Release notes

15.2.0

Breaking changes

  • Changed the default highlight settings in the Advanced Settings. Previously, it was impossible to change the highlight settings; users could only specify whether to use the plain or unified highlighter. Users can now specify a full highlight configuration object in the Advanced Settings default:highlight property, and override it per entity table under Data Model > Entity Table > Options.

  • Changed the default highlight configuration applied to all search requests from dashboards and global search to:

    {
  "*": {
    "type": "plain",
    "fragment_size": 100,
    "number_of_fragments": 5,
    "max_analyzed_offset": 100000
  }
}

    These defaults make search requests across the application faster, while giving administrators the ability to fine-tune the highlight settings.

New features

  • Added support for Elasticsearch 9. The latest supported version in this release is ES 9.2.6. Also added support for Federate 39. For a full list of supported versions, see Version Compatibility Matrix.

  • Added computed fields scripts which use the Siren Scripting API to aid data fetching and enrichment across the app. They are used predominantly to supplement graph nodes and DataRecord with externally related data. For more details, see the Computed Fields Scripts API.

  • Added a Siren API method to retrieve user information, including the principal name and assigned roles. For more details, see the getAuthInfo method in Investigate Core APIs.

  • Added the onlyMatchNodesOnGraph parameter to the expandByRelation Siren API to limit expansion to nodes already present on the graph.

  • Added a new ping Siren API for the Graph Browser visualization that draws a temporary expanding circle around a node to direct attention to it. For more details, see the graphBrowserVis.ping method in Investigate Core APIs.

  • Added support in the Graph Browser for selecting child nodes of collapsed group as the main selection from the Selection Table.

  • Disabled the Group action in the Graph Browser is when the selection includes both child nodes of a collapsed group and free nodes.

  • Siren API now supports retrieving hidden relations through a new optional parameter on relation retrieval methods. By setting allowHidden: true, scripts can access hidden relations that were previously only visible in the graph UI as dotted/faded connections. For more details, see the `options.allowHidden method in Investigate Core APIs.

  • Added support for token-based authentication for WMS layers with refresh functionality. For configuration details, see Configuration for WMS layers protected by token-based authentication.

  • Added support for accessing the Saved Objects API using basic authentication (sirenserver) when Siren Investigate is configured to use other authentication methods, such as SAML. To enable this, set investigate_access_control.allowBasicAuthForApiPaths to true and configure the allowed API path prefixes using investigate_access_control.basicAuthApiPathPrefixes in investigate.yml.

  • Graph Browser cards now support custom react based components and additional events based on which the cards can be controlled. For more details, see typedefs GraphDataIds, GraphSelectionEventData, GraphItemsEventData, GraphInitEventData and CardConfiguration in Investigate Core APIs.

  • Added support for multiple WMS layers, allowing them to be organized in a dedicated section, reordered, and enabled or disabled independently.

Improvements

  • Added DataModelEntity.getFormattedFieldValues(values, field) function to format values according to the Data Model, without requiring a DataRecord.

  • Extended DataModelEntity.getRecordFormattedFieldValues, DataModelEntity.getRecordLabel, and DataModelEntity.getRecordRawFieldValues functions to accept an EsHit input.

  • Made the Import Wizard navigation buttons sticky so they remain visible while scrolling.

  • Added missing audit log entries for graph and dashboard create, update, and delete operations.

  • Added support for resizing column widths on the Data model > Fields tab, along with a horizontal scrollbar to improve navigation.

  • Improved error message clarity when pinning and unpinning invalid IDs in the graph using the Siren API.

  • Added a new never option to index_interval for both audit and alarms indices, allowing data to be written to the same index until the setting is explicitly changed.

  • Added a new hybrid undo/redo stack for the Graph Browser. The new stack will allow users to hold more undoable operations.

  • Improved value persistence for range field filters so entered values are retained when switching between operators and the Save button is not disabled unnecessarily.

  • Added documentation for Icon Pack saved objects.

  • Added tooltips to Siren Search result icons to display the name of the entity table each record belongs to.

Bug Fixes

  • Fixed an issue where toast notifications could block interaction with underlying UI elements.

  • Fixed an issue that occurred when copying a style from one text box to another.

  • Fixed an issue where users without update permissions could see a stale data model table name after a save was denied, causing an inconsistent state and subsequent save errors.

  • Fixed an issue where items that were not previously on the map could appear after an undo action.

  • Fixed an issue in the Graph Browser where the Select Extend context menu option was incorrectly enabled for edges.

  • Fixed an issue where exporting dashboard table data could fail after sorting by a scripted field.

  • Fixed an issue where rapidly switching from Map to Graph could trigger errors.

  • Fixed an issue where record-as-relation edges remained visible when they fell outside the selected time range in the Graph Browser time bar.

  • Fixed an issue where time bars in the Graph Browser timeline could disappear when displaying a large time range.

  • Fixed an issue where users without the required permissions could still see relation actions in the Data model tab.

  • Fixed an issue in the Siren API where scripted fields were not returned for equivalent records when the useEr (use entity resolution) flag was set to true.

  • Fixed an issue where the styling menu in the Selection Table could break when styling a child node of a collapsed group.

  • Fixed an issue where search highlights were not visible when the matched text was surrounded by long passages.

  • Fixed an issue that caused the toolbar on saved graphs to continuously re-render.

  • Fixed an issue where linked items were not displayed in Record View for child searches.

  • Fixed a migration issue that caused an incorrect object count to be reported during the object detection stage.

  • Fixed an issue where it was not possible to do undo/redo operations in groups in the Graph Browser.

  • Fixed an issue where the graph time bar ignored time data provided by the Time/Location lens when running in Saturn mode.

  • Fixed an issue where clicking the Diagnostics button on the Status page could result in an error.

  • Fixed an issue where edge group entries in the Selection Table were not restored after clearing the filter.

  • Fixed an issue where Siren Investigate could fail to start if the kibana.defaultDataspace setting in investigate.yml contained a dataspace name with a hyphen (-).

  • Fixed an issue where scripted number fields with the is operator and value 0 would fail to load, due to a falsy check in filter mapping logic.

  • Fixed an issue where scripted number fields with the is between operator and value 0 would not allow saving, or would generate an invalid Painless script (compile error) due to improper falsy checks.

  • Fixed an issue where switching between regular and scripted fields could result in errors due to incorrectly preserved operators and filter values.

  • Fixed an issue where column grouping in the graph Selection Table was incorrectly applied across all tabs.

  • Fixed an issue in the Graph Browser where undoing the deletion of nodes did not re-enable the toolbar buttons.

  • Fixed an issue in the Graph Browser Selection Table where users could not search for numeric values.

  • Fixed an issue where using Ctrl-click to open the context menu on macOS incorrectly triggered brush selection.

  • Fixed an issue where rapidly changing the popularity field count on the Data Model page could result in version conflict errors.

  • Fixed an issue where the Clear All button for toast notifications would scroll with the page instead of remaining visible.

  • Fixed an issue where ping requests sent from the login screen would fail with a 403 error.

  • Fixed an issue where Siren Search results could unexpectedly execute templates from a previous search.

Security Fixes