Fixes

Elastic Agent Builder:

• Fix Agent Builder tools hanging or timing out on data streams that span the frozen tier. Tools now skip frozen tier indices #292349.
• Fix Agent Builder tracing applying the default space's GenAI privacy settings in every space. Each conversation now uses the privacy settings of its own space #290750.
• Add the case template ID and version fields to the Agent Builder cases-analytics skill so agents can filter and group cases by template #291716.

Alerting and cases:

• Fix forced rule runs and schedule changes being silently dropped when you request them while the rule is finishing a run #293492.
• Fix Agent Builder rules failing after about an hour because they kept the agent's temporary API key #291318.
• Fix bulk alert tag updates also changing matching alerts in other Kibana spaces #285874.
• Fix Jira Service Management and Opsgenie connector actions failing when the rendered alert message exceeds 130 characters. The connectors now truncate the message instead #291698.
• Fix the email connector HTTP test sending caller-supplied subject and message content. The test now sends fixed content #288664.
• Fix the Auto-push case to connected external system option missing from the Cases rule action when case templates are enabled #292187.

Dashboards and Visualizations:

• Increase the TinyMath expression length limit so longer visualization formulas don't fail #290314.
• Fix Go to URL drilldowns leaving Mustache tokens such as event.values.[0] unreplaced in the drilldown name #290363.
• Fix ES|QL metric chart background trendlines failing for queries that use FORK #287819.
• Fix new Last value columns being exported with Show array values turned on even when the option is off, which caused Elasticsearch errors when you imported them #292864.
• Fix filter pills showing filter value is invalid or incomplete when the filter value is an empty string #290383.
• Fix clicking the unsaved changes indicator on the dashboard save button opening two save dialogs #293087.

Data ingestion and Fleet:

• Fix deleting a managed integration policy leaving the agent listed as active #290181.
• Fix agents for Elastic managed integrations enrolled in other Kibana spaces appearing in the Fleet Agents list #293142.
• Fix version-specific agent policy assignment failing repeatedly for agent policies in non-default Kibana spaces #293010.
• Fix the Fleet output edit flyout freezing or showing no counts when thousands of agent policies use the output #291972.
• Fix Elastic Agent upgrade and agent policy requests hanging for up to two minutes and failing with a reset connection when Kibana can't retrieve the list of available Elastic Agent versions #292788.
• Fix integration upgrades failing when you add a custom analyzer or normalizer to a @custom component template after the write index is created. Fleet now rolls over the data stream instead #291813.
• Fix Fleet installing only the first trained model when an integration package includes several #290145.
• Fix ambiguous_conflict errors on dashboard assets when you install an integration in multiple Kibana spaces #291648.
• Fix installed integration icons rendering as black shapes #293176.
• Fix the Edit pipeline button in the ingest pipeline details flyout moving off-screen when a processor contains a long value #291000.

Data management:

• Fix Index Management moving component templates listed in ignore_missing_component_templates to the end of composed_of when you edit or clone an index template #290171.

Developer tools:

• Fix Console reporting Elasticsearch request timeouts as connection failures. Console now explains that the request might still be running and suggests checking its status before you retry #289481.

Elasticsearch solution:

• Add an Expand site group members toggle to SharePoint Online connectors for compact document-level security #288070.
• Add a Sync all mail folders option to the Outlook connector #291396.
• Fix deleted content connectors remaining in the connectors list #290859.

Elastic Observability solution:

For the Elastic Observability 9.5.5 release information, refer to Elastic Observability Solution Release Notes.

Elastic Security solution:

For the Elastic Security 9.5.5 release information, refer to Elastic Security Solution Release Notes.

Kibana platform:

• Hide the Activate user action on deactivated users when you have read-only access #289801.
• Fix a failed audit log write after startup crashing Kibana. Kibana now reports a degraded state and turns the audit logger off instead #287360.
• Fix Kibana shutting down when the product documentation installer downloads a corrupt or incomplete artifact #291142.
• Fix PDF and PNG reports using too much memory and failing on memory-constrained instances when you generate them from a wide browser window #289062.

Machine learning and inference:

• Fix streaming inference requests returning no content when elasticsearch.compression is enabled, which made Agent Builder report an empty response #290381.
• Fix LLM feature settings listing every connector when you lack inference privileges, instead of only the allowed connectors #290457.
• Fix LLM resolution failing when you lack the Actions privilege and an inference endpoint is configured in model settings #290533.
• Fix the anomaly detection bucket span estimation API accepting an unlimited number of detectors, which could exhaust Kibana server resources #291203.
• Fix the field statistics flyout in the anomaly detection job wizard closing on its own while the wizard validates the job #292297.

Workflows:

• Fix the elasticsearch.indices.exists workflow step crashing the workflow or returning an output you can't use in conditions #289580.

Elastic today announced the general availability of cross-project search (CPS) for Elastic Cloud Serverless, enabling organizations to run a single query across multiple serverless projects.

With CPS, customers can search across all regions, project types, and cloud providers, with easy setup, versionless compatibility, and complete security scope. Data is queried in place, eliminating data movement risk and keeping egress costs minimal. It supports all solutions, including Observability, Security, Search, and vector database workloads, giving teams centralized visibility without the operational overhead of centralizing data.

Organizations manage data across projects for legitimate reasons: data residency compliance, tenant data isolation, or organizational structure needs. But it can create a painful side effect: no unified visibility. SOC teams jump between regional projects chasing a threat. Site reliability engineers (SREs) can't see production and staging signals in one place. The workaround, centralizing data, means storing and moving the same bytes twice, and risking sovereignty violations. Existing solutions don't help either; some are locked to a single cloud vendor, while others require version coordination and server setup just to run a federated query.

CPS truly breaks down data silos across distributed architectures without compromising data isolation, residency, or boundaries that systems rely on. By delivering transparently merged results in a single query, CPS allows teams to analyze cross-departmental security signals side by side or seamlessly correlate production and staging logs, or developing search apps with context from multiple linked projects, all without forcing separate deployments into a single environment.

Cross-cluster search (CCS), a similar feature in Elastic Cloud Hosted (ECH), a fully managed cloud service for running the Elastic Stack, is already used by more than 80% of large ECH customers with complex architectures, some managing over 50 remote cluster connections on a single deployment. CPS delivers the same capability on Serverless without the need to understand deployment topology, configure certificates, or per-connection authentication. CPS infrastructure is abstracted by design: three clicks in the Cloud console to link projects, with authentication handled at the org level by Elastic's control plane.

That is the entire setup needed, period.

Once linked, searches in Discover, ES|QL, dashboards, and alerting rules run across all linked projects automatically, with the Kibana CPS Scope Picker keeping scope firmly under your control.

CPS: The Serverless-native approach

Here’s how it works: From your project settings, select the projects you want to link. Filters and tags help target the right environments. Once saved, searches in Discover, dashboards, and alerting automatically include data from every linked project.

Simple setup:

Linked projects data is queried in Discover by default.

The CPS scope selector in Kibana lets analysts and engineers switch query scope without changing query syntax — filtered by project tags or just the current one.

Administrators set the default per Kibana space. A space used for local incident investigation restricts default scope to a single project; a global operations space defaults to the full linked set. Users can override the default for any individual query or session using the project picker, without touching the space configuration.

What’s new in general availability?

CPS launched in tech preview on April 16, 2026. This GA release ships with meaningful additions.

Scale: Support for up to 100 linked projects is included by default. Enterprise teams and MSSPs that link per-client or per-region projects can now operate at the scale their architectures require. Higher limits are available upon request.

Serverless project as an origin: At GA, existing projects can link and query across as many as 100 linked projects without requiring migration or recreation.

ML and AI capabilities: With CPS, Elastic ML jobs detect anomalies in time-series data unsupervised, and at GA they can query across multiple linked projects in a single job. Application performance monitoring (APM) anomaly detection in Elastic Observability can also span linked projects, giving SRE teams a unified anomaly view. Moreover, Elastic Agent Builder enables AI agents across all solutions to retrieve context from multiple linked serverless projects, establishing CPS as a foundational building block for production agents operating on distributed data.

Versionless and cloud-agnostic: Teams aren't locked into a single cloud vendor or forced to coordinate versions across deployments just to do a search. And it works across every solution: Observability, Security, Search, and vector database workloads.

Observability: Application and infrastructure monitoring, alerting, SLOs, and APM anomaly detection work across linked projects enabling flexible data locality and analysis.

Security: CPS powers the Central SOC model: Detection rules run once on a central project and query across every linked project, so SOC teams triage one alert without manually merging data or duplicating alert rules. Entity information and Elastic Defend telemetry from linked projects feed that same central view.

Search: ES|QL queries and Discover sessions span linked projects by default. Across all solutions at GA an AI agent can retrieve context from multiple linked projects in a single query, making CPS a foundational building block for production agents that operate across distributed data.

Complete access control: A user's access to data across linked projects is determined by their individual permissions on each project, not by where they're querying from. What that user can see is always complete and consistent with what they are authorized to see.

Reduced costs: Because data stays where it is, you pay for the queries you run, not for storing and moving the same bytes twice.

Full project routing: It gives teams precise control over which projects a query targets. Using predefined tags such as region, cloud provider, and project alias — or custom tags you define — you can route any query to a specific subset of linked projects. Named expressions and boolean logic (AND, OR, NOT) let you build reusable routing rules for common patterns, such as "all EU projects" or "all MSSP tenant environments except staging."

Programmatic CPS access: CPS has introduced a new user role that enables anyone, not just organization owners, to generate Cloud API keys for CPS queries, removing friction for teams building pipelines and applications on CPS.

Frequently asked questions

What is CPS in Elastic Cloud Serverless? CPS lets you run a single query across multiple Elastic Cloud Serverless projects from Discover, dashboards, or alerting. Results are merged transparently. Setup takes minutes from your project settings.

How is CPS different from CCS? CCS is the equivalent feature in Elastic Cloud Hosted. CCS requires mapping your deployment architecture, managing API keys or certificates per remote connection, and referencing remote cluster names in queries. CPS handles authentication and topology automatically — link projects in the UI, and searches span all of them by default.

How much does CPS cost? CPS has two pricing dimensions. Mounted data is charged at $0.009 per GB retained in linked projects per month (pricing varies by project types, region and cloud service provider). Data egress out is charged at $0.05 per GB — the same rate as standard non-CPS egress, tracked on a separate line item so you can see exactly what CPS queries are contributing to your transfer costs. A team ingesting 10 GB per day with 30-day retention and one linked project adds approximately $4.50 per month in mounted data costs, plus egress based on query volume — typically a small fraction of total CPS cost for common single-pane-of-glass usage.

Which project types and tiers include CPS? CPS is available on all serverless project types. For Observability and Security projects, the Complete tier is required.

Can I control which projects are included in a search? Yes, at both the UI and query level. In Kibana, the project picker lets users switch between all linked projects and just the current one without changing query syntax; administrators set per-space defaults to control the scope for each team or workflow. At the query level, project routing parameters in ES|QL and the search API let you target specific linked projects directly, without going through the UI.

Get started

If you are already running Elastic Cloud Serverless, CPS is available in your project settings today. Link your projects, open Discover, and run your first cross-project query.

Not yet on Elastic Cloud Serverless? Sign up for free!

The release and timing of any features or functionality described in this post remain at Elastic's sole discretion. Any features or functionality not currently available may not be delivered on time or at all.

Fixes

Elastic Agent Builder

• Fix MCP tools dropping extra arguments that the schema allows through additionalProperties before execution #287815.

Alerting and cases

• Relabel the top-level Alerting privilege as Alerting V2 in the Roles UI and mark it experimental #288163.
• Fix the Tracking containment rule editor breaking when you select a data view #289778.
• Fix Sync alerts and Extract observables not applying when you change a case template from the sidebar #288636.
• Fix Alerting V2 rules from not saving when you remove all rule tags #288962.

Dashboards and Visualizations

• Fix the Update filter button being unreachable when the filter editor is taller than the screen #289163.
• Fix sibling dashboard panels not dimming during inline editing on dashboards that have no controls #288939.
• Fix ES|QL visualizations dropping field variable controls (??field) after you save them through the Visualizations API #288785.
• Fix Options list filters stopping after you delete a collapsible dashboard section #287923.

Data ingestion and Fleet

• Fix Fleet blocking a package policy save when every enrolled agent is incompatible with the package version, including agents that report a pre-release version. Fleet shows a warning instead of blocking the save #289596.
• Fix managed integrations appearing in the Fleet Agents list when they use a version-specific policy #289394.
• Fix package policy space assignments becoming stale after you move an agent policy to another Kibana space #288966.
• Fix Elastic Defend metadata transforms accumulating as duplicates in Elasticsearch across stack upgrades #288379 #288902.
• Fix comment-only values in Fleet agent policy advanced YAML settings leaving agents stuck on an outdated policy #288430.

Data management

• Fix classic streams leaving a stale Elasticsearch data stream mappings override after you remove all field overrides #288788.

Developer tools

• Fix Console treating request-like lines inside an unterminated triple-quoted string as standalone requests #287547.

Discover

• Cancel in-progress async searches in Discover and on dashboards when you navigate away in the browser, so Elasticsearch does not keep running them #287949.
• Fix custom time-range presets from the Time filter quick ranges advanced setting showing raw time values instead of their labels, and add a (rounded) suffix to rounded relative ranges #289066.

Elasticsearch solution

• Add an Expand role members toggle to ServiceNow connectors for compact document-level security #288071.
• Fix Query Rules document preview failing when the document ID contains slashes #287214.

Elastic Observability solution

For the Elastic Observability 9.5.4 release information, refer to Elastic Observability Solution Release Notes.

Elastic Security solution

For the Elastic Security 9.5.4 release information, refer to Elastic Security Solution Release Notes.

Kibana platform

• Fix unexpected logouts after an access token is refreshed during a search or dashboard refresh #286038.
• Fix user profile rows using the wrong height in user pickers #288451.

Machine learning and inference

• Fix Anomaly Explorer hanging when you add a geo job chart to a case #289363.

Features and enhancements

Alerting and cases

• Warn in the field library and template editors when a required case field has no default value, because automated case creation can't fill it in, and show a field's name and type as permanent as soon as you create it #285453.
• Enforce required global fields on API and workflow case creation when case templates are enabled, and accept extended_fields on the public and workflow case create and update APIs #283350.

Developer tools

• Raise the Dev Tools Console Copy to curl limit so a request-body string of up to 100000 characters copies successfully #287526.

Fixes

Elastic Agent Builder

• Fix the research agent re-asking clarifying questions you already answered in the same round #284800.
• Fix disabled pre-execution workflows disappearing from Agent Builder settings so you cannot remove them. A disabled workflow stays visible and is labeled (disabled) #286826.

Alerting and cases

• Fix legacy custom fields and their v2 field-definition counterparts falling out of sync, by linking each legacy field to its definition and keeping both representations equal on every write #282772.
• Fix cases created from a case template by a rule action not inheriting the template's external connector, Sync alerts and Extract observables settings, and assignees #284854.
• Fix matching fields missing from Cases Activity search results #284940.
• Fix case attachment UI issues, including delete controls on saved-object attachments and the more-actions menu for read-only access #285456.
• Fix saved Lens visualizations missing from case attachments, and add helper text in the markdown editor for inline Timeline and Lens references #286164.
• Fix creating a case from a workflow, a case template, or machine learning so Sync alerts is not turned on unless that solution enables it #286670.
• Fix the Additional fields editor on the ServiceNow ITSM, ServiceNow SecOps, and Jira connectors rejecting Mustache context variables as invalid JSON #286578.
• Fix required-on-close validation skipping global fields that a template includes by $ref #287306.
• Fix a template $ref global field ignoring its hide-on-value condition when the controlling field is in another section #287308.
• Fix global field column selections not syncing between the Cases list and table views #287327.
• Fix the Cases list keeping the previous page after you change filters #287945.
• Fix custom threshold no data alerts firing for groups that belong to a different custom threshold rule #287151.
• Fix custom threshold Rate aggregations not firing when a counter increases from 0 to a positive value #283973.
• Fix experimental alerting system .rule-events and .alert-actions data streams requesting a replica on single-node clusters, which left those shards unassigned #287544.
• Fix alerting resource installation using unbounded concurrency, which could exhaust Kibana heap when many contexts and namespaces install at once #287643.

Dashboards and Visualizations

• Fix by-reference visualization panels disappearing from dashboards when the panel's savedObjectRef reference is missing #285476.
• Fix metric chart background trendlines failing for ES|QL time-series queries that use TBUCKET(...) #284839.
• Fix the Maps timeslider close button registering clicks only on the top quarter of the control #287441.
• Fix Canvas functions API creating data tables with more than 50 columns per row #287935.

Data ingestion and Fleet

• Fix package policy inputs for newer agent versions not being backfilled after a Kibana minor upgrade #284710.
• Avoid querying Elasticsearch for integration sync when no cross-cluster replication follower index exists #285526.
• Fix space awareness on Fleet agent tag, upload, file, and unenroll API handlers #284936.
• Fix Fleet wrapping a Kafka Dynamic topic multi-field format string such as %{[data_stream.type]}-%{[data_stream.namespace]}, which produced an invalid topic expression #285581.
• Fix Fleet package manifests accepting cluster privileges outside the documented allow list #286084.
• Fix Fleet agent CSV export failing when xpack.reporting.csv.scroll.strategy is scroll, or when Search in frozen indices is enabled #286119.
• Fix the Fleet agent-status-change task failing when the Elasticsearch response is too large #286324.
• Fix sorting the Agents table by Host so it uses the hostname keyword field instead of the analyzed text field #286383.
• Fix package policies accepting a whitespace-only namespace, which saved while ingestion failed silently #286385.
• Fix the CPU and memory tooltip on offline agents showing misleading messages instead of clearly stating the agent is offline #286386.
• Fix managed integration throughput index patterns for streams that use a dynamic dataset #286758.
• Fix update and delete of legacy managed integration policies returning HTTP 404 or reporting success while the deployment kept running #287011.
• Fix stale version-specific Fleet policies remaining after their agent version dropped out of the bounded set, and refresh variants that still have enrolled agents #287095.
• Fix slow Fleet outputs fetching on Fleet setup and Integrations UI page load #287113.
• Fix Fleet API-key invalidation failing when more than 10,000 keys need to be invalidated at once #287252.
• Fix the Fleet integration policy editor showing the wrong credential method for policies created before the package introduced var_groups #287389.
• Fix the version-specific policy icon showing on agents that already meet the policy's version requirements #287504.
• Fix the Fleet policy editor not validating data_stream.dataset on integration packages #287557.
• Fix managed integration orphan cleanup so it respects package-policy ownership and the force flag #287571.
• Fix Fleet package policies keeping stale secret references after you rotate credentials #287642.

Developer tools

• Fix Dev Tools Console autocomplete not triggering at request-body completion positions, and fix template expansion and text corruption when accepting a suggestion mid-string #284530.
• Fix Dev Tools Console body autocomplete after a closed triple-quoted string value #286695.
• Fix Console autocomplete inserting boolean and numeric suggestions as quoted strings instead of JSON primitives #286699.
• Fix Console body autocomplete preferring a same-name global rule over an explicit field rule #286703.
• Fix duplicate Cut, Copy, and Paste actions in the Dev Tools Console context menu #286704.

Discover

• Fix ES|QL filters generating invalid casts such as ::text for types ES|QL does not support #287416.

Elastic Observability solution

For the Elastic Observability 9.5.3 release information, refer to Elastic Observability Solution Release Notes.

Elastic Security solution

For the Elastic Security 9.5.3 release information, refer to Elastic Security Solution Release Notes.

Kibana platform

• Fix the date range picker rejecting Elasticsearch date math that combines rounding with a further offset, such as now/y+3M. Chained expressions stay as shorthand instead of converting to absolute dates #287010.
• Fix audit log records omitting the client IP address for requests made over HTTP/2 #285344.
• Fix PKI authentication sessions being invalidated when in-flight HTTP/2 requests are cancelled, which logged you out. This affects deployments with server.protocol: http2, the default in 9.0.0 when TLS is enabled #285153.
• Fix Kibana failing to start when the file-based audit log appender cannot write. Kibana reports a degraded state instead #282347.

Machine learning and inference

• Fix hung LLM response streams blocking the Kibana event loop #286849.
• Fix chat inference requests using a non-default connector when genAiSettings:defaultAIConnectorOnly is enabled #288107.

Workflows

• Fix generated workflow edits stripping YAML comments and formatting #288075.
• Fix single-step workflow runs dropping variables from the historical context override #287347.
• Fix the Filter executions dropdown showing the same Waiting label for waiting-for-input and waiting-for-child statuses. The dropdown now uses Waiting, Waiting for input, and Waiting for child workflow #285345.

Features and enhancements

Authorization

• Grant kibana_system access to PingDirectory indices so ILM can delete them #156029

FIPS

• Upgrade Bouncy Castle FIPS to 1.0.2.7 and 2.0.2 #156296

Infra/Core

• Upgrade ASM to 9.10.1 #156213
• Upgrade the bundled JDK to 26.0.2 #156203

Machine Learning

• Add EuroBERT and Jina v5 ops to graph validation allowlist #3015
• Harden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
• Improve adherence to memory limits for the bucket gatherer #2848
• Improve error handling for quantiles state documents #2894
• Improve handling of invalid JSON state documents #2895
• Improve messages when a process is stopped after running out of memory #2841
• Lower the log severity of recoverable errors #2889
• Report the actual memory usage of the autodetect process #2846
• Restrict file system access for PyTorch models #2851
• Upgrade PyTorch to 2.7.1 #2863

Search

• Improve search throughput by removing a lock in query cache stats lookup #156902

Security

• Upgrade httpclient5 to 5.6.4 #157564

Fixes

Aggregations

• Fix percentiles aggregations failing with an already closed breaker error #157254 (issue: #157206)
• Fix rank estimation ignoring min and max in exponential histograms #156268 (issue: #156057)

CRUD

• Retry writes when the target primary is unassigned during a shard split #157255 (issue: #156982)

Distributed

• Fix deletes silently skipped on TSDB indices that use synthetic _id #156903 (issue: #151326)

ES|QL

• Account for deferred aggregation memory in the request circuit breaker #155600 (issue: #148516)
• Account for t-digest percentiles memory in the request circuit breaker #155586
• Fix TS queries that name a time bucket after the timestamp field #155623
• Fix incorrect results when sorting on multiple keys with a LIMIT #155923
• Fix unresolved columns in CASE with CIDR_MATCH and implicit ip casts #156162 (issue: #155979)
• Reduce overhead of TS queries by pruning unused dimension fields #157250
• Reject 2^63 when converting double to long #157555 (issue: #157551)
• Reject COUNT_DISTINCT precision thresholds outside the integer range #157553 (issue: #157549)

Inference

• Fix Google Vertex AI tool calls with non-string argument values #156665 (issue: #156644)
• Fix inference and security cache clearing on multi-node clusters #156603

Infra/Metrics

• Fix NullPointerException from async telemetry instruments at shutdown #157161

Machine Learning

• Fail closed when the TorchScript state hook scan is incomplete #3149
• Fail gracefully when restoring a categorizer with an out-of-range token ID #3143
• Fix LFU cache count drift when a lock times out #3090
• Fix flaky CIoManagerTest/testFileIoGood test #3017
• Fix machine learning daily maintenance failing when security is enabled #148554
• Mark the machine learning controller non-dumpable before accepting commands #3081
• Re-audit repeated datafeed extraction errors instead of reporting once #157565
• Reject TorchScript custom state hooks and inductor::_reinterpret_tensor #3078
• Reject non-native ABIs in the machine learning seccomp filter #3080

SLM

• Fix SLM stats recording the wrong outcome for concurrent snapshots #155934 (issue: #155621)

SQL

• Reject ROUND results that overflow byte or short #157554 (issue: #157550)

Search

• Ensure batched queries always return a response #155908
• Fail the request instead of the node on deeply nested aggregations #155745
• Fix nested and mode-based sorts on integer fields returning incorrect values on indices created before 8.19 or in 9.0.x #155580 (issue: #155243)
• Fix search failures when a segment closes during a query cache stats update #157050
• Keep scroll contexts on transient search queue rejection #155697 (issue: #90912)
• Limit aggregation nesting depth with search.aggs.max_nested_depth #155743
• Reject null values in search_after instead of failing the search #132434 (issue: #132370)
• Stop returning a user field named _type as search hit metadata #155706 (issue: #110438)

Snapshot/Restore

• Halt the node on fatal errors during S3 multipart uploads #156765

Transform

• Preserve security headers when copying a transform configuration #156191

Vector Search

• Fix search failures when many field patterns match no vector fields #156466
• Score nested kNN inner_hits like the query phase #156332 (issue: #138496)

Features and enhancements

Alerting and cases

• Add a public API to create, update, and delete case templates (POST, PUT, and DELETE /api/cases/templates), including a dry-run mode that validates a template without saving it #280144.
• Improve the Cases view, cases list, and field library by keeping the case details panel in view as you scroll, saving status and other fields immediately when changed, and adding drag-and-drop field reordering to the field library #282197.
• Add an Agent Builder tool to attach saved dashboards, maps, Discover sessions, and Lens visualizations to a case #279680.

Dashboards and Visualizations

• Restore Defer loading panels below "the fold" (labs:dashboard:deferBelowFold) so off-screen dashboard panels wait to fetch data until they scroll into view. The setting is off by default #284004.

Elastic Observability solution

For the Elastic Observability 9.5.2 release information, refer to Elastic Observability Solution Release Notes.

Elastic Security solution

For the Elastic Security 9.5.2 release information, refer to Elastic Security Solution Release Notes.

Elasticsearch solution

• Add a toggle to the Manage region preferences modal so you can remove a custom region policy and revert to allowing all regions #282769.

Workflows

• Add step-level if skip conditions to all workflow step types except the if step, which continues to use condition #279210.
• Enable running a workflow with only the execute privilege, without also requiring the read privilege on the workflow definition #284822.

Fixes

Elastic Agent Builder

• Fix missing screen reader announcements when toggling the Show active only filter on the agent tools page #282276.
• Fix Agent Builder queries failing with a security exception on Elasticsearch 9.4 when you configure cross-cluster search index patterns but the cluster doesn't have the remote cluster client role #281609.
• Fix chat completion streams continuing after you cancel a request, and cap their duration at 10 minutes #285119.
• Fix Agent Builder requests to Google Vertex AI inference endpoints failing when tool schemas include JSON Schema fields that Vertex doesn't accept #284810.
• Fix Agent Builder conversations failing when a prompt contains special tokens such as <|endoftext|>, or when Claude models receive empty text blocks #283177.
• Restore legacy root-level inputs in Agent Builder workflow tool schemas so existing workflow tools keep working #285149.
• Fix concurrent conversations silently dropping a round when two clients replied at the same time. Case attachment requests that now conflict return HTTP 409 instead of appearing to succeed #281887.
• Fix agent custom instructions failing to save because the full edit payload was sent, which broke access control entries #277176.
• Fix visualizations generated from a specified index silently returning an empty chart when the query read from a different source. Agent Builder now retries once and then reports an error #282212.
• Fix the custom answer text field losing focus after you select its radio button when an agent asks a clarifying question #283326.

Alerting and cases

• Fix Cases free-text search failing when a case's extended fields produced too many runtime-field values #284475.
• Fix case Activity recording a row for every unchanged template or global field default when you create a case #284310.
• Fix assigning users to a case creating duplicate activity entries #284035.
• Fix field library toggle filters missing from More filters on the All cases page #283645.
• Fix duplicate required-on-close validation errors when a template references a global field that is also required on close #283922.
• Fix a template $ref field silently dropping its local display and validation overrides #283072.
• Prevent changing a field definition's name or type after creation, which previously orphaned stored case values #282770.
• Resolve case field-definition references without regard to capitalization so renaming a field's casing no longer hides it from templates #282450.
• Fix global case field defaults not being applied to cases created through the API or workflow steps, and prevent the field-migration backfill from overwriting values you've already set or cleared #283185.
• Fix the case details Associated Users and Associated Hosts counts omitting directly attached user and host entities #283036.
• Fix the Alerting V2 update API rejecting a valid change of a signal rule's query format to composed #283754.

Dashboards and Visualizations

• Fix Lens metric trendline breakdown ordering to rank by the trendline's own metric instead of falling back to alphabetical order #283159.
• Fix histogram granularity to preserve the saved bar count instead of resetting to Auto above 7 bars. The effective ceiling remains the histogram:maxBars advanced setting #283058.
• Fix duration format to preserve decimal and compact settings on round-trip, except when using the automatic (auto-approximate) duration format #282815.
• Fix the dashboards list endpoint not sorting by last updated date in descending order when no search query is set #282363.

Data ingestion and Fleet

• Fix deleting a package policy from an agent policy with many agents blocking on a full synchronous redeploy instead of deploying asynchronously #282580.
• Fix Fleet bulk upgrades installing the bundled package version instead of the latest registry version #282829.
• Fix Fleet lookups that treated version-specific policy IDs as base policy IDs, which could return HTTP 404 for Fleet Server policy revisions and miss agents #283071.
• Fix the managed integration enrollment flyout failing to detect enrolled agents assigned to version-specific policies #283434.
• Fix expired Fleet enrollment tokens still showing as Active, and add an Expired status to the enrollment tokens list #284280.
• Fix disabling namespace index templates for a package policy with a custom ILM policy failing with an ILM update error #284818.

Developer tools

• Fix Dev Tools Console showing autocomplete suggestions inside non-query triple-quoted strings #282424.

Discover

• Fix formatted numbers showing a sign when the rounded value is zero #282919.
• Fix the percent field formatter rendering NaN when fractional is false #282915.
• Fix server-side date formatting, including CSV exports, keeping the previous timezone or date pattern after you change those settings #282501.

Elastic Observability solution

For the Elastic Observability 9.5.2 release information, refer to Elastic Observability Solution Release Notes.

Elastic Security solution

For the Elastic Security 9.5.2 release information, refer to Elastic Security Solution Release Notes.

Kibana platform

• Prevent leaving the role management page without a confirmation when there are unsaved changes #283525.

Machine learning and inference

• Fix the Data Frame Analytics results explorer not updating when you switch to another job of the same type #284964.
• Fix file upload analysis failing for NDJSON files larger than 5 MB #284960.
• Require administrator privileges to test trained models, and run pipeline simulation as the current user so tests can't access data you shouldn't see #282002.

Workflows

• Warn instead of block enabling a workflow when the editor can't statically prove a foreach collection is an array #283360.

Features and enhancements

FIPS

• Upgrade Bouncy Castle FIPS to 1.0.2.7 and 2.0.2 #156296

Infra/Core

• Upgrade ASM to 9.10.1 #156213
• Upgrade the bundled JDK to 26.0.2 #156203

Mapping

• Upgrade to Lucene 10.5.1 #156643

Security

• Upgrade Jackson to 2.21.5 for ES|QL and Arrow #156368

Fixes

Aggregations

• Fix rank estimation ignoring min and max in exponential histograms #156268 (issue: #156057)

Downsampling

• Fix duplicate field in the cumulative histogram reset document #156287 (issue: #156276)

ES|QL

• Account for deferred aggregation memory in the request circuit breaker #155600 (issue: #148516)
• Account for t-digest percentiles memory in the request circuit breaker #155586
• Fix TS STATS aggregate aliases that collide with grouping keys #155312 (issue: #153507)
• Fix TS queries that name a time bucket after the timestamp field #155623
• Fix incorrect results from Parquet predicate pushdown on multi-valued fields #156604
• Replace an IN subquery evaluated as a false filter with an empty local relation #155648 (issue: #155563)

Inference

• Fix Anthropic translation to the unified schema #155314
• Fix Google Vertex AI tool calls with non-string argument values #156665 (issue: #156644)
• Fix inference and security cache clearing on multi-node clusters #156603
• Translate unified tool-calling message blocks to the Anthropic format #154607

Infra/Core

• Fix IllegalStateException when a truncated string cuts off in the middle of a JSON object #156382 (issue: #156289)

Machine Learning

• Fail closed when the TorchScript state hook scan is incomplete #3149
• Fail gracefully when restoring a categorizer with an out-of-range token ID #3143

Search

• Count failed _msearch sub-search responses against the circuit breaker #156683
• Ensure batched queries always return a response #155908
• Fail the request instead of the node on deeply nested aggregations #155745
• Fix nested and mode-based sorts on integer fields returning incorrect values on indices created before 8.19 or in 9.0.x #155580 (issue: #155243)
• Keep scroll contexts on transient search queue rejection #155697 (issue: #90912)
• Limit aggregation nesting depth with search.aggs.max_nested_depth #155743
• Reject null values in search_after instead of failing the search #132434 (issue: #132370)
• Stop returning a user field named _type as search hit metadata #155706 (issue: #110438)

Snapshot/Restore

• Halt the node on fatal errors during S3 multipart uploads #156765

Transform

• Preserve security headers when copying a transform configuration #156191

Vector Search

• Fix search failures when many field patterns match no vector fields #156466
• Score nested kNN inner_hits like the query phase #156332 (issue: #138496)