Merge branch 'main' into 192360-in-table-search

.eslintrc.js

@@ -2030,7 +2030,9 @@ module.exports = {
         'src/cli_setup/**', // is importing "@kbn/interactive-setup-plugin" (platform/private)
         'src/dev/build/tasks/install_chromium.ts', // is importing "@kbn/screenshotting-plugin" (platform/private)
 
-        // @kbn/osquery-plugin could be categorised as Security, but @kbn/infra-plugin (observability) depends on it!
+        // FIXME @kbn/osquery-plugin has dependencies on:
+        // - @kbn/timelines-plugin         (security/private) https://github.com/elastic/kibana/blob/main/x-pack/platform/plugins/shared/osquery/public/types.ts#L20
+        // - @kbn/security-solution-plugin (security/private) this one is “less critical” as it is cypress depending on cypress
         'x-pack/platform/plugins/shared/osquery/**',
 
         // For now, we keep the exception to let tests depend on anythying.

dev_docs/contributing/code_walkthrough.mdx

@@ -52,10 +52,6 @@ We used to write RFCs in `md` format and keep them in the repository, but we hav
 
 Contains our two license header texts, one for the Elastic license and one for the Elastic+SSPL license. All code files inside x-pack should have the Elastic license text at the top, all code files outside x-pack should contain the other. If you have your environment set up to auto-fix on save, eslint should take care of adding it for you. If you don't have it, ci will fail. Can be ignored for the most part, this rarely changes.
 
-## [packages](https://github.com/elastic/kibana/tree/main/packages)
-
-The packages folder contains a mixture of build-time related code (like the [code needed to build the api docs](https://github.com/elastic/kibana/tree/main/packages/kbn-docs-utils)), as well as static code that some plugins rely on (like the [kbn-monaco package](https://github.com/elastic/kibana/tree/main/src/platform/packages/shared/kbn-monaco)). <DocLink id="kibPlatformIntro" section="1000-foot-view" text="This document"/> covers how packages differ from plugins.
-
 ## [plugins](https://github.com/elastic/kibana/tree/main/plugins)
 
 This is an empty folder in GitHub. It's where third party developers should put their plugin folders. Internal developers can ignore this folder.
@@ -83,13 +79,15 @@ This code primarily belongs to the Core team and contains the plugin infrastruct
 
 ### [src/dev](https://github.com/elastic/kibana/tree/main/src/dev)
 
-Maintained by the Operations team, this code contains build and development tooling related code. This folder existed before `packages`, so contains mostly older code that hasn't been migrated to packages. Prefer creating a `package` if possible. Can be ignored for the most part if you are not on the Ops team. 
+Maintained by the Operations team, this code contains build and development tooling related code. This folder existed before `packages`, so contains mostly older code that hasn't been migrated to packages. Prefer creating a `package` if possible. Can be ignored for the most part if you are not on the Ops team.
+
+### [src/platform](https://github.com/elastic/kibana/tree/main/src/platform)
 
-### [src/plugins](https://github.com/elastic/kibana/tree/main/src/plugins)
+Contains the Basic-licensed code that is common to all Kibana solutions. The code is organised in modules, that can be either [plugins](https://github.com/elastic/kibana/tree/main/src/platform/plugins) or [packages](https://github.com/elastic/kibana/tree/main/src/platform/packages). <DocLink id="kibPlatformIntro" section="1000-foot-view" text="This document"/> covers how packages differ from plugins.
 
-Contains all of our Basic-licensed plugins. Most folders in this directory will contain `README.md` files explaining what they do. If there are none, you can look at the `owner.gitHub` field inside all `kibana.json`s that will tell you which team to get in touch with for questions.
+### [src/platform/plugins](https://github.com/elastic/kibana/tree/main/src/platform/plugins)
 
-Note that as plugins can be nested, each folder in this directory may contain multiple plugins.
+Contains Basic-licensed plugins that are common to all Kibana solutions. They are organized according to their _visibility_: Thy can be [shared](https://github.com/elastic/kibana/tree/main/src/platform/plugins/shared) or [private](https://github.com/elastic/kibana/tree/main/src/platform/plugins/private) (aka not accessible from solutions).
 
 ## [test](https://github.com/elastic/kibana/tree/main/test)
 
@@ -99,13 +97,18 @@ Contains functional tests and related FTR (functional test runner) code for the
 
 Maintained by Ops and Core, this contains global typings for dependencies that do not provide their own types, or don't have types available via [DefinitelyTyped](https://definitelytyped.org). This directory is intended to be minimal; types should only be added here as a last resort.
 
-## [vars](https://github.com/elastic/kibana/tree/main/vars)
+## [x-pack](https://github.com/elastic/kibana/tree/main/x-pack)
 
-A bunch of groovy scripts maintained by the Operations team.
+Contains all code and infrasturcture that powers our gold+ (non-basic) features that are provided under a more restrictive license. The code is organized in the following subfolders:
 
-## [x-pack](https://github.com/elastic/kibana/tree/main/x-pack)
+## [x-pack/platform](https://github.com/elastic/kibana/tree/main/x-pack/platform)
+
+Contains all of the gold+ (non-basic) modules that are common to all Kibana solutions. Like the `src/platform` code, it is organized in modules that can be either plugins or packages, and in turn, these plugins are organized according to their visibility.
 
-Contains all code and infrasturcture that powers our gold+ (non-basic) features that are provided under a more restrictive license.
+## [x-pack/solutions](https://github.com/elastic/kibana/tree/main/x-pack/solutions)
+
+Contains all of the code that is specific to each Kibana solution. At the moment, we have a folder for [observability](https://github.com/elastic/kibana/tree/main/x-pack/solutions/observability), another for [security](https://github.com/elastic/kibana/tree/main/x-pack/solutions/security), and another for [search](https://github.com/elastic/kibana/tree/main/x-pack/solutions/search). These folders contain the modules that belong to each solution, and these modules are also categorised as plugins or packages.
+Unlike the `src/platform` and the `x-pack/platform` code, the solution-specific modules are `private` by definition, aka they cannot be accessed from platform nor from other solutions.
 
 ### [x-pack/build_chromium](https://github.com/elastic/kibana/tree/main/x-pack/build_chromium)
 
@@ -130,7 +133,3 @@ Maintained by the Ops team, this folder contains some scripts for running x-pack
 ### [x-pack/test](https://github.com/elastic/kibana/tree/main/x-pack/test)
 
 Functional tests for our gold+ features.
-
-
-
-

oas_docs/output/kibana.serverless.yaml

@@ -9789,6 +9789,14 @@ paths:
             schema:
               type: object
               properties:
+                delay:
+                  default: 1m
+                  description: The delay before the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
+                docsPerSecond:
+                  description: The number of documents per second to process.
+                  type: integer
                 enrichPolicyExecutionInterval:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_Interval'
                 entityTypes:
@@ -9801,11 +9809,21 @@ paths:
                   type: integer
                 filter:
                   type: string
+                frequency:
+                  default: 1m
+                  description: The frequency at which the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
                 indexPattern:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_IndexPattern'
                 lookbackPeriod:
                   default: 24h
-                  description: The lookback period for the entity store
+                  description: The amount of time the transform looks back to calculate the aggregations.
+                  pattern: '[smdh]$'
+                  type: string
+                timeout:
+                  default: 180s
+                  description: The timeout for initializing the aggregating transform.
                   pattern: '[smdh]$'
                   type: string
         description: Schema for the entity store initialization
@@ -9915,6 +9933,14 @@ paths:
             schema:
               type: object
               properties:
+                delay:
+                  default: 1m
+                  description: The delay before the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
+                docsPerSecond:
+                  description: The number of documents per second to process.
+                  type: integer
                 enrichPolicyExecutionInterval:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_Interval'
                 fieldHistoryLength:
@@ -9923,8 +9949,23 @@ paths:
                   type: integer
                 filter:
                   type: string
+                frequency:
+                  default: 1m
+                  description: The frequency at which the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
                 indexPattern:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_IndexPattern'
+                lookbackPeriod:
+                  default: 24h
+                  description: The amount of time the transform looks back to calculate the aggregations.
+                  pattern: '[smdh]$'
+                  type: string
+                timeout:
+                  default: 180s
+                  description: The timeout for initializing the aggregating transform.
+                  pattern: '[smdh]$'
+                  type: string
         description: Schema for the engine initialization
         required: true
       responses:
@@ -51361,12 +51402,22 @@ components:
     Security_Entity_Analytics_API_EngineDescriptor:
       type: object
       properties:
+        delay:
+          default: 1m
+          pattern: '[smdh]$'
+          type: string
+        docsPerSecond:
+          type: integer
         error:
           type: object
         fieldHistoryLength:
           type: integer
         filter:
           type: string
+        frequency:
+          default: 1m
+          pattern: '[smdh]$'
+          type: string
         indexPattern:
           $ref: '#/components/schemas/Security_Entity_Analytics_API_IndexPattern'
         lookbackPeriod:
@@ -51375,6 +51426,10 @@ components:
           type: string
         status:
           $ref: '#/components/schemas/Security_Entity_Analytics_API_EngineStatus'
+        timeout:
+          default: 180s
+          pattern: '[smdh]$'
+          type: string
         type:
           $ref: '#/components/schemas/Security_Entity_Analytics_API_EntityType'
       required:

oas_docs/output/kibana.yaml

@@ -11879,6 +11879,14 @@ paths:
             schema:
               type: object
               properties:
+                delay:
+                  default: 1m
+                  description: The delay before the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
+                docsPerSecond:
+                  description: The number of documents per second to process.
+                  type: integer
                 enrichPolicyExecutionInterval:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_Interval'
                 entityTypes:
@@ -11891,11 +11899,21 @@ paths:
                   type: integer
                 filter:
                   type: string
+                frequency:
+                  default: 1m
+                  description: The frequency at which the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
                 indexPattern:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_IndexPattern'
                 lookbackPeriod:
                   default: 24h
-                  description: The lookback period for the entity store
+                  description: The amount of time the transform looks back to calculate the aggregations.
+                  pattern: '[smdh]$'
+                  type: string
+                timeout:
+                  default: 180s
+                  description: The timeout for initializing the aggregating transform.
                   pattern: '[smdh]$'
                   type: string
         description: Schema for the entity store initialization
@@ -12001,6 +12019,14 @@ paths:
             schema:
               type: object
               properties:
+                delay:
+                  default: 1m
+                  description: The delay before the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
+                docsPerSecond:
+                  description: The number of documents per second to process.
+                  type: integer
                 enrichPolicyExecutionInterval:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_Interval'
                 fieldHistoryLength:
@@ -12009,8 +12035,23 @@ paths:
                   type: integer
                 filter:
                   type: string
+                frequency:
+                  default: 1m
+                  description: The frequency at which the transform will run.
+                  pattern: '[smdh]$'
+                  type: string
                 indexPattern:
                   $ref: '#/components/schemas/Security_Entity_Analytics_API_IndexPattern'
+                lookbackPeriod:
+                  default: 24h
+                  description: The amount of time the transform looks back to calculate the aggregations.
+                  pattern: '[smdh]$'
+                  type: string
+                timeout:
+                  default: 180s
+                  description: The timeout for initializing the aggregating transform.
+                  pattern: '[smdh]$'
+                  type: string
         description: Schema for the engine initialization
         required: true
       responses:
@@ -58051,12 +58092,22 @@ components:
     Security_Entity_Analytics_API_EngineDescriptor:
       type: object
       properties:
+        delay:
+          default: 1m
+          pattern: '[smdh]$'
+          type: string
+        docsPerSecond:
+          type: integer
         error:
           type: object
         fieldHistoryLength:
           type: integer
         filter:
           type: string
+        frequency:
+          default: 1m
+          pattern: '[smdh]$'
+          type: string
         indexPattern:
           $ref: '#/components/schemas/Security_Entity_Analytics_API_IndexPattern'
         lookbackPeriod:
@@ -58065,6 +58116,10 @@ components:
           type: string
         status:
           $ref: '#/components/schemas/Security_Entity_Analytics_API_EngineStatus'
+        timeout:
+          default: 180s
+          pattern: '[smdh]$'
+          type: string
         type:
           $ref: '#/components/schemas/Security_Entity_Analytics_API_EntityType'
       required:

package.json

@@ -111,7 +111,7 @@
     "@elastic/apm-rum": "^5.16.3",
     "@elastic/apm-rum-core": "^5.22.1",
     "@elastic/apm-rum-react": "^2.0.5",
-    "@elastic/charts": "69.0.0",
+    "@elastic/charts": "69.1.0",
     "@elastic/datemath": "5.0.3",
     "@elastic/ebt": "^1.1.1",
     "@elastic/ecs": "^8.11.5",

src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts

@@ -97,7 +97,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
         "enterprise_search_telemetry": "9ac912e1417fc8681e0cd383775382117c9e3d3d",
         "entity-definition": "1c6bff35c423d5dc5650bc806cf2899e4706a0bc",
         "entity-discovery-api-key": "c267a65c69171d1804362155c1378365f5acef88",
-        "entity-engine-status": "8cb7dcb13f5e2ea8f2e08dd4af72c110e2051120",
+        "entity-engine-status": "e2de87d84e9f1f72726eb28b7e670ff8021b5eb4",
         "epm-packages": "8042d4a1522f6c4e6f5486e791b3ffe3a22f88fd",
         "epm-packages-assets": "7a3e58efd9a14191d0d1a00b8aaed30a145fd0b1",
         "event-annotation-group": "715ba867d8c68f3c9438052210ea1c30a9362582",

src/platform/plugins/shared/dashboard/public/dashboard_app/top_nav/add_panel_button/components/add_panel_flyout.tsx

@@ -104,11 +104,11 @@ export function AddPanelFlyout({ dashboardApi }: { dashboardApi: DashboardApi })
                 position: 'sticky',
                 top: euiTheme.size.m,
                 zIndex: 1,
-                boxShadow: `0 -${euiTheme.size.m} 0 4px ${euiTheme.colors.emptyShade}`,
+                boxShadow: `0 -${euiTheme.size.m} 0 4px ${euiTheme.colors.backgroundBasePlain}`,
               }}
             >
               <EuiForm component="form" fullWidth>
-                <EuiFormRow css={{ backgroundColor: euiTheme.colors.emptyShade }}>
+                <EuiFormRow css={{ backgroundColor: euiTheme.colors.backgroundBasePlain }}>
                   <EuiFieldSearch
                     compressed
                     autoFocus

src/platform/plugins/shared/presentation_util/public/components/dashboard_picker/dashboard_picker.tsx

@@ -123,7 +123,9 @@ export function DashboardPicker({ isDisabled, onChange, idsToOmit }: DashboardPi
             <EuiText
               size="s"
               css={css`
-                color: ${selectedDashboard ? euiTheme.colors.text : euiTheme.colors.disabledText};
+                color: ${selectedDashboard
+                  ? euiTheme.colors.textParagraph
+                  : euiTheme.colors.textDisabled};
               `}
             >
               {selectedDashboard?.label ??

x-pack/platform/packages/shared/kbn-entities-schema/src/schema/entity_definition.ts

@@ -38,6 +38,8 @@ export const entityDefinitionSchema = z.object({
         syncField: z.optional(z.string()),
         syncDelay: z.optional(durationSchema),
         frequency: z.optional(durationSchema),
+        timeout: z.optional(durationSchema),
+        docsPerSecond: z.optional(z.number()),
       })
     ),
   }),

x-pack/platform/plugins/private/translations/translations/fr-FR.json

@@ -9765,17 +9765,17 @@
     "xpack.aiAssistant.chatTimeline.messages.system.label": "Système",
     "xpack.aiAssistant.chatTimeline.messages.user.label": "Vous",
     "xpack.aiAssistant.checkingKbAvailability": "Vérification de la disponibilité de la base de connaissances",
-    "xpack.aiAssistant.conversationList.deleteConversationIconLabel": "Supprimer",
-    "xpack.aiAssistant.conversationList.errorMessage": "Échec de chargement",
-    "xpack.aiAssistant.conversationList.noConversations": "Aucune conversation",
-    "xpack.aiAssistant.conversationList.dateGroupTitle.today": "Aujourd'hui",
-    "xpack.aiAssistant.conversationList.dateGroupTitle.yesterday": "Hier",
-    "xpack.aiAssistant.conversationList.dateGroupTitle.thisWeek": "Cette semaine",
+    "xpack.aiAssistant.conversationList.dateGroupTitle.lastMonth": "Le mois dernier",
     "xpack.aiAssistant.conversationList.dateGroupTitle.lastWeek": "La semaine dernière",
+    "xpack.aiAssistant.conversationList.dateGroupTitle.older": "Plus ancien",
     "xpack.aiAssistant.conversationList.dateGroupTitle.thisMonth": "Ce mois-ci",
-    "xpack.aiAssistant.conversationList.dateGroupTitle.lastMonth": "Le mois dernier",
+    "xpack.aiAssistant.conversationList.dateGroupTitle.thisWeek": "Cette semaine",
     "xpack.aiAssistant.conversationList.dateGroupTitle.thisYear": "Cette année",
-    "xpack.aiAssistant.conversationList.dateGroupTitle.older": "Plus ancien",
+    "xpack.aiAssistant.conversationList.dateGroupTitle.today": "Aujourd'hui",
+    "xpack.aiAssistant.conversationList.dateGroupTitle.yesterday": "Hier",
+    "xpack.aiAssistant.conversationList.deleteConversationIconLabel": "Supprimer",
+    "xpack.aiAssistant.conversationList.errorMessage": "Échec de chargement",
+    "xpack.aiAssistant.conversationList.noConversations": "Aucune conversation",
     "xpack.aiAssistant.conversationStartTitle": "a démarré une conversation",
     "xpack.aiAssistant.couldNotFindConversationContent": "Impossible de trouver une conversation avec l'ID {conversationId}. Assurez-vous que la conversation existe et que vous y avez accès.",
     "xpack.aiAssistant.couldNotFindConversationTitle": "Conversation introuvable",