From 30fd045c47df293b6b0a4a3a1b76f86547d4f8ec Mon Sep 17 00:00:00 2001 From: Florent LB Date: Fri, 14 Aug 2026 16:50:58 +0200 Subject: [PATCH 1/5] Add product hub pages for Elasticsearch, Kibana, Logstash, and Elastic Stack Give each product a documentation landing page at /products/, with What's new cards sourced from the 9.5 release notes. AI-Assisted: Cursor Grok 4.6 Co-authored-by: Cursor --- .agents/skills/docs-hub-whats-new/SKILL.md | 69 +++ AGENTS.md | 3 +- docset.yml | 2 + frontmatter.config.yml | 1 + hub-whats-new.yml | 118 ++++ products/elastic-stack.md | 297 ++++++++++ products/elasticsearch.md | 480 ++++++++++++++++ products/kibana.md | 630 +++++++++++++++++++++ products/logstash.md | 409 +++++++++++++ products/toc.yml | 6 + 10 files changed, 2014 insertions(+), 1 deletion(-) create mode 100644 .agents/skills/docs-hub-whats-new/SKILL.md create mode 100644 hub-whats-new.yml create mode 100644 products/elastic-stack.md create mode 100644 products/elasticsearch.md create mode 100644 products/kibana.md create mode 100644 products/logstash.md create mode 100644 products/toc.yml diff --git a/.agents/skills/docs-hub-whats-new/SKILL.md b/.agents/skills/docs-hub-whats-new/SKILL.md new file mode 100644 index 0000000000..d623667467 --- /dev/null +++ b/.agents/skills/docs-hub-whats-new/SKILL.md @@ -0,0 +1,69 @@ +--- +name: docs-hub-whats-new +disable-model-invocation: true +description: Refresh the What's new cards on Elastic product hub pages. Use when updating hub-whats-new.yml after a stack release, or when the user asks to refresh hub What's new content. +--- + +# Refresh hub What's new cards + +Update `hub-whats-new.yml` at the docs-content repo root. Hub pages render that file with `{whats-new}` and `:product: elasticsearch`, `kibana`, or `logstash`. + +The Elastic Stack hub does not use this file. It links to product and solution release notes with a regular `{card-group}`. + +## When to run + +After a stack minor GA (for example 9.5.0), or when the user asks to refresh the hub cards. Patch releases (9.5.1) usually do not change the cards unless a highlight was wrong. + +## Sources (in this order) + +Read these. Do not scrape changelog YAML, docs-builder internals, or unpublished bundles. + +1. **Published release notes** for the target minor. Use the rendered pages, not GitHub source that may lag: + - [Elasticsearch](https://www.elastic.co/docs/release-notes/elasticsearch) + - [Kibana](https://www.elastic.co/docs/release-notes/kibana) + - [Logstash](https://www.elastic.co/docs/release-notes/logstash) +2. **Official what's-new blog** for the same minor, for example [Elastic 9.5](https://www.elastic.co/blog/whats-new-elastic-9-5-0). Use the blog to decide which items are the story of the release. Confirm each item against the published release notes before you keep it. +3. **Existing docs pages** in this repo (or `repo://` targets in other docs repos) for the `link:` on each card. Every link must resolve. + +If the blog and the release notes disagree, the published release notes win for facts. The blog wins for which items belong on the hub. + +## What to write + +Schema: [what's new directive](https://elastic.github.io/docs-builder/syntax/whats-new/). + +For each of `elasticsearch`, `kibana`, and `logstash`: + +- Keep `id: whats-new` so the hub hero can jump to the panel. +- One `release-links` entry pointing at that product's release notes. +- One `upgrade-link` pointing at that product's upgrade page. +- Four or five `items`. Mark **one** item `featured: true`. +- `date` is the minor version, for example `9.5`. +- `tag` is a short category (Storage, Dashboards, Monitoring). +- `title` and `description` are sentence case, present tense, second person or impersonal. No em dashes. Do not use "click" or "choose". +- Say "Generally available" or "Technical preview" in the description when the release notes do. + +## Links + +Every `release-links[].url`, `upgrade-link.url`, and `items[].link` must be one of: + +- Site-absolute with `.md`, for example `/manage-data/data-store/columnar.md` +- Cross-repo, for example `elasticsearch://reference/query-languages/promql.md` + +Do not use `https://www.elastic.co/docs/...` for pages this site publishes. Do not use relative paths. + +Confirm the file exists before you add the link. For docs-content pages, `git cat-file -e HEAD:` or a working-tree glob. For other repos, use the `repo://` form and confirm the path in that repo. + +If a highlight has no documentation page yet, link to the product release notes and add a `Pending links` note in the PR body. + +## What not to do + +- Do not invent highlights that are not in the published release notes or the blog. +- Do not copy changelog YAML entries wholesale. Those lists are complete; the hub is a short story. +- Do not add an Elastic Stack key to this file. +- Do not edit `{whats-new}` on the hub Markdown pages. Those pages only name the product key. + +## PR + +Title: `Refresh hub What's new cards for `. + +Body must list the items you kept, the sources you read (release notes URLs and blog URL), and any pending links. diff --git a/AGENTS.md b/AGENTS.md index 92779c24f5..ca5e1d26a4 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -6,7 +6,7 @@ Keep this file lean: it points to the [`contribute-docs/`](contribute-docs/index ## About this repo -This is the source for the narrative user documentation published at , built by [docs-builder](https://elastic.github.io/docs-builder/) from MyST Markdown. For the products and versions it covers, what belongs here versus in the code repos, and the repo layout, see the [README](README.md). +This is the source for the narrative user documentation published at , built by [docs-builder](https://elastic.github.io/docs-builder/) from MyST Markdown. For the products and versions it covers, what belongs here versus in the code repos, and the repo layout, see the [README](README.md). Product hub pages live in [`products/`](products/) (`layout: hub`). Refresh their What's new cards with the `docs-hub-whats-new` skill. ## Core principles @@ -55,6 +55,7 @@ The **Elastic docs skills** (from `. +# +# Schema: https://elastic.github.io/docs-builder/syntax/whats-new/ +# Refresh with the docs-hub-whats-new skill. Source the cards from the published +# release notes and the official what's-new blog, not from changelog YAML. + +products: + elasticsearch: + title: What's new in Elasticsearch + id: whats-new + intro: Highlights from the latest Elasticsearch release. + release-links: + - label: Release notes + url: elasticsearch://release-notes/index.md + upgrade-link: + label: Upgrade Elasticsearch + url: /deploy-manage/upgrade/deployment-or-cluster.md + items: + - title: Columnar index mode + description: Store each field once in a column store, with no inverted index by default, for a smaller footprint. Technical preview. + link: /manage-data/data-store/columnar.md + date: '9.5' + tag: Storage + featured: true + - title: VectorDB index mode + description: Apply vector-search defaults with a single index setting. + link: /solutions/search/vector.md#vector-index-mode + date: '9.5' + tag: Vector search + - title: Native Prometheus and PromQL + description: Query Prometheus metrics with PromQL in Elasticsearch, generally available. + link: elasticsearch://reference/query-languages/promql.md + date: '9.5' + tag: Metrics + - title: DLM frozen tier + description: Move aging data stream backing indices to the frozen tier as searchable snapshots, without an ILM policy. + link: /manage-data/lifecycle/data-stream/dlm-searchable-snapshots.md + date: '9.5' + tag: Data lifecycle + - title: Flattened fields in ES|QL + description: Query flattened fields and extract sub-fields with FIELD_EXTRACT. Technical preview. + link: elasticsearch://reference/elasticsearch/mapping-reference/flattened.md + date: '9.5' + tag: ES|QL + + kibana: + title: What's new in Kibana + id: whats-new + intro: Highlights from the latest Kibana release. + release-links: + - label: Release notes + url: kibana://release-notes/index.md + upgrade-link: + label: Upgrade Kibana + url: /deploy-manage/upgrade/deployment-or-cluster/kibana.md + items: + - title: Dashboards and Visualizations APIs + description: Create, update, and manage dashboards and visualizations in code. Generally available. + link: /explore-analyze/dashboards/create-dashboards-programmatically.md + date: '9.5' + tag: Dashboards + featured: true + - title: Dashboards in Agent Builder chat + description: Build dashboards from chat, create skills, and add dashboard controls without leaving the conversation. Generally available. + link: /explore-analyze/ai-features/agent-builder/agent-builder-dashboards-and-visualizations.md + date: '9.5' + tag: Agent Builder + - title: Fast mode for ES|QL STATS + description: Run eligible STATS queries in Discover and Dashboards on a sampled dataset, then extrapolate to full scale. + link: elasticsearch://reference/query-languages/esql/esql-query-approximation.md + date: '9.5' + tag: ES|QL + - title: Workflows version history + description: Every save records a version you can compare and restore. Generally available. + link: /explore-analyze/workflows/authoring-techniques/manage-workflows.md#workflows-version-history + date: '9.5' + tag: Workflows + - title: Case analytics + description: Analyze cases, activity, and attachments through dedicated indices and a prebuilt Case Analytics data view. + link: /explore-analyze/cases/case-analytics.md + date: '9.5' + tag: Cases + + logstash: + title: What's new in Logstash + id: whats-new + intro: Highlights from the latest Logstash release. + release-links: + - label: Release notes + url: logstash://release-notes/index.md + upgrade-link: + label: Upgrade Logstash + url: logstash://reference/upgrading-logstash.md + items: + - title: OTLP metrics export + description: Export Logstash monitoring metrics to any OpenTelemetry-compatible endpoint. Technical preview. + link: logstash://reference/monitoring-with-opentelemetry.md + date: '9.5' + tag: Monitoring + featured: true + - title: TLS certificate auto-reload + description: Pipelines reload when TLS certificates rotate on disk, without a full pipeline restart. + link: logstash://reference/reloading-config.md + date: '9.5' + tag: Security + - title: cgroup v2 awareness + description: Read resource limits from cgroup v2 as well as v1, for modern Linux hosts and Kubernetes. + link: logstash://release-notes/index.md + date: '9.5' + tag: Containers + - title: Cloud API keys in Elasticsearch plugins + description: The Elasticsearch input, filter, and output plugins accept Elastic Cloud API keys in the api_key option. + link: logstash://reference/plugins-outputs-elasticsearch.md + date: '9.5' + tag: Elasticsearch diff --git a/products/elastic-stack.md b/products/elastic-stack.md new file mode 100644 index 0000000000..4499bc9338 --- /dev/null +++ b/products/elastic-stack.md @@ -0,0 +1,297 @@ +--- +layout: hub +navigation_title: Elastic Stack +description: Elastic Stack documentation, also known as the ELK Stack. Elasticsearch, Kibana, Logstash, and Beats work together to ingest, store, search, and visualize data. +products: + - id: elastic-stack +--- + +:::{hero} +:icon: elastic-stack +:title: Elastic Stack documentation hub +:description: Elasticsearch, Kibana, Logstash, and Beats, also known as the ELK Stack, work together to ingest, store, search, and visualize data at scale. Run the stack as a managed service or in your own environment. +:primary-action: [Get started](#get-started) +:secondary-action: [What's new](#whats-new) +:tertiary-action: [Explore Elastic Stack docs](#explore) +::: + +:::{get-started} +title: Get started in 3 steps +intro: Start a local development environment or a free Elastic Cloud trial, then ingest data and explore it in Kibana. +steps: + - title: Run Elasticsearch and Kibana + options: + - label: Run locally + description: Spin up Elasticsearch and Kibana on your machine for development with `start-local`. + code: curl -fsSL https://elastic.co/start-local | sh + language: sh + - label: Try on Cloud + description: Start a free Elastic Cloud trial. No local setup needed. + url: https://cloud.elastic.co/registration + url-label: Start a free trial + - title: Ingest your data + description: Send documents to Elasticsearch using the APIs, ingest pipelines, Elastic Agent, Logstash, or a language client. + link: /manage-data/ingest.md + link-label: Ingest your data + - title: Explore and visualize + description: Open Discover, then build your first chart and dashboard. + link: /explore-analyze/kibana-data-exploration-learning-tutorial.md + link-label: Start the tutorial +::: + +::::{card-group} +:title: What's new +:id: whats-new +:intro: Release notes for Elasticsearch, Kibana, Logstash, Observability, and Security. + +:::{link-card} +title: Elasticsearch +link: elasticsearch://release-notes/index.md +icon: elasticsearch +description: Elasticsearch release notes. +::: + +:::{link-card} +title: Kibana +link: kibana://release-notes/index.md +icon: kibana +description: Kibana release notes. +::: + +:::{link-card} +title: Logstash +link: logstash://release-notes/index.md +icon: logstash +description: Logstash release notes. +::: + +:::{link-card} +title: Observability +link: /release-notes/elastic-observability/index.md +icon: observability +description: Observability solution release notes. +::: + +:::{link-card} +title: Security +link: /release-notes/elastic-security/index.md +icon: security +description: Security solution release notes. +::: +:::: + +::::{card-group} +:title: Solutions +:id: solutions +:variant: solutions +:intro: Purpose-built experiences on the Elastic Stack for search, observability, and security. + +:::{link-card} +title: Elasticsearch +link: /solutions/elasticsearch-solution-project.md +icon: elasticsearch +variant: es +links: + - label: Solution overview + url: /solutions/elasticsearch-solution-project.md + - label: Get started + url: /solutions/elasticsearch-solution-project/get-started.md + - label: Elasticsearch docs hub + url: /products/elasticsearch.md +::: + +:::{link-card} +title: Observability +link: /solutions/observability.md +icon: observability +variant: obs +links: + - label: Solution overview + url: /solutions/observability.md + - label: Get started + url: /solutions/observability/get-started.md + - label: Observability release notes + url: /release-notes/elastic-observability/index.md +::: + +:::{link-card} +title: Security +link: /solutions/security.md +icon: security +variant: sec +links: + - label: Solution overview + url: /solutions/security.md + - label: Get started + url: /solutions/security/get-started.md + - label: Security release notes + url: /release-notes/elastic-security/index.md +::: +:::: + +:::::{explore} +:id: explore +:title: Explore the Elastic Stack +:intro: Find documentation for deploying, upgrading, and operating the products that make up the stack. + +::::{card-group} +:title: Quick links +:id: quick-links + +:::{link-card} +title: How the stack fits together +links: + - label: Stack components + url: /get-started/the-stack.md + - label: Deployment options + url: /get-started/deployment-options.md + - label: Versioning and availability + url: /get-started/versioning-availability.md +::: + +:::{link-card} +title: Product hubs +links: + - label: Elasticsearch + url: /products/elasticsearch.md + - label: Kibana + url: /products/kibana.md + - label: Logstash + url: /products/logstash.md +::: + +:::{link-card} +title: Get started locally +links: + - label: Local development quickstart + url: /deploy-manage/deploy/self-managed/local-development-installation-quickstart.md + - label: Ingest your data + url: /manage-data/ingest.md +::: +:::: + +::::{card-group} +:title: Deploy and install +:id: deploy + +:::{link-card} +title: Elastic Cloud +link: /deploy-manage/deploy/elastic-cloud.md +description: Managed Elasticsearch and Kibana, with no local install. +links: + - label: Elastic Cloud overview + url: /deploy-manage/deploy/elastic-cloud.md + - label: Serverless + url: /deploy-manage/deploy/elastic-cloud/serverless.md + - label: Start a free trial + url: https://cloud.elastic.co/registration +::: + +:::{link-card} +title: Self-managed +link: /deploy-manage/deploy/self-managed/installing-elasticsearch.md +description: Install stack components on your own infrastructure, in this order. +links: + - label: Install Elasticsearch + url: /deploy-manage/deploy/self-managed/installing-elasticsearch.md + - label: Install Kibana + url: /deploy-manage/deploy/self-managed/install-kibana.md + - label: Install Logstash + url: logstash://reference/installing-logstash.md + - label: Install Elastic Agent + url: /reference/fleet/install-elastic-agents.md +::: + +:::{link-card} +title: Orchestrators +link: /deploy-manage/deploy/cloud-on-k8s.md +description: Run the stack with Kubernetes or Elastic Cloud Enterprise. +links: + - label: Elastic Cloud on Kubernetes (ECK) + url: /deploy-manage/deploy/cloud-on-k8s.md + - label: Elastic Cloud Enterprise (ECE) + url: /deploy-manage/deploy/cloud-enterprise.md +::: +:::: + +::::{card-group} +:title: Upgrade +:id: upgrade + +:::{link-card} +title: Plan an upgrade +link: /deploy-manage/upgrade.md +description: Prepare a stack upgrade, then upgrade the cluster and ingest components. +links: + - label: Upgrade overview + url: /deploy-manage/upgrade.md + - label: Plan your upgrade + url: /deploy-manage/upgrade/plan-upgrade.md + - label: Upgrade the deployment or cluster + url: /deploy-manage/upgrade/deployment-or-cluster.md + - label: Upgrade ingest components + url: /deploy-manage/upgrade/ingest-components.md +::: +:::: + +::::{card-group} +:title: Main components +:id: components + +:::{link-card} +title: Elasticsearch +link: /products/elasticsearch.md +description: The distributed search and analytics engine at the heart of the stack. +links: + - label: Elasticsearch docs hub + url: /products/elasticsearch.md + - label: How Elasticsearch fits in the stack + url: /get-started/the-stack.md#stack-components-elasticsearch +::: + +:::{link-card} +title: Kibana +link: /products/kibana.md +description: The UI for exploring data, building dashboards, and managing the stack. +links: + - label: Kibana docs hub + url: /products/kibana.md + - label: How Kibana fits in the stack + url: /get-started/the-stack.md#stack-components-kibana +::: + +:::{link-card} +title: Elastic Agent +link: /reference/fleet.md +description: A single agent to collect logs, metrics, and traces, managed from Kibana. +links: + - label: Fleet and Elastic Agent + url: /reference/fleet.md + - label: Install Elastic Agent + url: /reference/fleet/install-elastic-agents.md +::: + +:::{link-card} +title: Logstash +link: /products/logstash.md +description: Server-side pipelines for collecting, transforming, and shipping events. +links: + - label: Logstash docs hub + url: /products/logstash.md + - label: How Logstash fits in the stack + url: /get-started/the-stack.md#stack-components-logstash +::: + +:::{link-card} +title: Beats and OpenTelemetry +link: beats://reference/index.md +description: Lightweight shippers and OpenTelemetry distributions for ingest. +links: + - label: Beats + url: beats://reference/index.md + - label: Elastic Distributions of OpenTelemetry + url: opentelemetry://reference/index.md +::: +:::: + +::::: diff --git a/products/elasticsearch.md b/products/elasticsearch.md new file mode 100644 index 0000000000..a9b85cf702 --- /dev/null +++ b/products/elasticsearch.md @@ -0,0 +1,480 @@ +--- +layout: hub +navigation_title: Elasticsearch +description: Elasticsearch documentation. Index, search, and analyze data at any scale. Run it as a managed service or in your own environment. +products: + - id: elasticsearch +--- + +:::{hero} +:icon: elasticsearch +:title: Elasticsearch documentation hub +:description: The distributed search and analytics engine at the heart of the Elastic platform. Index, search, and analyze data at any scale, build semantic and vector search experiences, and power applications. Run it as a managed service or in your own environment. +:primary-action: [Get started](#get-started) +:secondary-action: [What's new](#whats-new) +:tertiary-action: [Explore Elasticsearch docs](#explore) +::: + +:::{get-started} +title: Get started in 3 steps +intro: Start a local development environment or a free Elastic Cloud trial, then run your first queries. +steps: + - title: Run Elasticsearch + options: + - label: Run locally + description: Spin up Elasticsearch on your machine for development with `start-local`. + code: curl -fsSL https://elastic.co/start-local | sh + language: sh + - label: Try on Cloud + description: Start a free Elastic Cloud trial. No local setup needed. + url: https://cloud.elastic.co/registration + url-label: Start a free trial + - title: Ingest your data into Elasticsearch + description: Send documents to Elasticsearch using the APIs, ingest pipelines, connectors, or a language client. + link: /manage-data/ingest.md + link-label: Ingest your data + - title: Search your data + description: Build queries to find, rank, and analyze your documents. + link: /solutions/search/querying-for-search.md + link-label: Build search queries +::: + +:::{whats-new} +:product: elasticsearch +::: + +::::{card-group} +:title: Get hands-on with Elasticsearch +:id: hands-on +:intro: New to Elasticsearch? Follow a guided quickstart to index and search your first data set. + +:::{link-card} +title: Search fundamentals +link: /solutions/search/get-started/index-basics.md +links: + - label: Index and search basics + url: /solutions/search/get-started/index-basics.md + - label: Build your first query with Python + url: /solutions/search/get-started/keyword-search-python.md +::: + +:::{link-card} +title: Semantic search and ES|QL +link: /solutions/search/get-started/semantic-search.md +links: + - label: Get started with semantic search + url: /solutions/search/get-started/semantic-search.md + - label: ES|QL tutorials + url: elasticsearch://reference/query-languages/esql/esql-examples.md +::: + +:::{link-card} +title: Specialized quickstarts +link: /manage-data/data-store/data-streams/quickstart-tsds.md +links: + - label: Time series data stream basics + url: /manage-data/data-store/data-streams/quickstart-tsds.md + - label: Browse all quickstarts + url: /solutions/search/get-started/quickstarts.md +::: +:::: + +:::::{explore} +:id: explore +:title: Explore Elasticsearch +:intro: Find the Elasticsearch documentation you need, organized by task, from deploying and ingesting to searching, securing, and operating. + +::::{card-group} +:title: Quick links +:id: quick-links + +:::{link-card} +title: Releases and APIs +links: + - label: Release notes + url: elasticsearch://release-notes/index.md + - label: Elasticsearch API docs + url: https://www.elastic.co/docs/api/doc/elasticsearch + - label: Language clients + url: /reference/elasticsearch-clients.md +::: + +:::{link-card} +title: Configuration +links: + - label: Configuration reference + url: elasticsearch://reference/elasticsearch/configuration-reference/index.md + - label: Index settings + url: elasticsearch://reference/elasticsearch/index-settings/index.md + - label: Security settings + url: elasticsearch://reference/elasticsearch/configuration-reference/security-settings.md +::: + +:::{link-card} +title: Operations +links: + - label: Upgrade Elasticsearch + url: /deploy-manage/upgrade/deployment-or-cluster.md + - label: Technical reference + url: elasticsearch://reference/elasticsearch/index.md +::: +:::: + +::::{card-group} +:title: Deploy and manage +:id: deploy + +:::{link-card} +title: Use Elastic Cloud +link: /deploy-manage/deploy/elastic-cloud.md +links: + - label: Serverless + url: /deploy-manage/deploy/elastic-cloud/serverless.md + - label: Elastic Cloud Hosted + url: /deploy-manage/deploy/elastic-cloud.md +::: + +:::{link-card} +title: Deploy with an orchestrator +link: /deploy-manage/deploy/cloud-on-k8s.md +links: + - label: Elastic Cloud on Kubernetes (ECK) + url: /deploy-manage/deploy/cloud-on-k8s.md + - label: Elastic Cloud Enterprise (ECE) + url: /deploy-manage/deploy/cloud-enterprise.md +::: + +:::{link-card} +title: Run Elasticsearch yourself +link: /deploy-manage/deploy/self-managed/installing-elasticsearch.md +links: + - label: Docker + url: /deploy-manage/deploy/self-managed/install-elasticsearch-with-docker.md + - label: Debian / Ubuntu + url: /deploy-manage/deploy/self-managed/install-elasticsearch-with-debian-package.md + - label: RPM + url: /deploy-manage/deploy/self-managed/install-elasticsearch-with-rpm.md + - label: Packages and archives + url: /deploy-manage/deploy/self-managed/install-elasticsearch-from-archive-on-linux-macos.md + - label: Configure Elasticsearch + url: /deploy-manage/deploy/self-managed/configure-elasticsearch.md +::: + +:::{link-card} +title: Design and operate +link: /deploy-manage/distributed-architecture.md +links: + - label: Distributed architecture + url: /deploy-manage/distributed-architecture.md + - label: Monitor Elasticsearch + url: /deploy-manage/monitor.md + - label: Upgrade Elasticsearch + url: /deploy-manage/upgrade/deployment-or-cluster.md +::: +:::: + +::::{card-group} +:title: Prepare and index data +:id: ingest + +:::{link-card} +title: Index data +link: /manage-data/data-store.md +links: + - label: Index API + url: https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-index + - label: Bulk API + url: https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-bulk + - label: Indices and data streams + url: /manage-data/data-store.md +::: + +:::{link-card} +title: Transform and enrich +link: /manage-data/ingest/transform-enrich/ingest-pipelines.md +links: + - label: Ingest pipelines + url: /manage-data/ingest/transform-enrich/ingest-pipelines.md + - label: Enrich data + url: /manage-data/ingest/transform-enrich/data-enrichment.md +::: + +:::{link-card} +title: Map fields +link: /manage-data/data-store/mapping.md +links: + - label: Mappings + url: /manage-data/data-store/mapping.md + - label: Field types + url: elasticsearch://reference/elasticsearch/mapping-reference/field-data-types.md + - label: Runtime fields + url: /manage-data/data-store/mapping/runtime-fields.md +::: + +:::{link-card} +title: Analyze text +link: /manage-data/data-store/text-analysis.md +links: + - label: Text analysis + url: /manage-data/data-store/text-analysis.md + - label: Configure analyzers + url: /manage-data/data-store/text-analysis/configure-text-analysis.md +::: + +:::{link-card} +title: Ingestion tools +link: /manage-data/ingest.md +links: + - label: Fleet and Elastic Agent + url: /reference/fleet.md + - label: Logstash + url: logstash://reference/index.md + - label: Beats + url: beats://reference/index.md + - label: Elastic Distributions of OpenTelemetry + url: opentelemetry://reference/index.md +::: +:::: + +::::{card-group} +:title: Search and analyze data +:id: search + +:::{link-card} +title: Search with the Search API +link: https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-search +links: + - label: Search API + url: https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-search + - label: Query DSL + url: elasticsearch://reference/query-languages/query-dsl/full-text-queries.md + - label: Retrievers + url: elasticsearch://reference/elasticsearch/rest-apis/retrievers.md + - label: Aggregations + url: /explore-analyze/query-filter/aggregations.md +::: + +:::{link-card} +title: ES|QL +link: elasticsearch://reference/query-languages/esql/esql-getting-started.md +links: + - label: Get started with ES|QL + url: elasticsearch://reference/query-languages/esql/esql-getting-started.md + - label: Syntax reference + url: elasticsearch://reference/query-languages/esql/esql-syntax-reference.md + - label: ES|QL for search + url: /solutions/search/esql-for-search.md +::: + +:::{link-card} +title: Search across clusters and projects +link: /explore-analyze/cross-cluster-search.md +links: + - label: Cross-cluster search + url: /explore-analyze/cross-cluster-search.md +::: +:::: + +::::{card-group} +:title: Vector database +:id: vector + +:::{link-card} +title: Semantic and vector search +link: /solutions/search/semantic-search.md +links: + - label: Semantic search + url: /solutions/search/semantic-search.md + - label: Vector search + url: /solutions/search/vector.md + - label: Hybrid search + url: /solutions/search/hybrid-search.md +::: + +:::{link-card} +title: Inference +link: https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-inference +links: + - label: Inference API + url: https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-inference + - label: Semantic search with inference + url: /solutions/search/semantic-search/semantic-search-inference.md +::: +:::: + +::::{card-group} +:title: Build applications +:id: build + +:::{link-card} +title: APIs, clients, and examples +link: /reference/elasticsearch-clients.md +links: + - label: Elasticsearch API docs + url: https://www.elastic.co/docs/api/doc/elasticsearch + - label: Language clients + url: /reference/elasticsearch-clients.md + - label: REST API examples + url: elasticsearch://reference/elasticsearch/rest-apis/api-examples.md +::: + +:::{link-card} +title: Painless scripting +link: /explore-analyze/scripting/modules-scripting-painless.md +links: + - label: Write Painless scripts + url: /explore-analyze/scripting/modules-scripting-painless.md + - label: Language specification + url: elasticsearch://reference/scripting-languages/painless/painless-language-specification.md +::: +:::: + +::::{card-group} +:title: Manage the data lifecycle +:id: lifecycle + +:::{link-card} +title: Choose a strategy +link: /manage-data/lifecycle.md +links: + - label: Data lifecycle overview + url: /manage-data/lifecycle.md +::: + +:::{link-card} +title: Data stream lifecycle +link: /manage-data/lifecycle/data-stream.md +links: + - label: Data stream lifecycle + url: /manage-data/lifecycle/data-stream.md +::: + +:::{link-card} +title: Index lifecycle management +link: /manage-data/lifecycle/index-lifecycle-management.md +links: + - label: Index lifecycle management (ILM) + url: /manage-data/lifecycle/index-lifecycle-management.md +::: + +:::{link-card} +title: Back up and restore +link: /deploy-manage/tools/snapshot-and-restore.md +links: + - label: Snapshot and restore + url: /deploy-manage/tools/snapshot-and-restore.md +::: +:::: + +::::{card-group} +:title: Secure Elasticsearch +:id: security + +:::{link-card} +title: Encrypt communications +link: /deploy-manage/security/secure-cluster-communications.md +links: + - label: Secure cluster communications + url: /deploy-manage/security/secure-cluster-communications.md +::: + +:::{link-card} +title: Authenticate +link: /deploy-manage/users-roles/cluster-or-deployment-auth/user-authentication.md +links: + - label: User authentication + url: /deploy-manage/users-roles/cluster-or-deployment-auth/user-authentication.md +::: + +:::{link-card} +title: Authorize access +link: /deploy-manage/users-roles/cluster-or-deployment-auth/user-roles.md +links: + - label: Users and roles + url: /deploy-manage/users-roles/cluster-or-deployment-auth/user-roles.md +::: + +:::{link-card} +title: Audit and configure +link: /deploy-manage/security/logging-configuration/security-event-audit-logging.md +links: + - label: Audit logging + url: /deploy-manage/security/logging-configuration/security-event-audit-logging.md + - label: Security settings + url: elasticsearch://reference/elasticsearch/configuration-reference/security-settings.md +::: +:::: + +::::{card-group} +:title: Troubleshoot +:id: troubleshoot + +:::{link-card} +title: Cluster health and availability +link: /troubleshoot/elasticsearch/clusters.md +links: + - label: Cluster issues + url: /troubleshoot/elasticsearch/clusters.md +::: + +:::{link-card} +title: Indexing and search +link: /troubleshoot/elasticsearch/troubleshooting-searches.md +links: + - label: Troubleshoot search + url: /troubleshoot/elasticsearch/troubleshooting-searches.md +::: + +:::{link-card} +title: Snapshot and restore +link: /troubleshoot/elasticsearch/snapshot-and-restore.md +links: + - label: Snapshot problems + url: /troubleshoot/elasticsearch/snapshot-and-restore.md +::: + +:::{link-card} +title: Clients and diagnostics +link: /troubleshoot/elasticsearch/clients.md +links: + - label: Client problems + url: /troubleshoot/elasticsearch/clients.md + - label: Capture diagnostics + url: /troubleshoot/elasticsearch/diagnostic.md +::: +:::: + +::::{card-group} +:title: Reference +:id: reference + +:::{link-card} +title: Complete technical reference +link: elasticsearch://reference/elasticsearch/index.md +links: + - label: Elasticsearch technical reference + url: elasticsearch://reference/elasticsearch/index.md + - label: Configuration reference + url: elasticsearch://reference/elasticsearch/configuration-reference/index.md + - label: Mapping reference + url: elasticsearch://reference/elasticsearch/mapping-reference/index.md + - label: Aggregations reference + url: elasticsearch://reference/aggregations/index.md +::: + +:::{link-card} +title: APIs and query languages +link: elasticsearch://reference/elasticsearch/rest-apis/index.md +links: + - label: REST API reference + url: elasticsearch://reference/elasticsearch/rest-apis/index.md + - label: API conventions + url: elasticsearch://reference/elasticsearch/rest-apis/api-conventions.md + - label: Query DSL + url: elasticsearch://reference/query-languages/query-dsl/full-text-queries.md + - label: ES|QL + url: elasticsearch://reference/query-languages/esql/esql-getting-started.md +::: +:::: + +::::: diff --git a/products/kibana.md b/products/kibana.md new file mode 100644 index 0000000000..dca842eee0 --- /dev/null +++ b/products/kibana.md @@ -0,0 +1,630 @@ +--- +layout: hub +navigation_title: Kibana +description: Kibana documentation. Explore and visualize your data, build dashboards, set up alerts, automate tasks with AI, and use purpose-built solutions for Search, Observability, and Security. +products: + - id: kibana +--- + +:::{hero} +:icon: kibana +:title: Kibana documentation hub +:description: The UI for the Elasticsearch platform. Explore and visualize your data, build dashboards, set up alerts, automate tasks with AI, and use purpose-built solutions for Search, Observability, and Security. +:primary-action: [Get started](#get-started) +:secondary-action: [What's new](#whats-new) +:tertiary-action: [Explore Kibana docs](#explore) +::: + +:::{get-started} +title: Get started in 3 steps +intro: Spin up Elasticsearch and Kibana, connect your data, and start exploring in minutes. +steps: + - title: Run Elasticsearch and Kibana + options: + - label: Run locally + description: Spin up Elasticsearch and Kibana on your machine for development with `start-local`. + code: curl -fsSL https://elastic.co/start-local | sh + language: sh + - label: Try on Cloud + description: Start a free Elastic Cloud trial. No local setup needed. + url: https://cloud.elastic.co/registration + url-label: Start a free trial + - title: Ingest your data into Elasticsearch + description: Send documents to Elasticsearch using the APIs, ingest pipelines, connectors, or a language client. + link: /manage-data/ingest.md + link-label: Ingest your data + - title: Explore and visualize + description: Open Discover, then build your first chart and dashboard. + link: /explore-analyze/kibana-data-exploration-learning-tutorial.md + link-label: Start the tutorial +::: + +:::{whats-new} +:product: kibana +::: + +::::{card-group} +:title: Solutions +:id: solutions +:variant: solutions +:intro: Solutions add purpose-built experiences on top of Kibana for specific use cases. Use one as your starting point, or work with Kibana's features directly. + +:::{link-card} +title: Elasticsearch +link: /solutions/elasticsearch-solution-project.md +icon: elasticsearch +variant: es +links: + - label: Solution overview + url: /solutions/elasticsearch-solution-project.md + - label: Get started + url: /solutions/elasticsearch-solution-project/get-started.md + - label: Agent Builder + url: /explore-analyze/ai-features/elastic-agent-builder.md + - label: Playground + url: /solutions/elasticsearch-solution-project/playground.md + - label: Vector search + url: /solutions/search/vector.md + - label: Content connectors + url: elasticsearch://reference/search-connectors/index.md + - label: Semantic search + url: /solutions/search/semantic-search/semantic-search-elser-ingest-pipelines.md +::: + +:::{link-card} +title: Observability +link: /solutions/observability.md +icon: observability +variant: obs +links: + - label: Solution overview + url: /solutions/observability.md + - label: Get started + url: /solutions/observability/get-started.md + - label: Agent Builder + url: /solutions/observability/ai/agent-builder-observability.md + - label: APM + url: /solutions/observability/apm/index.md + - label: Logs + url: /solutions/observability/logs.md + - label: Infrastructure + url: /solutions/observability/infra-and-hosts.md + - label: Synthetics + url: /solutions/observability/synthetics/get-started.md + - label: SLOs + url: /solutions/observability/incident-management/service-level-objectives-slos.md +::: + +:::{link-card} +title: Security +link: /solutions/security.md +icon: security +variant: sec +links: + - label: Solution overview + url: /solutions/security.md + - label: Get started + url: /solutions/security/get-started.md + - label: Agent Builder + url: /solutions/security/ai/agent-builder/agent-builder.md + - label: SIEM + url: /solutions/security/get-started/get-started-detect-with-siem.md + - label: Detection rules + url: /solutions/security/detect-and-alert/manage-detection-rules.md + - label: Elastic Defend + url: /solutions/security/configure-elastic-defend.md + - label: Cloud security + url: /solutions/security/cloud.md + - label: Cases + url: /solutions/security/investigate/security-cases.md +::: +:::: + +:::::{explore} +:id: explore +:title: Explore Kibana +:intro: Explore the apps and capabilities that help you understand and act on your data. + +::::{card-group} +:title: Quick links +:id: quick-links + +:::{link-card} +title: Releases and APIs +links: + - label: Release notes + url: kibana://release-notes/index.md + - label: Kibana API docs + url: https://www.elastic.co/docs/api/doc/kibana + - label: Breaking changes + url: kibana://release-notes/breaking-changes.md +::: + +:::{link-card} +title: Configuration +links: + - label: Configuration reference + url: kibana://reference/configuration-reference.md + - label: Advanced settings + url: kibana://reference/advanced-settings.md + - label: Security settings + url: kibana://reference/configuration-reference/security-settings.md +::: + +:::{link-card} +title: Operations +links: + - label: Upgrade Kibana + url: /deploy-manage/upgrade/deployment-or-cluster/kibana.md + - label: Run in production + url: /deploy-manage/production-guidance/kibana-in-production-environments.md +::: +:::: + +::::{card-group} +:title: Deploy and manage +:id: deploy + +:::{link-card} +title: Self-managed +link: /deploy-manage/deploy/self-managed/install-kibana.md +description: Install and run Kibana on your own infrastructure. +links: + - label: Docker + url: /deploy-manage/deploy/self-managed/install-kibana-with-docker.md + - label: Debian / Ubuntu + url: /deploy-manage/deploy/self-managed/install-kibana-with-debian-package.md + - label: RPM + url: /deploy-manage/deploy/self-managed/install-kibana-with-rpm.md + - label: Windows + url: /deploy-manage/deploy/self-managed/install-kibana-on-windows.md + - label: Configure (kibana.yml) + url: /deploy-manage/deploy/self-managed/configure-kibana.md +::: + +:::{link-card} +title: Managed deployments +link: /deploy-manage/deploy/elastic-cloud/access-kibana.md +description: Run Kibana on Elastic Cloud, Kubernetes, or ECE. +links: + - label: Elastic Cloud Hosted + url: /deploy-manage/deploy/elastic-cloud/access-kibana.md + - label: Elastic Cloud on Kubernetes (ECK) + url: /deploy-manage/deploy/cloud-on-k8s/kibana-configuration.md + - label: Elastic Cloud Enterprise + url: /deploy-manage/deploy/cloud-enterprise/access-kibana.md +::: + +:::{link-card} +title: Maintain and monitor +link: /deploy-manage/production-guidance/kibana-in-production-environments.md +description: Production guidance, upgrades, and logging for Kibana itself. Monitor the rest of the stack from the Stack management section. +links: + - label: Run in production + url: /deploy-manage/production-guidance/kibana-in-production-environments.md + - label: Upgrade Kibana + url: /deploy-manage/upgrade/deployment-or-cluster/kibana.md + - label: Logging + url: /deploy-manage/monitor/logging-configuration/kibana-logging.md +::: +:::: + +::::{card-group} +:title: Explore, visualize, and analyze +:id: visualize + +:::{link-card} +title: Discover +link: /explore-analyze/discover/discover-get-started.md +description: Browse documents, filter, and query your indices in real time. +links: + - label: Get started with Discover + url: /explore-analyze/discover/discover-get-started.md + - label: Use ES|QL in Kibana + url: /explore-analyze/query-filter/languages/esql-kibana.md +::: + +:::{link-card} +title: Dashboards +link: /explore-analyze/dashboards.md +description: Build interactive dashboards that combine visualizations, controls, and context. +links: + - label: Create a dashboard + url: /explore-analyze/dashboards/create-dashboard.md + - label: Build and customize + url: /explore-analyze/dashboards/building.md + - label: Organize panels and sections + url: /explore-analyze/dashboards/arrange-panels.md + - label: Share and export + url: /explore-analyze/dashboards/sharing.md +::: + +:::{link-card} +title: Panel types +link: /explore-analyze/visualize/lens.md +description: The panel types you can add to a dashboard. +links: + - label: Visualizations + url: /explore-analyze/visualize/lens.md + - label: Maps + url: /explore-analyze/visualize/maps.md + - label: Controls + url: /explore-analyze/visualize/dashboard-controls.md + - label: Text + url: /explore-analyze/visualize/text-panels.md + - label: Images + url: /explore-analyze/visualize/image-panels.md + - label: Links + url: /explore-analyze/visualize/link-panels.md + - label: Sections + url: /explore-analyze/dashboards/arrange-panels.md + - label: Alerts + url: /explore-analyze/visualize/alert-panels.md +::: + +:::{link-card} +title: Build visualizations +link: /explore-analyze/visualize/lens.md +description: Create charts and visual panels using the drag-and-drop editor, query mode (ES|QL), Vega, or Maps. +links: + - label: Visualization editor (drag-and-drop) + url: /explore-analyze/visualize/lens.md + - label: Query mode (ES|QL) + url: /explore-analyze/visualize/esorql.md + - label: Vega + url: /explore-analyze/visualize/custom-visualizations-with-vega.md + - label: Maps + url: /explore-analyze/visualize/maps.md +::: + +:::{link-card} +title: Chart types +link: /explore-analyze/visualize/charts/area-charts.md +description: Chart types available in the visualization editor. +links: + - label: Area + url: /explore-analyze/visualize/charts/area-charts.md + - label: Bar + url: /explore-analyze/visualize/charts/bar-charts.md + - label: Line + url: /explore-analyze/visualize/charts/line-charts.md + - label: Pie + url: /explore-analyze/visualize/charts/pie-charts.md + - label: Table + url: /explore-analyze/visualize/charts/tables.md + - label: Metric + url: /explore-analyze/visualize/charts/metric-charts.md + - label: Gauge + url: /explore-analyze/visualize/charts/gauge-charts.md + - label: Heat map + url: /explore-analyze/visualize/charts/heat-map-charts.md + - label: Treemap + url: /explore-analyze/visualize/charts/treemap-charts.md + - label: Mosaic + url: /explore-analyze/visualize/charts/mosaic-charts.md + - label: Waffle + url: /explore-analyze/visualize/charts/waffle-charts.md + - label: Tag cloud + url: /explore-analyze/visualize/charts/tag-cloud-charts.md + - label: Region map + url: /explore-analyze/visualize/charts/region-map-charts.md +::: + +:::{link-card} +title: Reporting and sharing +link: /deploy-manage/kibana-reporting-configuration.md +description: Generate PDF, PNG, and CSV exports. Share dashboards with links or embeds. +links: + - label: Configure reporting + url: /deploy-manage/kibana-reporting-configuration.md + - label: Share dashboards + url: /explore-analyze/dashboards/sharing.md +::: +:::: + +::::{card-group} +:title: Alerting and incident response +:id: alerting + +:::{link-card} +title: Alerting and rules +link: /explore-analyze/alerting/alerts/alerting-getting-started.md +description: Detect important changes and notify people or trigger actions. +links: + - label: Getting started + url: /explore-analyze/alerting/alerts/alerting-getting-started.md + - label: Create and manage rules + url: /explore-analyze/alerting/alerts/create-manage-rules.md + - label: Performance and scaling + url: /deploy-manage/production-guidance/kibana-alerting-production-considerations.md +::: + +:::{link-card} +title: Alerting connectors +link: kibana://reference/connectors-kibana/alerting-cases-connectors.md +description: Send alerts and case updates to external incident-management tools. +links: + - label: Jira + url: kibana://reference/connectors-kibana/jira-action-type.md + - label: ServiceNow ITSM + url: kibana://reference/connectors-kibana/servicenow-action-type.md + - label: PagerDuty + url: kibana://reference/connectors-kibana/pagerduty-action-type.md + - label: Slack + url: kibana://reference/connectors-kibana/slack-action-type.md + - label: Webhook + url: kibana://reference/connectors-kibana/webhook-action-type.md +::: +:::: + +::::{card-group} +:title: AI and automation +:id: ai-automation + +:::{link-card} +title: Agent Builder +link: /explore-analyze/ai-features/elastic-agent-builder.md +description: Build custom AI agents that reason over your Elasticsearch data using LLMs and tools. +links: + - label: Overview + url: /explore-analyze/ai-features/elastic-agent-builder.md + - label: Agents + url: /explore-analyze/ai-features/agent-builder/agent-builder-agents.md + - label: Custom tools + url: /explore-analyze/ai-features/agent-builder/tools/custom-tools.md + - label: Programmatic access (MCP, A2A, API) + url: /explore-analyze/ai-features/agent-builder/programmatic-access.md + - label: 'Tutorial: build a custom agent' + url: /explore-analyze/ai-features/agent-builder/agent-builder-api-tutorial.md +::: + +:::{link-card} +title: Gen-AI connectors +link: kibana://reference/connectors-kibana/gen-ai-connectors.md +description: Wire Kibana up to LLM providers for use in Agent Builder, alerting summaries, and AI Assistant features. +links: + - label: OpenAI + url: kibana://reference/connectors-kibana/openai-action-type.md + - label: Amazon Bedrock + url: kibana://reference/connectors-kibana/bedrock-action-type.md + - label: Google Gemini + url: kibana://reference/connectors-kibana/gemini-action-type.md +::: + +:::{link-card} +title: Workflows +link: /explore-analyze/workflows.md +description: Automate tasks with sequences that chain Kibana actions, HTTP calls, and AI agents. +links: + - label: Get started + url: /explore-analyze/workflows/get-started.md + - label: Kibana action steps + url: /explore-analyze/workflows/steps/kibana.md + - label: Call agents from workflows + url: /explore-analyze/ai-features/agent-builder/agents-and-workflows.md +::: + +:::{link-card} +title: Machine learning +link: /explore-analyze/machine-learning/machine-learning-in-kibana.md +description: Detect anomalies, forecast trends, and run data frame analytics. +links: + - label: Machine learning in Kibana + url: /explore-analyze/machine-learning/machine-learning-in-kibana.md + - label: Anomaly detection job wizards + url: /reference/machine-learning/supplied-anomaly-detection-configurations.md +::: +:::: + +::::{card-group} +:title: Stack management +:id: stack-management + +:::{link-card} +title: Data and indices +description: Manage Elasticsearch indices, data streams, ingest pipelines, and transforms from Kibana. +links: + - label: Index management + url: /manage-data/lifecycle/index-lifecycle-management/index-management-in-kibana.md + - label: Data streams + url: /manage-data/data-store/data-streams/manage-data-stream.md + - label: Transforms + url: /explore-analyze/transforms/transform-setup.md + - label: Task management + url: /deploy-manage/distributed-architecture/kibana-tasks-management.md +::: + +:::{link-card} +title: Integrations and Fleet +description: Browse and install integrations, deploy and manage Elastic Agents, and run Osquery, all from Kibana. +links: + - label: Integrations + url: /reference/fleet/manage-integrations.md + - label: Fleet + url: /reference/fleet.md + - label: Manage agents + url: /reference/fleet/manage-elastic-agents-in-fleet.md + - label: Agent policies + url: /reference/fleet/agent-policy.md + - label: Osquery manager + url: /solutions/security/investigate/osquery.md +::: + +:::{link-card} +title: Stack Monitoring +link: /deploy-manage/monitor/stack-monitoring/kibana-monitoring-data.md +description: Monitor the health of Elasticsearch, Kibana, Logstash, and Beats from a single Kibana app. +links: + - label: Kibana monitoring data + url: /deploy-manage/monitor/stack-monitoring/kibana-monitoring-data.md + - label: Configure Stack Monitoring + url: /deploy-manage/monitor/stack-monitoring.md +::: + +:::{link-card} +title: Saved objects +link: /explore-analyze/find-and-organize/saved-objects.md +description: Manage dashboards, visualizations, and other Kibana objects, including export, import, and migration across spaces. +links: + - label: Manage saved objects + url: /explore-analyze/find-and-organize/saved-objects.md + - label: Tags + url: /explore-analyze/find-and-organize/tags.md +::: +:::: + +::::{card-group} +:title: Developer tools +:id: developer-tools + +:::{link-card} +title: Console +link: cloud://reference/cloud-hosted/ec-api-console.md +description: Run Elasticsearch and Kibana API requests interactively, with auto-complete and history. +links: + - label: Console overview + url: cloud://reference/cloud-hosted/ec-api-console.md +::: + +:::{link-card} +title: Query and script tools +link: /explore-analyze/query-filter/tools/search-profiler.md +description: Profile queries, test patterns, and debug scripts. +links: + - label: Search Profiler + url: /explore-analyze/query-filter/tools/search-profiler.md + - label: Grok Debugger + url: /explore-analyze/query-filter/tools/grok-debugger.md + - label: Painless Lab + url: /explore-analyze/scripting/painless-lab.md +::: + +:::{link-card} +title: APIs and plugins +link: https://www.elastic.co/docs/api/doc/kibana +description: REST API, plugins, and CLI commands for extending Kibana. +links: + - label: Kibana REST API + url: https://www.elastic.co/docs/api/doc/kibana + - label: Kibana serverless API + url: https://www.elastic.co/docs/api/doc/serverless-kibana + - label: Plugins + url: kibana://reference/kibana-plugins.md + - label: kibana-setup command + url: kibana://reference/commands/kibana-setup.md +::: +:::: + +::::{card-group} +:title: Secure Kibana +:id: security + +:::{link-card} +title: Authenticate users +links: + - label: Kibana authentication (SSO, SAML, OIDC) + url: /deploy-manage/users-roles/cluster-or-deployment-auth/kibana-authentication.md + - label: User roles + url: /deploy-manage/users-roles/cluster-or-deployment-auth/user-roles.md +::: + +:::{link-card} +title: Authorize access +links: + - label: Kibana privileges + url: /deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md + - label: Spaces + url: /deploy-manage/manage-spaces.md +::: + +:::{link-card} +title: Protect data and audit +links: + - label: Secure saved objects + url: /deploy-manage/security/secure-saved-objects.md + - label: Kibana and Elasticsearch mutual TLS + url: /deploy-manage/security/kibana-es-mutual-tls.md + - label: Enable audit logging + url: /deploy-manage/security/logging-configuration/enabling-audit-logs.md +::: +:::: + +::::{card-group} +:title: Troubleshoot +:id: troubleshoot + +:::{link-card} +title: Diagnose common issues +links: + - label: Kibana troubleshooting + url: /troubleshoot/kibana.md + - label: Alerts + url: /troubleshoot/kibana/alerts.md + - label: Maps + url: /troubleshoot/kibana/maps.md + - label: Reporting + url: /troubleshoot/kibana/reporting.md +::: + +:::{link-card} +title: Capture diagnostics +links: + - label: Capture Kibana diagnostics + url: /troubleshoot/kibana/capturing-diagnostics.md +::: +:::: + +::::{card-group} +:title: Reference +:id: reference + +:::{link-card} +title: Configuration and settings +link: kibana://reference/configuration-reference.md +description: All kibana.yml settings and UI-configurable advanced settings. +links: + - label: General + url: kibana://reference/configuration-reference/general-settings.md + - label: Alerting + url: kibana://reference/configuration-reference/alerting-settings.md + - label: Security + url: kibana://reference/configuration-reference/security-settings.md + - label: Reporting + url: kibana://reference/configuration-reference/reporting-settings.md + - label: Monitoring + url: kibana://reference/configuration-reference/monitoring-settings.md + - label: Advanced settings (UI) + url: kibana://reference/advanced-settings.md +::: + +:::{link-card} +title: Release notes +link: kibana://release-notes/index.md +description: What's new, deprecated, and fixed in each Kibana release. +links: + - label: Kibana + url: kibana://release-notes/index.md + - label: Known issues + url: kibana://release-notes/known-issues.md + - label: Breaking changes + url: kibana://release-notes/breaking-changes.md + - label: Deprecations + url: kibana://release-notes/deprecations.md +::: + +:::{link-card} +title: Related release notes +description: Release notes for the rest of the Elastic Stack and solutions. +links: + - label: Elasticsearch + url: elasticsearch://release-notes/index.md + - label: Security + url: /release-notes/elastic-security/index.md + - label: Observability + url: /release-notes/elastic-observability/index.md + - label: Serverless + url: /release-notes/elastic-cloud-serverless/index.md +::: + +:::: +::::: diff --git a/products/logstash.md b/products/logstash.md new file mode 100644 index 0000000000..314861eb83 --- /dev/null +++ b/products/logstash.md @@ -0,0 +1,409 @@ +--- +layout: hub +navigation_title: Logstash +description: Logstash documentation. Collect events from any source, transform and enrich them, and ship to Elasticsearch or other destinations. +products: + - id: logstash +--- + +:::{hero} +:icon: logstash +:title: Logstash documentation hub +:description: Real-time server-side data processing pipeline. Collect from many sources, transform and enrich events, and ship to Elasticsearch or other outputs. +:primary-action: [Get started](#get-started) +:secondary-action: [What's new](#whats-new) +:tertiary-action: [Explore Logstash docs](#explore) +::: + +:::{get-started} +title: Get started with Logstash +intro: Download Logstash, create a pipeline, and run it locally. +steps: + - title: Download Logstash + description: Get the binary for your platform and unzip it. You need a JDK (Java 21) before you run. + link: https://www.elastic.co/downloads/logstash + link-label: Download Logstash + - title: Create your first pipeline + description: Write a config with an input, optional filters, and an output. A common first pipeline is stdin to Elasticsearch and stdout. + link: logstash://reference/creating-logstash-pipeline.md + link-label: Create a pipeline + - title: Run Logstash + description: Start Logstash with your config file from the command line. + link: logstash://reference/running-logstash-command-line.md + link-label: Run from the command line + - title: Parse real logs + description: Follow a full example that collects logs, parses fields, and ships them to Elasticsearch. + link: logstash://reference/advanced-pipeline.md + link-label: Parsing logs tutorial +::: + +:::{whats-new} +:product: logstash +::: + +::::{card-group} +:title: Popular topics +:id: popular +:intro: Logstash has a rich collection of input, filter, codec, and output plugins. Use the Grok filter plugin to parse arbitrary text and structure it. + +:::{link-card} +title: Plugins +link: logstash://reference/input-plugins.md +links: + - label: Input plugins + url: logstash://reference/input-plugins.md + - label: Filter plugins + url: logstash://reference/filter-plugins.md + - label: Output plugins + url: logstash://reference/output-plugins.md +::: + +:::{link-card} +title: Grok parsing +link: logstash://reference/plugins-filters-grok.md +links: + - label: Grok filter plugin + url: logstash://reference/plugins-filters-grok.md + - label: Grok Debugger + url: /explore-analyze/query-filter/tools/grok-debugger.md + - label: Grok pattern reference + url: /explore-analyze/scripting/grok.md +::: +:::: + +:::::{explore} +:id: explore +:title: Explore Logstash +:intro: Explore the Logstash documentation, from installing and building pipelines to parsing, securing, troubleshooting, and more. + +::::{card-group} +:title: Quick links +:id: quick-links + +:::{link-card} +title: Getting started +links: + - label: Getting started with Logstash + url: logstash://reference/getting-started-with-logstash.md + - label: How Logstash works + url: logstash://reference/how-logstash-works.md + - label: Installing Logstash + url: logstash://reference/installing-logstash.md +::: + +:::{link-card} +title: Configuration +links: + - label: Configuration files + url: logstash://reference/config-setting-files.md + - label: logstash.yml + url: logstash://reference/logstash-settings-file.md + - label: Config examples + url: logstash://reference/config-examples.md +::: + +:::{link-card} +title: Plugins +links: + - label: Working with plugins + url: logstash://reference/working-with-plugins.md + - label: Input plugins + url: logstash://reference/input-plugins.md + - label: Output plugins + url: logstash://reference/output-plugins.md +::: +:::: + +::::{card-group} +:title: Install, operate, and configure +:id: deploy + +:::{link-card} +title: Install +link: logstash://reference/installing-logstash.md +description: Install and run Logstash on your own infrastructure. +links: + - label: Installing Logstash + url: logstash://reference/installing-logstash.md + - label: Docker + url: logstash://reference/docker.md + - label: Docker configuration + url: logstash://reference/docker-config.md + - label: Windows + url: logstash://reference/running-logstash-windows.md + - label: Setting up and running + url: logstash://reference/setting-up-running-logstash.md +::: + +:::{link-card} +title: Operate +link: logstash://reference/upgrading-logstash.md +description: Upgrade, scale, tune, and monitor Logstash. +links: + - label: Upgrade Logstash + url: logstash://reference/upgrading-logstash.md + - label: Deploy and scale + url: logstash://reference/deploying-scaling-logstash.md + - label: Tuning + url: logstash://reference/tuning-logstash.md + - label: Monitoring + url: logstash://reference/monitoring-logstash.md + - label: Monitoring UI + url: logstash://reference/logstash-monitoring-ui.md +::: + +:::{link-card} +title: Configure +link: logstash://reference/config-setting-files.md +description: Settings files, YAML config, and config reload. +links: + - label: Configuration files + url: logstash://reference/config-setting-files.md + - label: logstash.yml + url: logstash://reference/logstash-settings-file.md + - label: Reload configuration + url: logstash://reference/reloading-config.md +::: +:::: + +::::{card-group} +:title: Ingest +:id: ingest + +:::{link-card} +title: Build pipelines +link: logstash://reference/creating-logstash-pipeline.md +description: Create and structure Logstash pipelines. +links: + - label: Creating a pipeline + url: logstash://reference/creating-logstash-pipeline.md + - label: How Logstash works + url: logstash://reference/how-logstash-works.md + - label: Multiple pipelines + url: logstash://reference/multiple-pipelines.md + - label: Parsing logs tutorial + url: logstash://reference/advanced-pipeline.md +::: + +:::{link-card} +title: Inputs +link: logstash://reference/input-plugins.md +description: Collect events from files, beats, agents, JDBC, and more. +links: + - label: Input plugins + url: logstash://reference/input-plugins.md + - label: JDBC input + url: logstash://reference/plugins-inputs-jdbc.md + - label: Beats input + url: logstash://reference/plugins-inputs-beats.md + - label: Filebeat → Logstash + url: beats://reference/filebeat/logstash-output.md + - label: Elastic Agent → Logstash + url: /reference/fleet/logstash-output.md +::: + +:::{link-card} +title: Outputs +link: logstash://reference/output-plugins.md +description: Send processed events to Elasticsearch and other destinations. +links: + - label: Output plugins + url: logstash://reference/output-plugins.md + - label: Elasticsearch output + url: logstash://reference/plugins-outputs-elasticsearch.md + - label: Logstash-to-Logstash + url: logstash://reference/logstash-to-logstash-communications.md + - label: Logstash → Elasticsearch architecture + url: /manage-data/ingest/ingest-reference-architectures/ls-for-input.md +::: + +:::{link-card} +title: Central management and integrations +link: logstash://reference/logstash-centralized-pipeline-management.md +description: Manage pipelines from Kibana and extend Elastic Integrations. +links: + - label: Centralized pipeline management + url: logstash://reference/logstash-centralized-pipeline-management.md + - label: Logstash pipelines in Kibana + url: /manage-data/ingest/transform-enrich/logstash-pipelines.md + - label: Elastic Integrations + url: logstash://reference/using-logstash-with-elastic-integrations.md +::: +:::: + +::::{card-group} +:title: Parse and transform +:id: transform + +:::{link-card} +title: Parse unstructured logs +link: logstash://reference/plugins-filters-grok.md +description: Extract fields from log lines with grok, dissect, and pipeline tutorials. +links: + - label: Grok filter + url: logstash://reference/plugins-filters-grok.md + - label: Dissect filter + url: logstash://reference/plugins-filters-dissect.md + - label: Parsing logs with Logstash + url: logstash://reference/advanced-pipeline.md + - label: Field extraction + url: logstash://reference/field-extraction.md +::: + +:::{link-card} +title: Debug patterns +link: /explore-analyze/query-filter/tools/grok-debugger.md +description: Build and test grok patterns before you deploy them. +links: + - label: Grok Debugger + url: /explore-analyze/query-filter/tools/grok-debugger.md + - label: Grok pattern reference + url: /explore-analyze/scripting/grok.md +::: + +:::{link-card} +title: Filter and enrich +link: logstash://reference/filter-plugins.md +description: Transform events with filters and Elastic Integrations processing. +links: + - label: Filter plugins + url: logstash://reference/filter-plugins.md + - label: Mutate filter + url: logstash://reference/plugins-filters-mutate.md + - label: Elastic Integration filter + url: logstash://reference/plugins-filters-elastic_integration.md + - label: Transforming data + url: logstash://reference/transforming-data.md +::: + +:::{link-card} +title: Inspect pipelines +link: logstash://reference/logstash-pipeline-viewer.md +description: View pipeline topology and processing in Kibana. +links: + - label: Pipeline viewer + url: logstash://reference/logstash-pipeline-viewer.md +::: +:::: + +::::{card-group} +:title: Secure +:id: security + +:::{link-card} +title: Connect to Elasticsearch +link: logstash://reference/secure-connection.md +description: TLS, authentication, and API keys for Elasticsearch and Serverless. +links: + - label: Secure your connection + url: logstash://reference/secure-connection.md + - label: Connecting to Elastic Cloud + url: logstash://reference/connecting-to-cloud.md +::: + +:::{link-card} +title: TLS on the wire +link: /reference/fleet/secure-logstash-connections.md +description: Secure connections between agents, Beats, and Logstash. +links: + - label: Secure Logstash connections (Fleet) + url: /reference/fleet/secure-logstash-connections.md + - label: Filebeat SSL to Logstash + url: beats://reference/filebeat/configuring-ssl-logstash.md +::: + +:::{link-card} +title: Secrets +link: logstash://reference/keystore.md +description: Store credentials and sensitive settings in the Logstash keystore. +links: + - label: Logstash keystore + url: logstash://reference/keystore.md +::: +:::: + +::::{card-group} +:title: Troubleshoot +:id: troubleshoot + +:::{link-card} +title: Diagnose common issues +link: /troubleshoot/ingest/logstash.md +description: Startup, pipeline, and ingestion troubleshooting. +links: + - label: Troubleshoot Logstash + url: /troubleshoot/ingest/logstash.md + - label: Performance troubleshooting + url: logstash://reference/performance-troubleshooting.md + - label: Monitoring troubleshooting + url: logstash://reference/monitoring-troubleshooting.md +::: + +:::{link-card} +title: Capture diagnostics +link: /troubleshoot/ingest/logstash/diagnostic.md +description: Collect diagnostics for support and debugging. +links: + - label: Capture Logstash diagnostics + url: /troubleshoot/ingest/logstash/diagnostic.md +::: + +:::{link-card} +title: Logging +link: logstash://reference/logging.md +description: Configure and read Logstash logs. +links: + - label: Logging + url: logstash://reference/logging.md +::: +:::: + +::::{card-group} +:title: Reference +:id: reference + +:::{link-card} +title: Plugins +link: logstash://reference/working-with-plugins.md +description: Install, list, and configure Logstash plugins. +links: + - label: Working with plugins + url: logstash://reference/working-with-plugins.md + - label: Input plugins + url: logstash://reference/input-plugins.md + - label: Filter plugins + url: logstash://reference/filter-plugins.md + - label: Codec plugins + url: logstash://reference/codec-plugins.md + - label: Output plugins + url: logstash://reference/output-plugins.md +::: + +:::{link-card} +title: Settings and config +link: logstash://reference/logstash-settings-file.md +description: Settings reference and configuration examples. +links: + - label: logstash.yml + url: logstash://reference/logstash-settings-file.md + - label: Configuration file structure + url: logstash://reference/configuration-file-structure.md + - label: Config examples + url: logstash://reference/config-examples.md +::: + +:::{link-card} +title: Releases +link: logstash://release-notes/index.md +description: What's new, breaking changes, and upgrades. +links: + - label: Release notes + url: logstash://release-notes/index.md + - label: Breaking changes + url: logstash://release-notes/breaking-changes.md + - label: Upgrade Logstash + url: logstash://reference/upgrading-logstash.md +::: +:::: + +::::: diff --git a/products/toc.yml b/products/toc.yml new file mode 100644 index 0000000000..7810a9dc27 --- /dev/null +++ b/products/toc.yml @@ -0,0 +1,6 @@ +project: 'Products' +toc: + - file: elastic-stack.md + - file: elasticsearch.md + - file: kibana.md + - file: logstash.md From 1f5e4236d94c50cdc00227070ad5396d5b1ed249 Mon Sep 17 00:00:00 2001 From: Florent LB Date: Fri, 14 Aug 2026 16:58:41 +0200 Subject: [PATCH 2/5] Assign CODEOWNERS for product hub pages Route each hub to the same docs team that owns the matching product area, and keep the triage mapping in sync. AI-Assisted: Cursor Grok 4.6 Co-authored-by: Cursor --- .github/CODEOWNERS | 8 ++++++++ .github/workflows/docs-ai-menu.yml | 10 +++++----- .github/workflows/docs-triage.yml | 10 +++++----- 3 files changed, 18 insertions(+), 10 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 008ebf5651..b7f0d000d3 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -23,6 +23,14 @@ /extend/ @elastic/core-docs /get-started/ @elastic/core-docs +# Product hub pages. File rules replace the directory fallback (last match wins). +/products/ @elastic/docs +/products/elasticsearch.md @elastic/developer-docs @elastic/admin-docs +/products/kibana.md @elastic/ski-docs @elastic/admin-docs +/products/logstash.md @elastic/ski-docs +/products/elastic-stack.md @elastic/core-docs +/hub-whats-new.yml @elastic/developer-docs @elastic/ski-docs @elastic/core-docs + /manage-data/ @elastic/admin-docs /manage-data/data-store/ @elastic/admin-docs @elastic/developer-docs /manage-data/ingest/ @elastic/ski-docs diff --git a/.github/workflows/docs-ai-menu.yml b/.github/workflows/docs-ai-menu.yml index 0b66d0fedb..49e602b209 100644 --- a/.github/workflows/docs-ai-menu.yml +++ b/.github/workflows/docs-ai-menu.yml @@ -165,12 +165,12 @@ jobs: | Team Label | Owns | Keywords / URL paths | |---|---|---| - | `Team:Admin` | Elasticsearch admin, cluster mgmt, cloud, deployment docs | Cluster management, index management, auth, roles, API keys, network security, cluster security, snapshots, ILM, data lifecycle, CCR, CCS, licensing, subscriptions, upgrade, monitoring, Elastic Cloud, ECE, ECK, serverless. Paths: `deploy-manage/`, `cloud-account/`, `manage-data/` (except `manage-data/ingest/`), `serverless/`, `troubleshoot/deployments/`, `troubleshoot/elasticsearch/` | - | `Team:Experience` | Kibana, observability solution, security solution | Kibana, dashboards, visualizations, Discover, observability, security, APM UI, maps, canvas, Lens, alerting, rules, cases, SIEM, endpoint security, detection rules, security analytics. Paths: `explore-analyze/` (default), `solutions/observability/`, `solutions/security/`, `reference/kibana/`, `reference/observability/`, `reference/security/` | - | `Team:Developer` | Elasticsearch developer, search solution docs | Elasticsearch APIs, ES|QL, query DSL, search features, relevance, vector search, semantic search, inference APIs, connectors, developer tools, clients, search applications, App Search, Workplace Search. Paths: `solutions/search/`, `reference/elasticsearch/clients/`, `reference/search/`, `reference/machine-learning/`, `explore-analyze/ai-features/`, `explore-analyze/cross-cluster-search/`, `explore-analyze/cross-project-search/`, `explore-analyze/transforms/` | - | `Team:Ingest` | Data ingestion, Fleet, APM agents docs | Fleet, Elastic Agent, Beats, Logstash, pipelines, integrations, data streams, APM agents, APM server, OpenTelemetry. Paths: `manage-data/ingest/`, `reference/apm-agents/`, `reference/fleet/`, `reference/ingestion-tools/`, `solutions/observability/apm/apm-agents/`, `solutions/observability/apm/apm-server/`, `solutions/observability/apm/ingest/`, `solutions/observability/apm/opentelemetry/` | + | `Team:Admin` | Elasticsearch admin, cluster mgmt, cloud, deployment docs | Cluster management, index management, auth, roles, API keys, network security, cluster security, snapshots, ILM, data lifecycle, CCR, CCS, licensing, subscriptions, upgrade, monitoring, Elastic Cloud, ECE, ECK, serverless. Paths: `deploy-manage/`, `cloud-account/`, `manage-data/` (except `manage-data/ingest/`), `serverless/`, `troubleshoot/deployments/`, `troubleshoot/elasticsearch/`, `products/elasticsearch.md` | + | `Team:Experience` | Kibana, observability solution, security solution | Kibana, dashboards, visualizations, Discover, observability, security, APM UI, maps, canvas, Lens, alerting, rules, cases, SIEM, endpoint security, detection rules, security analytics. Paths: `explore-analyze/` (default), `solutions/observability/`, `solutions/security/`, `reference/kibana/`, `reference/observability/`, `reference/security/`, `products/kibana.md` | + | `Team:Developer` | Elasticsearch developer, search solution docs | Elasticsearch APIs, ES|QL, query DSL, search features, relevance, vector search, semantic search, inference APIs, connectors, developer tools, clients, search applications, App Search, Workplace Search. Paths: `solutions/search/`, `reference/elasticsearch/clients/`, `reference/search/`, `reference/machine-learning/`, `explore-analyze/ai-features/`, `explore-analyze/cross-cluster-search/`, `explore-analyze/cross-project-search/`, `explore-analyze/transforms/`, `products/elasticsearch.md` | + | `Team:Ingest` | Data ingestion, Fleet, APM agents docs | Fleet, Elastic Agent, Beats, Logstash, pipelines, integrations, data streams, APM agents, APM server, OpenTelemetry. Paths: `manage-data/ingest/`, `reference/apm-agents/`, `reference/fleet/`, `reference/ingestion-tools/`, `solutions/observability/apm/apm-agents/`, `solutions/observability/apm/apm-server/`, `solutions/observability/apm/ingest/`, `solutions/observability/apm/opentelemetry/`, `products/logstash.md` | | `Team:DocsEng` | Docs infrastructure | Docs build system, CI/CD, website rendering, broken navigation, docs-builder bugs, elastic.co website issues not related to content. Paths: `.github/workflows/`, `.github/scripts/` | - | `Team:Projects` | Internal projects, docs initiatives | Internal documentation projects, content strategy, information architecture, get-started guides. Paths: `get-started/` | + | `Team:Projects` | Internal projects, docs initiatives | Internal documentation projects, content strategy, information architecture, get-started guides. Paths: `get-started/`, `products/elastic-stack.md`, `products/` | **Shared ownership**: Some paths have shared ownership (e.g., `/explore-analyze/machine-learning/` is shared by Developer and Experience). Pick the team whose keywords best match the issue content. **Internal projects**: If the issue seems related to an internal documentation project, initiative, or content strategy effort, apply `Team:Projects`. diff --git a/.github/workflows/docs-triage.yml b/.github/workflows/docs-triage.yml index e44da503f5..7023ee98f0 100644 --- a/.github/workflows/docs-triage.yml +++ b/.github/workflows/docs-triage.yml @@ -26,12 +26,12 @@ jobs: | Team Label | Owns | Keywords / URL paths | |---|---|---| - | `Team:Admin` | Elasticsearch admin, cluster mgmt, cloud, deployment docs | Cluster management, index management, auth, roles, API keys, network security, cluster security, snapshots, ILM, data lifecycle, CCR, CCS, licensing, subscriptions, upgrade, monitoring, Elastic Cloud, ECE, ECK, serverless. Paths: `deploy-manage/`, `cloud-account/`, `manage-data/` (except `manage-data/ingest/`), `serverless/`, `troubleshoot/deployments/`, `troubleshoot/elasticsearch/` | - | `Team:Experience` | Kibana, observability solution, security solution | Kibana, dashboards, visualizations, Discover, observability, security, APM UI, maps, canvas, Lens, alerting, rules, cases, SIEM, endpoint security, detection rules, security analytics. Paths: `explore-analyze/` (default), `solutions/observability/`, `solutions/security/`, `reference/kibana/`, `reference/observability/`, `reference/security/` | - | `Team:Developer` | Elasticsearch developer, search solution docs | Elasticsearch APIs, ES|QL, query DSL, search features, relevance, vector search, semantic search, inference APIs, connectors, developer tools, clients, search applications, App Search, Workplace Search. Paths: `solutions/search/`, `reference/elasticsearch/clients/`, `reference/search/`, `reference/machine-learning/`, `explore-analyze/ai-features/`, `explore-analyze/cross-cluster-search/`, `explore-analyze/cross-project-search/`, `explore-analyze/transforms/` | - | `Team:Ingest` | Data ingestion, Fleet, APM agents docs | Fleet, Elastic Agent, Beats, Logstash, pipelines, integrations, data streams, APM agents, APM server, OpenTelemetry. Paths: `manage-data/ingest/`, `reference/apm-agents/`, `reference/fleet/`, `reference/ingestion-tools/`, `solutions/observability/apm/apm-agents/`, `solutions/observability/apm/apm-server/`, `solutions/observability/apm/ingest/`, `solutions/observability/apm/opentelemetry/` | + | `Team:Admin` | Elasticsearch admin, cluster mgmt, cloud, deployment docs | Cluster management, index management, auth, roles, API keys, network security, cluster security, snapshots, ILM, data lifecycle, CCR, CCS, licensing, subscriptions, upgrade, monitoring, Elastic Cloud, ECE, ECK, serverless. Paths: `deploy-manage/`, `cloud-account/`, `manage-data/` (except `manage-data/ingest/`), `serverless/`, `troubleshoot/deployments/`, `troubleshoot/elasticsearch/`, `products/elasticsearch.md` | + | `Team:Experience` | Kibana, observability solution, security solution | Kibana, dashboards, visualizations, Discover, observability, security, APM UI, maps, canvas, Lens, alerting, rules, cases, SIEM, endpoint security, detection rules, security analytics. Paths: `explore-analyze/` (default), `solutions/observability/`, `solutions/security/`, `reference/kibana/`, `reference/observability/`, `reference/security/`, `products/kibana.md` | + | `Team:Developer` | Elasticsearch developer, search solution docs | Elasticsearch APIs, ES|QL, query DSL, search features, relevance, vector search, semantic search, inference APIs, connectors, developer tools, clients, search applications, App Search, Workplace Search. Paths: `solutions/search/`, `reference/elasticsearch/clients/`, `reference/search/`, `reference/machine-learning/`, `explore-analyze/ai-features/`, `explore-analyze/cross-cluster-search/`, `explore-analyze/cross-project-search/`, `explore-analyze/transforms/`, `products/elasticsearch.md` | + | `Team:Ingest` | Data ingestion, Fleet, APM agents docs | Fleet, Elastic Agent, Beats, Logstash, pipelines, integrations, data streams, APM agents, APM server, OpenTelemetry. Paths: `manage-data/ingest/`, `reference/apm-agents/`, `reference/fleet/`, `reference/ingestion-tools/`, `solutions/observability/apm/apm-agents/`, `solutions/observability/apm/apm-server/`, `solutions/observability/apm/ingest/`, `solutions/observability/apm/opentelemetry/`, `products/logstash.md` | | `Team:DocsEng` | Docs infrastructure | Docs build system, CI/CD, website rendering, broken navigation, docs-builder bugs, elastic.co website issues not related to content. Paths: `.github/workflows/`, `.github/scripts/` | - | `Team:Projects` | Internal projects, docs initiatives | Internal documentation projects, content strategy, information architecture, get-started guides. Paths: `get-started/` | + | `Team:Projects` | Internal projects, docs initiatives | Internal documentation projects, content strategy, information architecture, get-started guides. Paths: `get-started/`, `products/elastic-stack.md`, `products/` | **Shared ownership**: Some paths have shared ownership (e.g., `/explore-analyze/machine-learning/` is shared by Developer and Experience). Pick the team whose keywords best match the issue content. **Internal projects**: If the issue seems related to an internal documentation project, initiative, or content strategy effort, apply `Team:Projects`. From 51fa78c47321f3ea01b6e5fcf505d571facb832f Mon Sep 17 00:00:00 2001 From: Florent LB Date: Fri, 14 Aug 2026 17:04:08 +0200 Subject: [PATCH 3/5] Fix hub page links that failed the docs-content build Point Fleet and Elasticsearch clients at their index pages, and send Logstash plugin links through logstash-docs-md. AI-Assisted: Cursor Grok 4.6 Co-authored-by: Cursor --- hub-whats-new.yml | 2 +- products/elastic-stack.md | 4 +-- products/elasticsearch.md | 8 +++--- products/kibana.md | 2 +- products/logstash.md | 52 +++++++++++++++++++-------------------- 5 files changed, 34 insertions(+), 34 deletions(-) diff --git a/hub-whats-new.yml b/hub-whats-new.yml index b96c566dd8..cfd7849cac 100644 --- a/hub-whats-new.yml +++ b/hub-whats-new.yml @@ -113,6 +113,6 @@ products: tag: Containers - title: Cloud API keys in Elasticsearch plugins description: The Elasticsearch input, filter, and output plugins accept Elastic Cloud API keys in the api_key option. - link: logstash://reference/plugins-outputs-elasticsearch.md + link: logstash-docs-md://lsr/plugins-outputs-elasticsearch.md date: '9.5' tag: Elasticsearch diff --git a/products/elastic-stack.md b/products/elastic-stack.md index 4499bc9338..fdde65a387 100644 --- a/products/elastic-stack.md +++ b/products/elastic-stack.md @@ -262,11 +262,11 @@ links: :::{link-card} title: Elastic Agent -link: /reference/fleet.md +link: /reference/fleet/index.md description: A single agent to collect logs, metrics, and traces, managed from Kibana. links: - label: Fleet and Elastic Agent - url: /reference/fleet.md + url: /reference/fleet/index.md - label: Install Elastic Agent url: /reference/fleet/install-elastic-agents.md ::: diff --git a/products/elasticsearch.md b/products/elasticsearch.md index a9b85cf702..0259d28dd2 100644 --- a/products/elasticsearch.md +++ b/products/elasticsearch.md @@ -96,7 +96,7 @@ links: - label: Elasticsearch API docs url: https://www.elastic.co/docs/api/doc/elasticsearch - label: Language clients - url: /reference/elasticsearch-clients.md + url: /reference/elasticsearch-clients/index.md ::: :::{link-card} @@ -226,7 +226,7 @@ title: Ingestion tools link: /manage-data/ingest.md links: - label: Fleet and Elastic Agent - url: /reference/fleet.md + url: /reference/fleet/index.md - label: Logstash url: logstash://reference/index.md - label: Beats @@ -308,12 +308,12 @@ links: :::{link-card} title: APIs, clients, and examples -link: /reference/elasticsearch-clients.md +link: /reference/elasticsearch-clients/index.md links: - label: Elasticsearch API docs url: https://www.elastic.co/docs/api/doc/elasticsearch - label: Language clients - url: /reference/elasticsearch-clients.md + url: /reference/elasticsearch-clients/index.md - label: REST API examples url: elasticsearch://reference/elasticsearch/rest-apis/api-examples.md ::: diff --git a/products/kibana.md b/products/kibana.md index dca842eee0..141a99a69a 100644 --- a/products/kibana.md +++ b/products/kibana.md @@ -441,7 +441,7 @@ links: - label: Integrations url: /reference/fleet/manage-integrations.md - label: Fleet - url: /reference/fleet.md + url: /reference/fleet/index.md - label: Manage agents url: /reference/fleet/manage-elastic-agents-in-fleet.md - label: Agent policies diff --git a/products/logstash.md b/products/logstash.md index 314861eb83..5ae5cdec2f 100644 --- a/products/logstash.md +++ b/products/logstash.md @@ -48,22 +48,22 @@ steps: :::{link-card} title: Plugins -link: logstash://reference/input-plugins.md +link: logstash-docs-md://lsr/input-plugins.md links: - label: Input plugins - url: logstash://reference/input-plugins.md + url: logstash-docs-md://lsr/input-plugins.md - label: Filter plugins - url: logstash://reference/filter-plugins.md + url: logstash-docs-md://lsr/filter-plugins.md - label: Output plugins - url: logstash://reference/output-plugins.md + url: logstash-docs-md://lsr/output-plugins.md ::: :::{link-card} title: Grok parsing -link: logstash://reference/plugins-filters-grok.md +link: logstash-docs-md://lsr/plugins-filters-grok.md links: - label: Grok filter plugin - url: logstash://reference/plugins-filters-grok.md + url: logstash-docs-md://lsr/plugins-filters-grok.md - label: Grok Debugger url: /explore-analyze/query-filter/tools/grok-debugger.md - label: Grok pattern reference @@ -108,9 +108,9 @@ links: - label: Working with plugins url: logstash://reference/working-with-plugins.md - label: Input plugins - url: logstash://reference/input-plugins.md + url: logstash-docs-md://lsr/input-plugins.md - label: Output plugins - url: logstash://reference/output-plugins.md + url: logstash-docs-md://lsr/output-plugins.md ::: :::: @@ -187,15 +187,15 @@ links: :::{link-card} title: Inputs -link: logstash://reference/input-plugins.md +link: logstash-docs-md://lsr/input-plugins.md description: Collect events from files, beats, agents, JDBC, and more. links: - label: Input plugins - url: logstash://reference/input-plugins.md + url: logstash-docs-md://lsr/input-plugins.md - label: JDBC input - url: logstash://reference/plugins-inputs-jdbc.md + url: logstash-docs-md://lsr/plugins-inputs-jdbc.md - label: Beats input - url: logstash://reference/plugins-inputs-beats.md + url: logstash-docs-md://lsr/plugins-inputs-beats.md - label: Filebeat → Logstash url: beats://reference/filebeat/logstash-output.md - label: Elastic Agent → Logstash @@ -204,13 +204,13 @@ links: :::{link-card} title: Outputs -link: logstash://reference/output-plugins.md +link: logstash-docs-md://lsr/output-plugins.md description: Send processed events to Elasticsearch and other destinations. links: - label: Output plugins - url: logstash://reference/output-plugins.md + url: logstash-docs-md://lsr/output-plugins.md - label: Elasticsearch output - url: logstash://reference/plugins-outputs-elasticsearch.md + url: logstash-docs-md://lsr/plugins-outputs-elasticsearch.md - label: Logstash-to-Logstash url: logstash://reference/logstash-to-logstash-communications.md - label: Logstash → Elasticsearch architecture @@ -237,13 +237,13 @@ links: :::{link-card} title: Parse unstructured logs -link: logstash://reference/plugins-filters-grok.md +link: logstash-docs-md://lsr/plugins-filters-grok.md description: Extract fields from log lines with grok, dissect, and pipeline tutorials. links: - label: Grok filter - url: logstash://reference/plugins-filters-grok.md + url: logstash-docs-md://lsr/plugins-filters-grok.md - label: Dissect filter - url: logstash://reference/plugins-filters-dissect.md + url: logstash-docs-md://lsr/plugins-filters-dissect.md - label: Parsing logs with Logstash url: logstash://reference/advanced-pipeline.md - label: Field extraction @@ -263,15 +263,15 @@ links: :::{link-card} title: Filter and enrich -link: logstash://reference/filter-plugins.md +link: logstash-docs-md://lsr/filter-plugins.md description: Transform events with filters and Elastic Integrations processing. links: - label: Filter plugins - url: logstash://reference/filter-plugins.md + url: logstash-docs-md://lsr/filter-plugins.md - label: Mutate filter - url: logstash://reference/plugins-filters-mutate.md + url: logstash-docs-md://lsr/plugins-filters-mutate.md - label: Elastic Integration filter - url: logstash://reference/plugins-filters-elastic_integration.md + url: logstash-docs-md://lsr/plugins-filters-elastic_integration.md - label: Transforming data url: logstash://reference/transforming-data.md ::: @@ -370,13 +370,13 @@ links: - label: Working with plugins url: logstash://reference/working-with-plugins.md - label: Input plugins - url: logstash://reference/input-plugins.md + url: logstash-docs-md://lsr/input-plugins.md - label: Filter plugins - url: logstash://reference/filter-plugins.md + url: logstash-docs-md://lsr/filter-plugins.md - label: Codec plugins - url: logstash://reference/codec-plugins.md + url: logstash-docs-md://lsr/codec-plugins.md - label: Output plugins - url: logstash://reference/output-plugins.md + url: logstash-docs-md://lsr/output-plugins.md ::: :::{link-card} From bb536eab81c016f0ebd9ccb7db311730da8f899b Mon Sep 17 00:00:00 2001 From: Florent LB Date: Fri, 14 Aug 2026 17:11:11 +0200 Subject: [PATCH 4/5] Apply suggestion from @florent-leborgne --- .github/CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index b7f0d000d3..d1aea31d8b 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -28,7 +28,7 @@ /products/elasticsearch.md @elastic/developer-docs @elastic/admin-docs /products/kibana.md @elastic/ski-docs @elastic/admin-docs /products/logstash.md @elastic/ski-docs -/products/elastic-stack.md @elastic/core-docs +/products/elastic-stack.md @elastic/core-docs @elastic/ski-docs /hub-whats-new.yml @elastic/developer-docs @elastic/ski-docs @elastic/core-docs /manage-data/ @elastic/admin-docs From f7814ad8e402500dd47f966c5f280fc80b1c8c24 Mon Sep 17 00:00:00 2001 From: Florent LB Date: Fri, 14 Aug 2026 21:54:41 +0200 Subject: [PATCH 5/5] Fill Kibana hub gaps for interface, ingest, and AI Assistant Point Console at Dev Tools, send get-started ingest to the manage-data overview, and surface data views, KQL, serverless, Spaces, and AI Assistant. Co-authored-by: Cursor --- products/kibana.md | 62 ++++++++++++++++++++++++++++------------------ 1 file changed, 38 insertions(+), 24 deletions(-) diff --git a/products/kibana.md b/products/kibana.md index 141a99a69a..a44655aa21 100644 --- a/products/kibana.md +++ b/products/kibana.md @@ -29,10 +29,10 @@ steps: description: Start a free Elastic Cloud trial. No local setup needed. url: https://cloud.elastic.co/registration url-label: Start a free trial - - title: Ingest your data into Elasticsearch - description: Send documents to Elasticsearch using the APIs, ingest pipelines, connectors, or a language client. + - title: Add data in Kibana + description: Upload a file, add an integration, or use sample data so you have something to explore. link: /manage-data/ingest.md - link-label: Ingest your data + link-label: See ingest options - title: Explore and visualize description: Open Discover, then build your first chart and dashboard. link: /explore-analyze/kibana-data-exploration-learning-tutorial.md @@ -129,6 +129,15 @@ links: :title: Quick links :id: quick-links +:::{link-card} +title: Find your way around +links: + - label: The Kibana interface + url: /explore-analyze/find-and-organize/kibana-interface.md + - label: Find apps and objects + url: /explore-analyze/find-and-organize/find-apps-and-objects.md +::: + :::{link-card} title: Releases and APIs links: @@ -185,8 +194,10 @@ links: :::{link-card} title: Managed deployments link: /deploy-manage/deploy/elastic-cloud/access-kibana.md -description: Run Kibana on Elastic Cloud, Kubernetes, or ECE. +description: Run Kibana on Elastic Cloud, Kubernetes, ECE, or as a serverless project. links: + - label: Serverless + url: /deploy-manage/deploy/elastic-cloud/serverless.md - label: Elastic Cloud Hosted url: /deploy-manage/deploy/elastic-cloud/access-kibana.md - label: Elastic Cloud on Kubernetes (ECK) @@ -220,6 +231,10 @@ description: Browse documents, filter, and query your indices in real time. links: - label: Get started with Discover url: /explore-analyze/discover/discover-get-started.md + - label: Data views + url: /explore-analyze/find-and-organize/data-views.md + - label: Query with KQL + url: /explore-analyze/query-filter/languages/kql.md - label: Use ES|QL in Kibana url: /explore-analyze/query-filter/languages/esql-kibana.md ::: @@ -280,7 +295,7 @@ links: :::{link-card} title: Chart types link: /explore-analyze/visualize/charts/area-charts.md -description: Chart types available in the visualization editor. +description: Common chart types in the visualization editor. links: - label: Area url: /explore-analyze/visualize/charts/area-charts.md @@ -294,20 +309,6 @@ links: url: /explore-analyze/visualize/charts/tables.md - label: Metric url: /explore-analyze/visualize/charts/metric-charts.md - - label: Gauge - url: /explore-analyze/visualize/charts/gauge-charts.md - - label: Heat map - url: /explore-analyze/visualize/charts/heat-map-charts.md - - label: Treemap - url: /explore-analyze/visualize/charts/treemap-charts.md - - label: Mosaic - url: /explore-analyze/visualize/charts/mosaic-charts.md - - label: Waffle - url: /explore-analyze/visualize/charts/waffle-charts.md - - label: Tag cloud - url: /explore-analyze/visualize/charts/tag-cloud-charts.md - - label: Region map - url: /explore-analyze/visualize/charts/region-map-charts.md ::: :::{link-card} @@ -361,6 +362,17 @@ links: :title: AI and automation :id: ai-automation +:::{link-card} +title: AI Assistant +link: /explore-analyze/ai-features/ai-chat-experiences/ai-assistant.md +description: Chat from the Kibana header to build queries, explain errors, and get help in your solution. +links: + - label: AI assistants in Kibana + url: /explore-analyze/ai-features/ai-chat-experiences/ai-assistant.md + - label: Compare with Agent Builder + url: /explore-analyze/ai-features/ai-chat-experiences/ai-agent-or-ai-assistant.md +::: + :::{link-card} title: Agent Builder link: /explore-analyze/ai-features/elastic-agent-builder.md @@ -462,10 +474,12 @@ links: ::: :::{link-card} -title: Saved objects -link: /explore-analyze/find-and-organize/saved-objects.md -description: Manage dashboards, visualizations, and other Kibana objects, including export, import, and migration across spaces. +title: Spaces and saved objects +link: /deploy-manage/manage-spaces.md +description: Organize work into spaces. Manage dashboards, visualizations, and other Kibana objects, including export, import, and migration. links: + - label: Spaces + url: /deploy-manage/manage-spaces.md - label: Manage saved objects url: /explore-analyze/find-and-organize/saved-objects.md - label: Tags @@ -479,11 +493,11 @@ links: :::{link-card} title: Console -link: cloud://reference/cloud-hosted/ec-api-console.md +link: /explore-analyze/query-filter/tools/console.md description: Run Elasticsearch and Kibana API requests interactively, with auto-complete and history. links: - label: Console overview - url: cloud://reference/cloud-hosted/ec-api-console.md + url: /explore-analyze/query-filter/tools/console.md ::: :::{link-card}