From 406b324b824377828d190d718e50c470425f4358 Mon Sep 17 00:00:00 2001 From: natasha-moore-elastic Date: Tue, 24 Jun 2025 14:27:37 +0100 Subject: [PATCH 1/2] Adds KB settings known issue to Security known issues --- .../elastic-security/known-issues.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index e7d7a0e133..1158a646b1 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -16,6 +16,54 @@ Known issues are significant defects or limitations that may impact your impleme % ::: +:::{dropdown} Security AI Assistant Knowledge Base settings UI not displaying + +Applies to: 9.0.3 + +On June 24, 2025, an error was discovered that prevents the AI Assistant Knowledge Base settings UI from displaying, including the **Setup Knowledge Base** button and alert configuration options. As a result, the Knowledge Base cannot be set up or configured through the Knowledge Base settings UI. + +**Workaround** + +While the UI for configuring the Knowledge Base is blocked, you can still set it up and manage entries using the following approach: + +* Enable the Knowledge Base +[from an AI Assistant conversation](/solutions/security/ai/ai-assistant-knowledge-base.md#_option_1_enable_knowledge_base_from_an_ai_assistant_conversation). + +* List Knowledge Base entries using the [find knowledge base entry API]({{kib-apis}}/operation/operation-findknowledgebaseentries): + + ```console + GET /api/security_ai_assistant/knowledge_base/entries/_find?page=1&per_page=100 + ``` + +* Create a Knowledge Base index entry using the [create knowledge base entry API]({{kib-apis}}/operation/operation-createknowledgebaseentry): + + ```console + POST /api/security_ai_assistant/knowledge_base/entries + { + "type": "index", + "name": "test", + "index": "test-index", + "field": "mock", + "outputFields": ["example"], + "description": "test description", + "queryDescription": "test query description" + } + ``` + +* Create a Knowledge Base document entry using the [create knowledge base entry API]({{kib-apis}}/operation/operation-createknowledgebaseentry): + + ```console + POST /api/security_ai_assistant/knowledge_base/entries + { + "type": "document", + "kbResource": "user", + "source": "user", + "name": "doc" + } + ``` + +::: + :::{dropdown} The entity risk score feature may stop persisting risk score documents Applies to: {{stack}} 9.0.0, 9.0.1, 9.0.2 From 9a90949c67d34513e9455c8fcfb4ceb6b437fbbc Mon Sep 17 00:00:00 2001 From: natasha-moore-elastic Date: Tue, 24 Jun 2025 15:06:12 +0100 Subject: [PATCH 2/2] Tweak workaround --- release-notes/elastic-security/known-issues.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index 1158a646b1..f8272bffd2 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -24,11 +24,11 @@ On June 24, 2025, an error was discovered that prevents the AI Assistant Knowled **Workaround** -While the UI for configuring the Knowledge Base is blocked, you can still set it up and manage entries using the following approach: - -* Enable the Knowledge Base +While the UI for configuring the Knowledge Base is blocked, you can still enable it [from an AI Assistant conversation](/solutions/security/ai/ai-assistant-knowledge-base.md#_option_1_enable_knowledge_base_from_an_ai_assistant_conversation). +After enabling the Knowledge Base, you can manage entries using the AI Assistant API: + * List Knowledge Base entries using the [find knowledge base entry API]({{kib-apis}}/operation/operation-findknowledgebaseentries): ```console