Commit Graph

159 Commits

Author SHA1 Message Date
Lisa Cawley 4d1abd1494
[DOCS] Clarifies default ML and transform node settings (#67671) 2021-01-19 14:19:37 -08:00
Albert Zaharovits e05d83f7a8
DOC Audit security config change (#66839)
Audit log doc changes about:
* the new security_config_change event type (main scope of this PR)
* remove mentions of the 6.5 audit format changes (the JSON format)
* mention the new archiving and rotation by size (in v8 only)
* mention the request.id event attribute used to correlate audit events
* mention that audit is only available on certain subscription levels
* add an exhaustive audit event example list (because schema became too complex to explain in words 😢 given the new security_config_change events)
* move the ignore policies are explained on a separate page (it was collocated with the logfile output since we had multiple outputs and the policies were specific the the logfile only).

Co-authored-by: Lisa Cawley lcawley@elastic.co

Relates #62916
Closes #29912
2021-01-16 19:09:03 +02:00
Przemko Robakowski 6dfdacdc8f
Remove watcher history clean up from monitoring (#67154)
Monitoring should not clean up watcher history - indices are managed by ILM policy now.
It was deprecated in 7.x, removing it now in 8
2021-01-11 21:35:29 +01:00
Lisa Cawley 6b463a7b7a
[DOCS] Clarify use of CCS on ML nodes (#66616)
Co-authored-by: David Roberts <dave.roberts@elastic.co>
2020-12-22 10:11:09 -08:00
Lisa Cawley 709068da7c
[DOCS] Adds xpack.ml.max_ml_node_size (#66285) 2020-12-16 12:55:34 -08:00
Lisa Cawley 35cc6bf8a0
[DOCS] Changes static ML setting to dynamic (#66286) 2020-12-16 08:32:57 -08:00
Lyudmila Fokina c758dc7f4a
Introduce an additional hasher (PBKDF2_STRETCH) (#65328)
* Introduce an additional hasher that is PBKDF2 but pads the input to > 14 chars before hashing to comply with FIPS Approve Only mode

* Introduce an additional hasher that is PBKDF2 but pads the input to > 14 chars before hashing to comply with FIPS Approve Only mode

* Addressing the PR feedback
adding doc changes

* Renaming the hash function + rephrasing the doc descriptions

* Removing leftover from the doc

* Return HexCharArray instead of Base64 encoding and avoid intermediate
String

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-11-26 13:29:19 +01:00
James Rodewig f83ed81cb3
[DOCS] Document `xpack.http.proxy.scheme` setting (#65264) 2020-11-19 15:31:24 -05:00
Adam Locke b0a98f9515
[DOCS] Adding authorization_realms setting for OIDC (#64877)
* Adding authorization_realms setting for OIDC.

* Fix typo

* Splitting note into separate notes.
2020-11-16 11:22:46 -05:00
James Rodewig 1e13b11213
[DOCS] Document reloadable Watcher settings (#64998) 2020-11-16 08:34:45 -05:00
Andrei Dan d061c11899
[DOCS]: ILM rollover max_age condition disregards origination date (#64404) 2020-11-02 09:30:48 +00:00
James Rodewig 1ea83359bb
[DOCS] Fix case for 'Boolean' (#64299) 2020-10-29 09:04:43 -04:00
Benjamin Trent 165e063b50
[ML] add new setting xpack.ml.use_auto_machine_memory_percent for auto calculating native memory percentage allowed for machine learning jobs (#63887)
When running ML, sometimes it is best to automatically adjust the
memory allotted for machine learning based on the nodesize
and how much space is given to the JVM

This commit adds a new static setting xpack.ml.use_auto_machine_memory_percent for
allowing this dynamic calculation. The old setting remains as a backup
just in case the limit cannot be automatically determined due to
lack of information.

Closes #63795
2020-10-21 12:50:55 -04:00
Adam Locke 789ee2d73e
[DOCS] Combining important config settings into a single page (#63849)
* Combining important config settings into a single page.

* Updating ids for two pages causing link errors and implementing redirects.
2020-10-19 10:02:22 -04:00
David Kyle 6784e826a8
[ML] Audit message when nightly maintenance times out (#63252)
During deletion of old ml data set the delete by query timeout to 8 hours and 
audit a job message when the nightly maintenance task times out.
2020-10-06 15:01:40 +01:00
James Rodewig b7b7e12f3c
[DOCS] Document static/dynamic watcher settings (#62218) 2020-10-05 15:34:47 -04:00
Inbar Shimshon 3938392204
Update ilm-settings.asciidoc 2020-09-25 16:25:00 +03:00
James Rodewig 9b9889b17e
[DOCS] Document static/dynamic security settings (#62181) 2020-09-16 09:36:42 -04:00
James Rodewig 1f03fdc1b7
[DOCS] Add static/dynamic type to audit logging settings (#61235) 2020-09-15 16:30:30 -04:00
James Rodewig a70c00a62c
[DOCS] Document dynamic cluster settings (#61760)
Co-authored-by: Adam Locke <adam.locke@elastic.co>
2020-09-01 15:48:45 -04:00
Lisa Cawley b22ade49af
[DOCS] Document static monitoring settings (#61748) 2020-08-31 12:27:53 -07:00
James Rodewig e0efa26d81
[DOCS] Document static ILM settings (#61745) 2020-08-31 13:43:51 -04:00
Adam Locke dc7153c7ce
[DOCS] Update audit-settings.asciidoc (#61610) (#61646)
* Update audit-settings.asciidoc

"I think" all {ess-icon} should be replaced by {ece-icon} because:
- audit logging is not allowed on ESS, as per https://www.elastic.co/guide/en/cloud/current/ec-add-user-settings.html and https://www.elastic.co/guide/en/cloud/current/ec-restrictions.html#ec-restrictions-security
- audit logging is allowed setting on ECE, as per https://www.elastic.co/guide/en/cloud-enterprise/current/ece-enable-auditing.html

* Removing ESS icons for audit settings

Co-authored-by: Adam Locke <adam.locke@elastic.co>

Co-authored-by: Leaf-Lin <39002973+Leaf-Lin@users.noreply.github.com>
2020-08-27 15:05:51 -04:00
Lisa Cawley e12d6f168c
[DOCS] Document static machine learning settings (#61382) 2020-08-24 07:29:25 -07:00
Lisa Cawley ec7939364b
[DOCS] Document static dynamic transform settings (#61384) 2020-08-21 13:02:29 -07:00
István Zoltán Szabó 9fdf6e6e90
[DOCS] Replaces transform.node with node.roles: [ transform ] in transforms settings. (#61267) 2020-08-18 15:45:34 +02:00
István Zoltán Szabó f8e572fb54
[DOCS] Replaces ml.node with node.roles: [ ml ] in ML settings (#61017) 2020-08-18 11:23:13 +02:00
Adam Locke 610a47c792
[DOCS] Update CCR docs to focus on Kibana (#60555)
* First crack at rewriting the CCR introduction.

* Emphasizing Kibana in configuring CCR (part one).

* Many more edits, plus new files.

* Fixing test case.

* Removing overview page and consolidating that information in the main page.

* Adding redirects for moved and deleted pages.

* Removing, consolidating, and adding redirects.

* Fixing duplicate ID in redirects and removing outdated reference.

* Adding test case and steps for recreating a follower index.

* Adding steps for managing CCR tasks in Kibana.

* Adding tasks for managing auto-follow patterns.

* Fixing glossary link.

* Fixing glossary link, again.

* Updating the upgrade information and other stuff.

* Apply suggestions from code review

* Incorporating review feedback.

* Adding more edits.

* Fixing link reference.

* Adding use cases for #59812.

* Incorporating feedback from reviewers.

* Apply suggestions from code review

* Incorporating more review comments.

* Condensing some of the steps for accessing Kibana.

* Incorporating small changes from reviewers.

Co-authored-by: debadair <debadair@elastic.co>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-08-17 15:36:54 -04:00
James Rodewig a94e5cb7c4
[DOCS] Replace Wikipedia links with attribute (#61171) 2020-08-17 09:44:24 -04:00
James Rodewig 3c6655eeb2
[DOCS] Fix typo in Watcher docs (#60326) (#60387)
Co-authored-by: Martin-Kemp <30285179+Martin-Kemp@users.noreply.github.com>
2020-07-29 10:15:00 -04:00
James Rodewig 2774cd6938
[DOCS] Swap `[float]` for `[discrete]` (#60124)
Changes instances of `[float]` in our docs for `[discrete]`.

Asciidoctor prefers the `[discrete]` tag for floating headings:
https://asciidoctor.org/docs/asciidoc-asciidoctor-diffs/#blocks
2020-07-23 11:48:22 -04:00
James Rodewig 453298ff7c
[DOCS] Remove SQL access settings page (#60078)
This page previously documented `xpack.sql.enabled`.

However, in 7.8 and above, `xpack.sql.enabled` is always enabled and
the setting has no effect. There is no reason to maintain this page.
2020-07-22 16:42:52 -04:00
Lisa Cawley fca1ece693
[DOCS] Clarifies transform node settings (#59023) 2020-07-07 13:31:04 -07:00
Adam Locke 1ab51f19c6
Removing ESS icon for xpack.security.audit.enabled. (#59078) 2020-07-06 10:42:04 -04:00
Lisa Cawley 1dd071049f
[DOCS] Deprecates node.ml (#59024) 2020-07-03 11:08:31 -07:00
Lisa Cawley bff59765a0
[DOCS] Edits ML circuit breaker settings (#59026) 2020-07-03 11:06:42 -07:00
Adam Locke 3a1258fe97
[DOCS] Add supported ESS settings to ES docs (#57953)
* Adding ESS icons to supported ES settings.

* Adding new file for supported ESS settings.

* Adding supported ESS settings for HTTP and disk-based shard allocation.

* Adding more supported settings for ESS.

* Adding descriptions for each Cloud section, plus additional settings.

* Adding new warehouse file for Cloud, plus additional settings.

* Adding node settings for Cloud.

* Adding audit settings for Cloud.

* Resolving merge conflict.

* Adding SAML settings (part 1).

* Adding SAML realm encryption and signing settings.

* Adding SAML SSL settings.

* Adding Kerberos realm settings.

* Adding OpenID Connect Realm settings.

* Adding OpenID Connect SSL settings.

* Resolving leftover Git merge markers.

* Removing Cloud settings page and link to it.

* Add link to mapping source

* Update docs/reference/docs/reindex.asciidoc

* Incorporate edit of HTTP settings

* Remove "cloud" from tag and ID

* Remove "cloud" from tag and update description

* Remove "cloud" from tag and ID

* Change "whitelists" to "specifies"

* Remove "cloud" from end tag

* Removing cloud from IDs and tags.

* Changing link reference to fix build issue.

* Adding index management page for missing settings.

* Removing warehouse file for Cloud and moving settings elsewhere.

* Clarifying true/false usage of http.detailed_errors.enabled.

* Changing underscore to dash in link to fix ci build.
2020-07-02 14:13:06 -04:00
Lisa Cawley 751e2d0deb
[DOCS] Fixes license management links (#58213) 2020-06-16 16:43:54 -07:00
debadair 99c75f1e6c
[DOCS] Fixes problematic terminology (#58178)
* [DOCS] Fixes problematic terminology.

* Update docs/reference/snapshot-restore/register-repository.asciidoc

Co-authored-by: James Rodewig <james.rodewig@elastic.co>
2020-06-16 09:23:11 -07:00
Simon 073d4e9da7
[DOCS] Fix incorrect AD realm setting (#57520) 2020-06-09 16:54:15 -07:00
Benjamin Trent 955afe3f81
[ML] add new circuit breaker for inference model caching (#57731)
This adds new plugin level circuit breaker for the ML plugin.

`model_inference` is the circuit breaker qualified name. 

Right now it simply adds to the breaker when the model is loaded (and possibly breaking) and removing from the breaker when the model is unloaded.
2020-06-08 12:55:25 -04:00
debadair e0e5572f34
[DOCS] Editorial ILM cleanup (#57565)
* [DOCS] Editorial cleanup

* Moved example of applying a template to multiple indices.

* Combine existing indices topics

* Fixed test

* Add skip rollover file.

* Revert rename.

* Update include.

* Revert rename

* Apply suggestions from code review

Co-authored-by: Adam Locke <adam.locke@elastic.co>
Co-authored-by: Lee Hinman <dakrone@users.noreply.github.com>

* Apply suggestions from code review

* Fixed callout

* Update docs/reference/ilm/ilm-with-existing-indices.asciidoc

Co-authored-by: Lee Hinman <dakrone@users.noreply.github.com>

* Update docs/reference/ilm/ilm-with-existing-indices.asciidoc

Co-authored-by: Lee Hinman <dakrone@users.noreply.github.com>

* Apply suggestions from code review

* Restored policy to template example.

* Fixed JSON parse error

Co-authored-by: Adam Locke <adam.locke@elastic.co>
Co-authored-by: Lee Hinman <dakrone@users.noreply.github.com>
2020-06-05 16:24:03 -07:00
Ioannis Kakavas a9338672c5
Add http proxy support for OIDC realm (#57039)
This change introduces support for using an http proxy for egress
communication of the OpenID Connect realm.
2020-06-03 09:36:23 +03:00
Lisa Cawley 8b9293b3bf
[DOCS] Replace docdir attribute with es-repo-dir (#57489) 2020-06-01 15:55:05 -07:00
Albert Zaharovits 0cd35543da
DOCS Correct audit emit_node_id default value as false (#56995)
Since version 7, the `xpack.security.audit.logfile.emit_node_id` setting defaults
to `false`, yet the docs say otherwise. This commit fixes that.
2020-05-20 16:34:00 +03:00
Jai Jhala 9fbdaa9145
[DOCS] Update default value of index.name.time_format (#56453)
Corrects the default value of index.name.time_format
2020-05-08 15:33:29 -05:00
debadair f7cd772402
[DOCS] Align with ILM changes. (#55953)
* [DOCS] Align with ILM changes.

* Apply suggestions from code review

Co-authored-by: James Rodewig <james.rodewig@elastic.co>
Co-authored-by: Lee Hinman <dakrone@users.noreply.github.com>

* Incorporated review comments.
2020-05-08 01:06:16 -07:00
William Brafford f36ab092ed
Deprecated xpack "enable" settings should be no-ops (#55416)
The following settings are now no-ops:

* xpack.flattened.enabled
* xpack.logstash.enabled
* xpack.rollup.enabled
* xpack.slm.enabled
* xpack.sql.enabled
* xpack.transform.enabled
* xpack.vectors.enabled

Since these settings no longer need to be checked, we can remove settings
parameters from a number of constructors and methods, and do so in this
commit.

We also update documentation to remove references to these settings.
2020-05-04 16:49:11 -04:00
William Brafford 560940bc52
Make xpack.monitoring.enabled setting a no-op (#55617)
* Make xpack.monitoring.enabled setting a no-op

This commit turns xpack.monitoring.enabled into a no-op. Mostly, this involved
removing the setting from the setup for integration tests. Monitoring may
introduce some complexity for test setup and teardown, so we should keep an eye
out for turbulence and failures

* Docs for making deprecated setting a no-op
2020-04-30 16:52:32 -04:00
William Brafford c4b11e46a0
Make xpack.ilm.enabled setting a no-op (#55592)
* Make xpack.ilm.enabled setting a no-op

* Add watcher setting to not use ILM

* Update documentation for no-op setting

* Remove NO_ILM ml index templates

* Remove unneeded setting from test setup

* Inline variable definitions for ML templates

* Use identical parameter names in templates

* New ILM/watcher setting falls back to old setting

* Add fallback unit test for watcher/ilm setting
2020-04-29 15:44:44 -04:00