Release notes

15.0.0

New features

  • Graph Browser can now be configured to point to an instance of the Enhanced Coordinate Map. When configured, it renders all pre-configured layers in map view mode. For more details, see configuring map view.

  • Records-as-relations now support relations to EIDs as incoming or outgoing relations. Upon adding a document from an entity type that is the middle entity of a record-as-relation, it will be added as an edge if all the relations contained in the record-as-relation are hidden relations.

  • Graph edges between nodes can now be grouped into a single-edge or per-direction group. This helps reduce visual clutter in the graph and makes it easier to analyze relationships between nodes. Grouping edges in the graph

  • Added an upload center to Siren Investigate that allows users with limited access privileges to add data. These uploads are stored in isolated data projects. For more information, see Upload center.

Breaking changes

  • Dropped support for Elasticsearch versions earlier than 7.17.9. For more information, see version compatibility matrix.

  • The Elasticsearch client has been partly migrated to a more recent version.
    The getClusters() API no longer accepts a parameter (it previously accepted admin or data).
    Update any custom plugins to the following pattern:

    const cluster = server.plugins.elasticsearch.getCluster();
const adminClient = cluster.getAdminClient();
const resp = await adminClient.get({ index, id})

    OR

    const dataClient = cluster.getDataClient();
const resp = await dataClient.get(request, { index, id})

    The new clients signatures match the official Elasticsearch client documentation. cluster.callWithInternalUser and cluster.callWithRequest are now deprecated and will be removed in the near future.

  • Removed legacy migrations for performance reasons. Direct upgrades to 15.0.0 from significantly earlier versions are no longer supported. Recommended path: first upgrade to the latest 14.9.x, then upgrade to 15.0.0.

  • Changed the default highlighter from unified to plain to improve performance. Users wishing to continue using the unified highlighter can set the default:highlight-type setting in Advanced Settings. For more information on the highlighter types, see the highlighting section of the Elasticsearch documentation.

  • In this release, we have completely removed support for the legacy tile_map visualization.
    This visualization type was deprecated some time ago. If you still have tile_map visualizations in your system, please migrate them to the Enhanced Coordinate Map visualization before upgrading.

  • Graph Browser contextual scripts have been removed. The contextual menu of the Graph browser no longer supports scripts of type contextual. This change was made to simplify the Graph browser’s functionality and improve performance. If you were using these scripts, you will need to reimplement them using SirenAPI scripts. Existing contextual scripts will not be deleted, but they will no longer be executed.

  • Removed deprecated Graph Browser siren APIs:

    • addNode, please use addNodes instead

    • gForceLayout, please use standardLayout instead

    • expandNode, please use expand instead

    • organicLayout, was not working

    • sequentialLayout, was not working

    • structuralLayout, was not working

    • tweakLayout, was not working

  • The data import wizard will now read Excel date/time cells exactly as they appear in a spreadsheet (after their date format is applied). If you used saved transformers with Excel files, please use the new "Date formatting" option in the ellipsis button (...) menu to recognize the format and assign the time zone for your date columns, then save the transformers again.

  • Search Guard Classic is not supported on Elasticsearch 8. New installations or upgrades from Elasticsearch 7.x must use either Elastic Security or Search Guard FLX.
    See Search Guard FLX or Elastic Stack security overview for more information.

Improvements

  • Made the width of the icon picker more consistent across Investigate.

  • Reworked how formatted fields are handled in graphs to reduce the saved object size.

  • Performance: Removed an unnecessary fixed cost when updating the selection table.

  • Improved the layout of the records-as-relation modal.

  • The graph timebar now has a new dots visualization to show time data more granularly. For more details, see here Timebar

  • Optimized collections and dashboards fetching in the search app, resulting in faster initial load times.

Security fixes

Bug fixes

  • Fixed an issue where creating a timelion-sheet object caused an error.

  • Fixed an issue where selecting an icon created an EID without form submission.

  • Fixed an issue in Graph Browser where cards could appear blank if the panel was opened after a selection change.

  • Fixed an issue where the Select all checkbox in the relations list on the Graph Browser was not correctly checked.

  • Fixed an issue where the cloning of a very large dataspace could fail.

  • Fixed an issue where hidden nodes were incorrectly expanded.

  • Fixed an issue where an internal server error was thrown when deleting the icon pack.

  • Fixed an issue in the graph selection table so columns now sort correctly based on their data type.

  • Fixed an issue where node counts were not updated correctly after undo/redo operations.