration API (#159110).
Machine Learning
  • AIOps: Adds/edits change point charts embeddable from the Dashboard app (#163694).
  • AIOps: Adds change point detection charts embeddable (#162796).
  • Adds ability to deploy trained models for data frame analytics jobs (#162537).
  • Adds map view for models in Trained Models and expands support for models in Analytics map (#162443).
  • Adds new Data comparison view (#161365).
  • Added ability to create a remote cluster with the API key based security model (#161836).
  • REST endpoint for swapping saved object references (#157665).
  • Maps tracks layer now uses group by time series logic (#159267).
  • SLO definition and computed values are now summarized periodically into a summary search index, allowing users to search by name, tags, SLO budgeting type or time window, and even by and sort by error budget consumed, error budget remaining, SLI value or status (#162665).
  • Adds indicator to support histogram fields (#161582).

For more information about the features introduced in 8.10.0, refer to What’s new in 8.10.

Enhancements and bug fixesedit

For detailed information about the 8.10.0 release, review the enhancements and bug fixes.


  • Fixes the event log data stream to use Data stream lifecycle instead of Index Lifecycle Management. If you had previously customized the Kibana event log ILM policy, you should now update the lifecycle of the event log data stream itself. (#163210).
  • KQL search bar for Rules page (#158106).
  • Lens function (#163872).
  • Adds several function implementations to the AI Assistant (#163764).
  • Feature controls (#163232).
  • Added improved JVM runtime metrics dashboard (#162460).
  • Move to new plugin, update design and use connectors (#162243).
  • Adding endpoint to upload android map files (#161252).
  • Navigate from the transaction details view into the Profiling (#159686).
  • Change badge color in options list (#161401).
  • Edit title, description, and tags from dashboard listing page (#161399).
  • Editing toolbar update (#154966).
  • Inline shard failures warnings (#161271).
  • Improve shard error message formatting (#161098).
Elastic Security
For the Elastic Security 8.10.0 release information, refer to Elastic Security Solution Release Notes.
Enterprise Search
For the Elastic Enterprise Search 8.10.0 release information, refer to Elastic Enterprise Search Documentation Release notes.
  • Adds support for runtime fields (#161129).
Lens & Visualizations
  • Migrate range slider to EuiDualRange and make styling consistent across all controls (#162651).
  • Introduce new duration formatter in Lens (#162246).
  • Create a filter with field:value when last value metric is used on a data table in Lens (#160509).
  • Adds tooltip for partition and heatmap filtering (#162716).
Machine Learning
  • Hides paging controls in anomaly swim lane if only one page is available (#163931).
  • Adds a throughput description in the Trained Models Deployment stats table (#163481).
  • Provides hints for empty fields in dropdown options in Anomaly detection & Transform creation wizards, Change point detection view (#163371).
  • AIOps: Adds dip support to log rate analysis in ML AIOps Labs (#163100).
  • AIOps: Improves table hovering for log rate analysis (#162941).
  • AIOps: Adds dip support for log rate analysis in observability alert details page (#162476).
  • Adds validation of field selected for log pattern analysis (#162319).
  • AIOps: Renames Explain Log Rate Spikes to Log Rate Analysis (#161764).
  • Adds new Data comparison view (#161365).
  • Adds test UI for text expansion models (#159150).
  • Adds update index mappings step to ML pipeline config workflow (#163723).
  • Adds multiple formats for geo_point fields and make geo conversion tools part of field_format/common/utils (#147272).
  • Support time series split for top hits per entity source (#161799).
  • Adds support for group by to SLO burn rate rule (#163434).
  • Applying consistent design to Histogram and Custom Metric forms (#162083).
  • Adds preview chart to custom metric indicator (#161597).
  • Support filters for good/total custom metrics (#161308).
  • Increase max size bytes default to 250mb (#161318).
  • Change the default value of session.idleTimeout from 8 hours to 3 days (#162313).
  • User roles displayed on the user profile page (#161375).
  • Implement private location run once (#162582).

Bug fixesedit

  • Fixes styling and port issue with new onboarding (#163922).
  • Fixes missing alert index issue (#163600).
  • Fixes trace waterfall loading logic to handle empty scenarios (#163397).
  • Fixes the action menu overlapping the Create custom link flyout (#162664).
  • Improve service groups error messages and validations (#162556).
  • Fixes throwing appropriate error when user is missing necessary permission (#162466).
  • Hide components when there is no support from agents (#161970).
  • Fixes link to onboarding page in the Observability Onboarding plugin (#161847).
  • Disables top navigation actions when cloning or overlay is showing (#162091).
  • Fixes document failing to load when the ID contains a slash (#160239).
  • Fixes NoData screen in alignment with Dashboard and Lends behavior (#160747).
Elastic Security
For the Elastic Security 8.10.0 release information, refer to Elastic Security Solution Release Notes.
Enterprise Search
For the Elastic Enterprise Search 8.10.0 release information, refer to Elastic Enterprise Search Documentation Release notes.
  • Only show agent dashboard links if there is more than one non-server agent and if the dashboards exist (#164469).
  • Exclude Synthetics from per-policy-outputs (#161949).
  • Fixing the path for hint templates for auto-discover (#161075).
Lens & Visualizations
  • Fixes params._interval conversion to Lens formula (#164150).
  • Fixes issues with field name that contains the : character in it in Lens (#163626).
  • Fixes other request merge behavior when empty string key is retrieved (#163187).
  • Fixes editing of multi values filters when adding a custom item (#161940).
  • Allow setting custom colors to be collapsed by slices pie’s multiple metrics in Lens (#160592).
  • Fixes data table sorting for keyword values in Lens (#160163).
  • Fixes override parameter when creating data views (#160953).
  • Amend lazy imports in logs_shared plugin (#164102).
Machine Learning
  • Fixes Trained models list crashes on browser refresh if not on page 1 (#164163).
  • Fixes query bar not switching from KQL to Lucene and vice versa in Anomaly explorer (#163625).
  • Data Frame Analytics creation wizard: ensures validation works correctly (#163446).
  • Fixes capabilities polling in manage page (#163399).
  • Fixes unhandled promise rejection from ML plugin (#163129).
  • AIOps: Uses Kibana’s http service instead of fetch and fixes throttling (#162335).
  • Uses model supplied mask token for testing trained models (#162168).
  • Fixes how a bulk request body with variables are processed in Console (#162745).
  • Improves a way of variable substitution and its documentation in Console (#162382).
  • Transforms: Reduces rerenders and multiple fetches of source index on transform wizard load (#160979).
  • Fixes Map layer preview blocks adding layer until all tiles are loaded (#161994).
  • Rewrite CPU usage rule to improve accuracy (#159351).
  • Fixes email connector rule URL (#162954).
  • Disable the View rule details option from the Alert Details' Actions list when the rule is deleted (#163183).
  • Fixes a bug where Kibana Reporting would not work in Elastic Docker without adding a special setting in kibana.yml to disable the Chromium sandbox. (#149080).
  • Fixes an issue where certain international characters would not appear correctly in the contents of a print-optimized PDF report of a dashboard (#161825).
  • Fixes auto-expand feature for failed step detail (#162747).