Skip to content

Adds KB settings known issue to Security known issues #1898

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Jun 24, 2025
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
48 changes: 48 additions & 0 deletions release-notes/elastic-security/known-issues.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,54 @@ Known issues are significant defects or limitations that may impact your impleme

% :::

:::{dropdown} Security AI Assistant Knowledge Base settings UI not displaying

Applies to: 9.0.3

On June 24, 2025, an error was discovered that prevents the AI Assistant Knowledge Base settings UI from displaying, including the **Setup Knowledge Base** button and alert configuration options. As a result, the Knowledge Base cannot be set up or configured through the Knowledge Base settings UI.

**Workaround**

While the UI for configuring the Knowledge Base is blocked, you can still enable it
[from an AI Assistant conversation](/solutions/security/ai/ai-assistant-knowledge-base.md#_option_1_enable_knowledge_base_from_an_ai_assistant_conversation).

After enabling the Knowledge Base, you can manage entries using the AI Assistant API:

* List Knowledge Base entries using the [find knowledge base entry API]({{kib-apis}}/operation/operation-findknowledgebaseentries):

```console
GET /api/security_ai_assistant/knowledge_base/entries/_find?page=1&per_page=100
```

* Create a Knowledge Base index entry using the [create knowledge base entry API]({{kib-apis}}/operation/operation-createknowledgebaseentry):

```console
POST /api/security_ai_assistant/knowledge_base/entries
{
"type": "index",
"name": "test",
"index": "test-index",
"field": "mock",
"outputFields": ["example"],
"description": "test description",
"queryDescription": "test query description"
}
```

* Create a Knowledge Base document entry using the [create knowledge base entry API]({{kib-apis}}/operation/operation-createknowledgebaseentry):

```console
POST /api/security_ai_assistant/knowledge_base/entries
{
"type": "document",
"kbResource": "user",
"source": "user",
"name": "doc"
}
```

:::

:::{dropdown} The entity risk score feature may stop persisting risk score documents

Applies to: {{stack}} 9.0.0, 9.0.1, 9.0.2
Expand Down
Loading