[Fleet] Add toggle that grants permission to write to `logs` datastream by Supplementing · Pull Request #233374 · elastic/kibana

Supplementing · 2025-08-28T17:09:17Z

Summary

Closes https://github.com/elastic/ingest-dev/issues/5914

Adds a toggle to the ES output flyout to enable writing to logs, and logs.* streams
Enabling this adds relevant permissions for agent policies that use the output

Demo/Testing instructions:

video1451176562.mp4

Note: Video was recorded before the property was renamed to write_to_logs_streams, that is the new value you'll see during testing

Checklist

Check the PR satisfies following conditions.

Reviewers should verify this PR satisfies this list as well.

Any text added follows EUI's writing guidelines, uses sentence case text and includes i18n support
Documentation was added for features that require explanation or tutorials
Unit or functional tests were updated or added to match the most common scenarios
If a plugin configuration key changed, check if it needs to be allowlisted in the cloud and added to the docker list
This was checked for breaking HTTP API changes, and any breaking changes have been approved by the breaking-change committee. The release_note:breaking label should be applied in these situations.
Flaky Test Runner was used on any tests changed
The PR description includes the appropriate Release Notes section, and the correct release_note:* label is applied per the guidelines
Review the backport guidelines and apply applicable backport:* labels.

Identify risks

N/A

Release Note

Added write to logs streams toggle on outputs allowing the user to have greater control of whether agents that use an output have permission to write to the logs stream.

elasticmachine · 2025-08-28T17:09:21Z

Pinging @elastic/fleet (Team:Fleet)

Supplementing · 2025-08-28T17:10:43Z

@elasticmachine merge upstream

x-pack/platform/plugins/shared/fleet/server/types/so_attributes.ts

…t --include-path /api/status --include-path /api/alerting/rule/ --include-path /api/alerting/rules --include-path /api/actions --include-path /api/security/role --include-path /api/spaces --include-path /api/streams --include-path /api/fleet --include-path /api/saved_objects/_import --include-path /api/saved_objects/_export --include-path /api/maintenance_window --update'

nchaulet

code LGTM 🚀 one small question about API property naming

…t --include-path /api/status --include-path /api/alerting/rule/ --include-path /api/alerting/rules --include-path /api/actions --include-path /api/security/role --include-path /api/spaces --include-path /api/streams --include-path /api/fleet --include-path /api/saved_objects/_import --include-path /api/saved_objects/_export --include-path /api/maintenance_window --update'

Supplementing · 2025-08-29T17:09:36Z

@elasticmachine merge upstream

Supplementing · 2025-08-29T17:10:32Z

CI cypress failure seems to be a random timeout issue, passes on local so re-running CI

Supplementing · 2025-09-02T20:40:28Z

@elasticmachine merge upstream

…t --include-path /api/status --include-path /api/alerting/rule/ --include-path /api/alerting/rules --include-path /api/actions --include-path /api/security/role --include-path /api/spaces --include-path /api/streams --include-path /api/fleet --include-path /api/saved_objects/_import --include-path /api/saved_objects/_export --include-path /api/maintenance_window --update'

elasticmachine · 2025-09-02T23:11:01Z

💚 Build Succeeded

Buildkite Build
Commit: 53aaffb

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
`fleet`	2.1MB	2.1MB	+733.0B

History

💔 Build #334233 failed 68d816c
💔 Build #333845 failed 9edcbfd

…am (elastic#233374) ## Summary Closes elastic/ingest-dev#5914 - Adds a toggle to the ES output flyout to enable writing to logs, and logs.* streams - Enabling this adds relevant permissions for agent policies that use the output **Demo/Testing instructions:** https://github.com/user-attachments/assets/68425625-fc3c-4059-ab7c-5f70c853b10d **Note: Video was recorded before the property was renamed to `write_to_logs_streams`, that is the new value you'll see during testing** ### Checklist Check the PR satisfies following conditions. Reviewers should verify this PR satisfies this list as well. - [ ] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md) - [ ] [Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html) was added for features that require explanation or tutorials - [ ] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios - [ ] If a plugin configuration key changed, check if it needs to be allowlisted in the cloud and added to the [docker list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker) - [ ] This was checked for breaking HTTP API changes, and any breaking changes have been approved by the breaking-change committee. The `release_note:breaking` label should be applied in these situations. - [ ] [Flaky Test Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was used on any tests changed - [ ] The PR description includes the appropriate Release Notes section, and the correct `release_note:*` label is applied per the [guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process) - [ ] Review the [backport guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing) and apply applicable `backport:*` labels. ### Identify risks N/A ## Release Note - Added `write to logs streams` toggle on outputs allowing the user to have greater control of whether agents that use an output have permission to write to the logs stream. --------- Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com> Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>

Supplementing added 3 commits August 20, 2025 13:40

initial implementation, not yet tested for accuracy

d061c64

added missing period

5abde9a

made some adjustments

e8bbe73

Supplementing requested a review from a team as a code owner August 28, 2025 17:09

Supplementing added backport:skip This PR does not require backporting Team:Fleet Team label for Observability Data Collection Fleet team release_note:feature Makes this part of the condensed release notes labels Aug 28, 2025

added missing period in helpText

25cca26

Merge branch 'main' into enhancement-opt-in-logs-datastream

ae4c899

nchaulet reviewed Aug 28, 2025

View reviewed changes

x-pack/platform/plugins/shared/fleet/server/types/so_attributes.ts Outdated Show resolved Hide resolved

nchaulet approved these changes Aug 28, 2025

View reviewed changes

[CI] Auto-commit changed files from 'make api-docs'

35ce001

elastic-vault-github-plugin-prod bot requested a review from a team as a code owner August 28, 2025 17:42

Supplementing added 2 commits August 28, 2025 13:09

changed naming to include logs

577c206

merged in upstream

fe1c703

Supplementing requested a review from nchaulet August 28, 2025 19:13

nchaulet approved these changes Aug 28, 2025

View reviewed changes

bmorelli25 requested a review from mdbirnstiehl August 28, 2025 19:40

[CI] Auto-commit changed files from 'make api-docs'

9edcbfd

mdbirnstiehl approved these changes Aug 29, 2025

View reviewed changes

Merge branch 'main' into enhancement-opt-in-logs-datastream

68d816c

Supplementing enabled auto-merge (squash) August 29, 2025 17:10

Supplementing added 2 commits September 2, 2025 14:39

updated other schemas so that they can accept the new field

101aa7c

merged upstream

e1ef177

elasticmachine and others added 3 commits September 2, 2025 16:40

Merge branch 'main' into enhancement-opt-in-logs-datastream

878ec83

[CI] Auto-commit changed files from 'make api-docs'

53aaffb

Supplementing merged commit cc0bab0 into elastic:main Sep 2, 2025
12 checks passed

kibanamachine added the v9.2.0 label Sep 2, 2025

rdner mentioned this pull request Sep 12, 2025

Add logs stream support elastic/integrations#14846

Merged

4 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Fleet] Add toggle that grants permission to write to `logs` datastream#233374

[Fleet] Add toggle that grants permission to write to `logs` datastream#233374
Supplementing merged 17 commits intoelastic:mainfrom
Supplementing:enhancement-opt-in-logs-datastream

Supplementing commented Aug 28, 2025 •

edited

Loading

elasticmachine commented Aug 28, 2025

Supplementing commented Aug 28, 2025

Uh oh!

nchaulet left a comment

Supplementing commented Aug 29, 2025

Supplementing commented Aug 29, 2025

Supplementing commented Sep 2, 2025

Uh oh!

elasticmachine commented Sep 2, 2025

Labels

5 participants

Conversation

Supplementing commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Checklist

Identify risks

Release Note

elasticmachine commented Aug 28, 2025

Supplementing commented Aug 28, 2025

Uh oh!

nchaulet left a comment

Choose a reason for hiding this comment

Supplementing commented Aug 29, 2025

Supplementing commented Aug 29, 2025

Supplementing commented Sep 2, 2025

Uh oh!

elasticmachine commented Sep 2, 2025

💚 Build Succeeded

Metrics [docs]

Async chunks

History

Labels

5 participants

Supplementing commented Aug 28, 2025 •

edited

Loading