Advanced policy opt-out for scan-on-event#218354
Merged
gabriellandau merged 4 commits intoelastic:mainfrom Apr 17, 2025
Merged
Conversation
gabriellandau
added
release_note:enhancement
Team:Defend Workflows
Contributor
|
Pinging @elastic/security-defend-workflows (Team:Defend Workflows) |
szwarckonrad
approved these changes
Apr 16, 2025
Contributor
szwarckonrad
left a comment
szwarckonrad
left a comment
There was a problem hiding this comment.
Consider removing double spaces before Default ;)
...ty/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
Outdated
Show resolved
Hide resolved
...ty/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
Outdated
Show resolved
Hide resolved
...ty/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
Outdated
Show resolved
Hide resolved
...ty/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
Outdated
Show resolved
Hide resolved
...ty/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
Outdated
Show resolved
Hide resolved
tomsonpl
approved these changes
Apr 16, 2025
Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
Contributor
Author
|
Thanks @szwarckonrad @tomsonpl |
Contributor
💛 Build succeeded, but was flaky
Failed CI StepsMetrics [docs]Async chunks
History
|
Contributor
|
Starting backport for target branches: 8.17, 8.18, 9.0 https://github.com/elastic/kibana/actions/runs/14522860002 |
kibanamachine
pushed a commit
to kibanamachine/kibana
that referenced
this pull request
Apr 17, 2025
## Summary
Allow users to opt out of scan-on-event to help troubleshoot and resolve
performance issues.
## Release note
{elastic-defend} users can now opt out of event-driven Memory Protection
scanning via advanced policy.
### Checklist
Check the PR satisfies following conditions.
Reviewers should verify this PR satisfies this list as well.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
---------
Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
(cherry picked from commit 906c897)
kibanamachine
pushed a commit
to kibanamachine/kibana
that referenced
this pull request
Apr 17, 2025
## Summary
Allow users to opt out of scan-on-event to help troubleshoot and resolve
performance issues.
## Release note
{elastic-defend} users can now opt out of event-driven Memory Protection
scanning via advanced policy.
### Checklist
Check the PR satisfies following conditions.
Reviewers should verify this PR satisfies this list as well.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
---------
Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
(cherry picked from commit 906c897)
kibanamachine
pushed a commit
to kibanamachine/kibana
that referenced
this pull request
Apr 17, 2025
## Summary
Allow users to opt out of scan-on-event to help troubleshoot and resolve
performance issues.
## Release note
{elastic-defend} users can now opt out of event-driven Memory Protection
scanning via advanced policy.
### Checklist
Check the PR satisfies following conditions.
Reviewers should verify this PR satisfies this list as well.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
---------
Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
(cherry picked from commit 906c897)
Contributor
💚 All backports created successfully
Note: Successful backport PRs will be merged automatically after passing CI. Questions ?Please refer to the Backport tool documentation |
kibanamachine
added
the
backport missing
Contributor
|
Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync. |
kibanamachine
added a commit
that referenced
this pull request
Apr 21, 2025
# Backport This will backport the following commits from `main` to `9.0`: - [Advanced policy opt-out for scan-on-event (#218354)](#218354) <!--- Backport version: 9.6.6 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Gabriel Landau","email":"42078554+gabriellandau@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-17T19:00:15Z","message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","Team:Defend Workflows","backport:version","v9.1.0","v8.18.1","v9.0.1","v8.17.6"],"title":"Advanced policy opt-out for scan-on-event","number":218354,"url":"https://github.com/elastic/kibana/pull/218354","mergeCommit":{"message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","9.0","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218354","number":218354,"mergeCommit":{"message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d"}},{"branch":"8.18","label":"v8.18.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.0","label":"v9.0.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Gabriel Landau <42078554+gabriellandau@users.noreply.github.com>
kibanamachine
added a commit
that referenced
this pull request
Apr 21, 2025
# Backport This will backport the following commits from `main` to `8.17`: - [Advanced policy opt-out for scan-on-event (#218354)](#218354) <!--- Backport version: 9.6.6 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Gabriel Landau","email":"42078554+gabriellandau@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-17T19:00:15Z","message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","Team:Defend Workflows","backport:version","v9.1.0","v8.18.1","v9.0.1","v8.17.6"],"title":"Advanced policy opt-out for scan-on-event","number":218354,"url":"https://github.com/elastic/kibana/pull/218354","mergeCommit":{"message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","9.0","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218354","number":218354,"mergeCommit":{"message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d"}},{"branch":"8.18","label":"v8.18.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.0","label":"v9.0.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Gabriel Landau <42078554+gabriellandau@users.noreply.github.com>
kibanamachine
added a commit
that referenced
this pull request
Apr 21, 2025
# Backport This will backport the following commits from `main` to `8.18`: - [Advanced policy opt-out for scan-on-event (#218354)](#218354) <!--- Backport version: 9.6.6 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Gabriel Landau","email":"42078554+gabriellandau@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-04-17T19:00:15Z","message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:enhancement","Team:Defend Workflows","backport:version","v9.1.0","v8.18.1","v9.0.1","v8.17.6"],"title":"Advanced policy opt-out for scan-on-event","number":218354,"url":"https://github.com/elastic/kibana/pull/218354","mergeCommit":{"message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d"}},"sourceBranch":"main","suggestedTargetBranches":["8.18","9.0","8.17"],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218354","number":218354,"mergeCommit":{"message":"Advanced policy opt-out for scan-on-event (#218354)\n\n## Summary\n\nAllow users to opt out of scan-on-event to help troubleshoot and resolve\nperformance issues.\n\n## Release note\n\n{elastic-defend} users can now opt out of event-driven Memory Protection\nscanning via advanced policy.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [x] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [x] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n\n---------\n\nCo-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>","sha":"906c8978e7b0a2e9e503bc10a758d3b6a03f237d"}},{"branch":"8.18","label":"v8.18.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.0","label":"v9.0.1","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.17","label":"v8.17.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Gabriel Landau <42078554+gabriellandau@users.noreply.github.com>
kibanamachine
removed
the
backport missing
davismcphee
pushed a commit
to davismcphee/kibana
that referenced
this pull request
Apr 22, 2025
## Summary
Allow users to opt out of scan-on-event to help troubleshoot and resolve
performance issues.
## Release note
{elastic-defend} users can now opt out of event-driven Memory Protection
scanning via advanced policy.
### Checklist
Check the PR satisfies following conditions.
Reviewers should verify this PR satisfies this list as well.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
---------
Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
akowalska622
pushed a commit
to akowalska622/kibana
that referenced
this pull request
May 29, 2025
## Summary
Allow users to opt out of scan-on-event to help troubleshoot and resolve
performance issues.
## Release note
{elastic-defend} users can now opt out of event-driven Memory Protection
scanning via advanced policy.
### Checklist
Check the PR satisfies following conditions.
Reviewers should verify this PR satisfies this list as well.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
---------
Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
ferullo
added a commit
to ferullo/kibana
that referenced
this pull request
Sep 30, 2025
…d have been previously backported
ashokaditya
pushed a commit
that referenced
this pull request
Oct 1, 2025
) # Note: Something strange happened in the auto backport script. It pulled in #218354 which I removed in commit f78efcb . I do not understand why that other PR was pulled in originally. I suspect it actually ought to be in 8.19 but since this is a backport of #236917 I removed those options. # Backport This will backport the following commits from `main` to `8.19`: - [Advanced option for orphaned agent remediation (#236917)](#236917) <!--- Backport version: 10.0.2 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport) <!--BACKPORT [{"author":{"name":"Leszek Kubik","email":"39905449+intxgo@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-09-30T21:01:45Z","message":"Advanced option for orphaned agent remediation (#236917)\n\n## Summary\n\nAdds an advanced option to enable or disable orphaned state remediation.\n\nWhen Elastic Endpoint detects orphaned state is may attempt to remediate\nit by starting Elastic Agent service.\n\n## Release note\n\nAdds an advanced option to enable or disable orphaned state remediation.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...","sha":"52aaa036615455bb217904659b1d5f30d9d944de","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:version","v9.2.0","v8.18.8","v8.19.5","v9.0.8","v9.1.5"],"title":"Advanced option for orphaned agent remediation","number":236917,"url":"https://github.com/elastic/kibana/pull/236917","mergeCommit":{"message":"Advanced option for orphaned agent remediation (#236917)\n\n## Summary\n\nAdds an advanced option to enable or disable orphaned state remediation.\n\nWhen Elastic Endpoint detects orphaned state is may attempt to remediate\nit by starting Elastic Agent service.\n\n## Release note\n\nAdds an advanced option to enable or disable orphaned state remediation.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...","sha":"52aaa036615455bb217904659b1d5f30d9d944de"}},"sourceBranch":"main","suggestedTargetBranches":["8.19"],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/236917","number":236917,"mergeCommit":{"message":"Advanced option for orphaned agent remediation (#236917)\n\n## Summary\n\nAdds an advanced option to enable or disable orphaned state remediation.\n\nWhen Elastic Endpoint detects orphaned state is may attempt to remediate\nit by starting Elastic Agent service.\n\n## Release note\n\nAdds an advanced option to enable or disable orphaned state remediation.\n\n### Checklist\n\nCheck the PR satisfies following conditions. \n\nReviewers should verify this PR satisfies this list as well.\n\n- [ ] Any text added follows [EUI's writing\nguidelines](https://elastic.github.io/eui/#/guidelines/writing), uses\nsentence case text and includes [i18n\nsupport](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)\n- [ ]\n[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)\nwas added for features that require explanation or tutorials\n- [ ] [Unit or functional\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\nwere updated or added to match the most common scenarios\n- [ ] If a plugin configuration key changed, check if it needs to be\nallowlisted in the cloud and added to the [docker\nlist](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)\n- [ ] This was checked for breaking HTTP API changes, and any breaking\nchanges have been approved by the breaking-change committee. The\n`release_note:breaking` label should be applied in these situations.\n- [ ] [Flaky Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was\nused on any tests changed\n- [ ] The PR description includes the appropriate Release Notes section,\nand the correct `release_note:*` label is applied per the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n- [ ] Review the [backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand apply applicable `backport:*` labels.\n\n### Identify risks\n\nDoes this PR introduce any risks? For example, consider risks like hard\nto test bugs, performance regression, potential of data loss.\n\nDescribe the risk, its severity, and mitigation for each identified\nrisk. Invite stakeholders and evaluate how to proceed before merging.\n\n- [ ] [See some risk\nexamples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)\n- [ ] ...","sha":"52aaa036615455bb217904659b1d5f30d9d944de"}},{"branch":"8.18","label":"v8.18.8","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/237040","number":237040,"state":"OPEN"},{"branch":"8.19","label":"v8.19.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.0","label":"v9.0.8","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/237041","number":237041,"state":"OPEN"},{"branch":"9.1","label":"v9.1.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/237042","number":237042,"state":"OPEN"}]}] BACKPORT--> --------- Co-authored-by: Leszek Kubik <39905449+intxgo@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Allow users to opt out of scan-on-event to help troubleshoot and resolve performance issues.
Release note
{elastic-defend} users can now opt out of event-driven Memory Protection scanning via advanced policy.
Checklist
Check the PR satisfies following conditions.
Reviewers should verify this PR satisfies this list as well.
release_note:*label is applied per the guidelines