Release notes

Added manual horizontal resizing functionality to EuiComboBox component.

Image export in the graph browser now exports the correct size and produces a valid PNG image.

Resaving objects no longer triggers redundant mapping checks in Elasticsearch when the mappings have already been validated.

Fixed a regression that caused debug logging to consume excessive memory.

Fixed an issue where the image on a node would not scale when changing the size of the node.

Fixed an issue where excluded fields on multiple entities would be respected in only the first entity.

Fixed a bug that would make records-as-relations on the graph ignore excluded fields.

Fixed a bug where an error was thrown when undoing node expansions in the Graph Browser.

Fixed an issue where the Siren Investigate server would crash when handling malformed msearch queries. It now responds with a proper error message.

Modifying a saved object does not invalidate the entire cache; instead, it only removes the cached entry for that specific object type.

Newly discovered fields during fingerprinting are no longer automatically added to the enabled search terms in Siren Search, thereby avoiding any impact on its performance.

Added support for configuring the background color of labels on nodes in the Graph Browser. Also added support for background color for the bullet lists for nodes and groups.

Optimized the preliminary path check to improve the shortest path calculation performance.

Added a new toolbar option in the Graph Browser to control selection behavior after expanding nodes. More details can be found in 'Selection settings' in here.

Reduced fixed costs for the expansion process of nodes in the Graph Browser.

When saving a new graph, the name field is now empty by default and receives focus automatically. Additionally, pressing Enter will save the graph.

Reduced the time to perform saved object operations.

Introduced a new investigate.yml option investigate_access_control.disableExtraEsProxyAuth, to speed up requests to Elasticsearch on high-latency networks.

Improved Graph performance by minimizing redundant multifieldParentMapping and field sorting calculations.

Fixed an issue where the highlight style was not applied to bullet lists on nodes.

Fixed a bug where wrong counts were shown on nodes when selecting record as relation entries on graph sidebar.

Fixed a bug where clicking the Show all button in the global search popover had no effect.

Fixed an issue where it was not possible to horizontally scroll a combo box.

Fixed an issue where the node.exe executable was incomplete in the Windows platform bundle.

Fixed a bug where the New Results watcher would not consider time filter.

Fixed an issue where the response time of the elasticsearch proxy endpoint was extremely slow in certain cases.

Fixed an issue where the bottom panel did not reflect newly selected nodes following node expansion.

Fixed an issue that caused incorrect node highlighting when the selection was changed after node expansion.

Fixed a bug where the shortest path calculation failed between two EID nodes.

Fixed a bug where lenses were not applied correctly when navigating between the search app and the Graph Browser visualization.

Fixed an issue where saving a graph containing a textbox incorrectly triggered a migration.

Fixed a bug where saving a graph with more than 1,000 nodes caused the server process CPU usage to spike to 100%.

The shortest path implementation is optimized by ignoring all initial relations where the source documents don’t find any match.

The standard layout in the graph browser is improved to consider super nodes, label lengths, and bullet points.

The selection area in a graph is now limited by allowing the nodes to be selected by clicking only on the icon and edges to be selected by clicking only on the arrow.

Create and update requests for saved objects will now be faster by avoiding unnecessary redirects in the backend.

Fixed a bug where an error appeared in the console when editing a lens in the graph browser.

Fixed an issue where exporting data from a record table would fail if there were nested timestamps.

Fixed an issue where the aggregated relation icons on the edges were not moved to the background in the graph browser.

Fixed a bug where the nested object could cause issues when used as labels of the nodes in the graph browser.

Fixed an issue where the searchsource derived from isolated search sources behaved differently when called in different places in the application.

Fixed a bug where the New Results watcher would occasionally throw an internal server error.

Fixed a bug where EID fields with multiple values were not correctly accounted for in the shortest paths procedure.

Fixed an issue where partial date queries on Date dynamic filters with the 'Ignore Timezone' option enabled resulted in an error.

Added an API to refresh the index fields list. For more information, see Refresh Fields API.

Introduced new options for node highlighting in the Graph Browser. You can now:

Added search functionality to the graph. Users can now easily search for and add documents from within the graph.

Added map node visibility menu options.

In the graph browser, creating a local edge where one end is a group has now been disabled.

Removed showPinnnedNodeBadges option from graphbrowser.downloadGraphAsImage, graphbrowser.exportGraphToBlobURL api signatures. Pinned badges will always be hidden in the image.

Improved the performance of the graph browser nodes implementation.

Improved the performance of nodes, edges, groups, and text boxes.

Simplified Investigate plugin installation: You no longer need to use the file:/// prefix when installing Investigate plugins via a file path.

Improved the brush selector to reduce stuttering when starting a drag operation.

Reduced fixed costs of running expansions and counts.

Improved group interactions with existing nodes to minimize unnecessary movements. Groups now respect the Node Position Settings, ensuring more predictable behavior.

Optimized dataspace deletion by reducing the number of queried indices when removing documents from shared tables.

Updated the graph hierarchy layout button to a dual button. Standard hierarchy can now be triggered directly from the toolbar.

Reduced the likelihood that shared graphs will trigger migrations.

When exporting a graph as an image, pinned badges and certain count badges will no longer appear in the exported image. Additionally labels for nodes, edges, and combos will now always be included in exported images.

Improved zooming when adding a single node to a graph.

Added notifications about the progress of CSV exports.

Graph titles are now displayed in browser tabs.

Fixed an issue that caused internal server errors when making Global Search or Siren Search requests in quick succession.

Fixed an issue where undoing the deletion of a graph text box would result in a red error message.

Fixed an issue where the graph layout did not account for newly pinned hidden nodes. The Pin button on the toolbar is now disabled if the selected node is hidden by the timebar.

Fixed an issue where executing complex joins could sometimes create anomalous self-relations on the graph.

Fixed an issue where the order of dynamic filters in Siren Search was not preserved according to their mappings.

Fixed an issue where the equivalent records popover was appearing behind other elements due to a low z-index. It now correctly displays on top.

Fixed an issue where the selection table in the graph browser would not display empty fields. Now it displays all the fields associated with the entity.

Fixed an issue where a request to Elasticsearch failed when creating visualizations using Moving Function Aggregations > Standard Deviation.

Fixed a rare issue where the in-memory state for the expansion in the graph browser could be unexpectedly overwritten by a lens.

Fixed an issue where adding a record to the graph from the Discover and Data model pages would not work.

Fixed an issue that prevented the deletion of a dataspace containing a private table with child tables.

Fixed an issue where some toolbar buttons remained disabled after adding nodes to an empty graph.

Fixed an issue where editing a group edge label caused the label to disappear.

Fixed an issue where expanding from a nested field in the Graph Browser was not possible.

Fixed an issue where child searches could not be saved when revisions were enabled.

Fixed an issue where CSV exports containing incorrectly formatted dates would fail without providing any notifications.

Fixed an issue where the selection table in the graph browser would not show the values of nested attributes.

Fixed an issue where documents containing a field with an array of null values could trigger an invalid query in the graph browser.

Fixed an issue where the mapbox-gl CSS was not loaded properly which caused css errors and performance issues for certain complex vector layers on the map.

Fixed an issue where groups created in the Graph Browser while in map mode were assigned incorrect sizes.

Fixed an issue where switching from a dashboard to a graph with map mode enabled could result in the graph content not loading correctly.

Fixed an issue where the server could crash if imageProxy was enabled and the upstream server responded without a Content-Type header.