You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: explore-analyze/_snippets/import-discover-query-controls-into-dashboard.md
+18-5Lines changed: 18 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,4 +1,8 @@
1
-
To add a Discover query to a dashboard in a way that preserves the [controls created from Discover](/explore-analyze/discover/try-esql.md#add-variable-control) and also adds them to the dashboard, do as follows:
1
+
To add the results of your Discover explorations to a dashboard in a way that preserves the [controls created from Discover](/explore-analyze/discover/try-esql.md#add-variable-control) and also adds them to the dashboard, you have two methods:
2
+
3
+
**Method 1: Adding the Discover session's results**
4
+
5
+
This method allows you to add the result table of your Discover {{esql}} query to any dashboard.
2
6
3
7
1. Save the {{esql}} query containing the variable control into a Discover session. If your Discover session contains several tabs, only the first tab will be imported to the dashboard.
4
8
@@ -10,8 +14,17 @@ To add a Discover query to a dashboard in a way that preserves the [controls cre
10
14
11
15
A new panel appears on the dashboard with the results of the query along with any attached controls.
12
16
13
-

17
+

18
+
19
+
**Method 2: Adding the Discover visualization** {applies_to}`serverless:` {applies_to}`stack: ga 9.3`
20
+
21
+
This method allows you to add the visualization of your Discover {{esql}} query to any dashboard.
22
+
23
+
1. Next to the Discover visualization, select {icon}`save`**Save visualization**.
24
+
25
+

26
+
27
+
1. Select the dashboard to add the visualization to. You can choose an existing dashboard or create one.
28
+
29
+
The selected dashboard opens. It now includes a new panel that shows the visualization imported from Discover. Existing controls from the initial query in Discover are also added. You can find them at the top of the dashboard.
14
30
15
-
:::{note}
16
-
When you add a visualization to a dashboard using the {icon}`save`**Save visualization** option, controls are not added to the dashboard.
Copy file name to clipboardExpand all lines: release-notes/elastic-security/index.md
+31Lines changed: 31 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,6 +27,25 @@ To check for security updates, go to [Security announcements for the Elastic sta
27
27
28
28
% *
29
29
30
+
## 9.2.2 [elastic-security-9.2.2-release-notes]
31
+
32
+
### Features and enhancements [elastic-security-9.2.2-features-enhancements]
33
+
* Improves the alert details flyout by saving the selected threat intelligence time to local storage [#243571]({{kib-pull}}243571).
34
+
* Improves the alert details flyout by saving the selected prevalence time to local storage [#243543]({{kib-pull}}243543).
35
+
36
+
### Fixes [elastic-security-9.2.2-fixes]
37
+
* Fixes response actions API (for {{elastic-defend}} agent types) not sending action to more than 10 agents [#243387]({{kib-pull}}243387).
38
+
* Fixes an issue where clicking a rule link from an alert flyout inside a saved Timeline would also open the Timeline [#242313]({{kib-pull}}242313).
39
+
* Fixes an issue where the "Top <_n_>" popover stayed open after opening the create case flyout. It now closes automatically when the flyout opens [#242045]({{kib-pull}}242045).
40
+
* Fixes a UI issue when displaying {{esql}} queries in Timeline full screen mode [#242027]({{kib-pull}}242027).
41
+
* Allows saving a Timeline with an adhoc data view [#240537]({{kib-pull}}240537).
42
+
* Fixes an issue where alerts generated by threshold rules had non-functional source event links [#238707]({{kib-pull}}238707).
43
+
* Ignores `resource_already_exists_exception` for value list creation hook [#243642]({{kib-pull}}243642).
44
+
* Adds support for multiple values in the Indicator details flyout's **Table** tab [#236110]({{kib-pull}}236110).
45
+
* Prevents unnecessary policy reloads in {{elastic-defend}} when only the overall config version changes.
46
+
* Fixes a bug where {{elastic-defend}} for Linux could fail to bootstrap with {{agent}}.
47
+
* Generates already mounted events for device control.
48
+
30
49
## 9.2.1 [elastic-security-9.2.1-release-notes]
31
50
32
51
### Features and enhancements [elastic-security-9.2.1-features-enhancements]
@@ -140,6 +159,18 @@ To check for security updates, go to [Security announcements for the Elastic sta
140
159
* Fixes an issue in {{elastic-defend}} that could result in a crash if a specified {{ls}} output configuration contained a certificate that couldn't be parsed.
141
160
* Fixes CVE-2025-37735 ([ESA-2025-23](https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272)) in {{elastic-defend}} on Windows which could allow a low-privilege attacker to delete arbitrary files on the system and potentially escalate privileges to SYSTEM. Windows 11 24H2 includes changes which make this issue harder to exploit.
142
161
162
+
## 9.1.8 [elastic-security-9.1.8-release-notes]
163
+
164
+
### Features and enhancements [elastic-security-9.1.8-features-enhancements]
165
+
* Improves the alert details flyout by saving the selected threat intelligence time to local storage [#243571]({{kib-pull}}243571).
166
+
* Ignores `resource_already_exists_exception` for value list creation hook [#243642]({{kib-pull}}243642).
167
+
168
+
### Fixes [elastic-security-9.1.8-fixes]
169
+
* Fixes an issue where the "Top <_n_>" popover stayed open after opening the create case flyout. It now closes automatically when the new case flyout opens [#242045]({{kib-pull}}242045).
170
+
* Fixes a UI issue when displaying {{esql}} queries in Timeline full screen mode [#242027]({{kib-pull}}242027).
171
+
* Prevents unnecessary policy reloads in {{elastic-defend}} when only the overall config version changes.
172
+
* Fixes a bug where {{elastic-defend}} for Linux could fail to bootstrap with {{agent}}.
0 commit comments