From 549dc7763b2dabd0705340514d3fef375433e4d5 Mon Sep 17 00:00:00 2001 From: Dariusz Wilkialis Date: Fri, 26 Jun 2026 16:33:54 +0200 Subject: [PATCH 1/2] Document known security integration issue --- release-notes/elastic-security/known-issues.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index 4150522619..cb5185e713 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -23,6 +23,20 @@ Known issues are significant defects or limitations that may impact your impleme % ::: +:::{dropdown} Problem Child and DGA integrations fail to install +**Applies to: {{stack}} 9.3.6 and 8.19.17** + +**Impact**
+The [Problem Child](https://www.elastic.co/docs/reference/integrations/problemchild) and [DGA](https://www.elastic.co/docs/reference/integrations/dga) integration packages fail to install. This is caused by an {{es}} validation that limits field names in trained models to 100 characters. + +**Workaround**
+Upgrade to {{stack}} 9.3.7 or 8.19.18. + +**Resolved**
+ +Resolved in {{stack}} 9.3.7 and 8.19.18. +::: + :::{dropdown} Upgrading to 9.3.x fails when a rule action contains oversized content **Applies to: {{stack}} 9.3.0, 9.3.1, 9.3.2, 9.3.3, 9.3.4** From 123b2540f59baa8dda9330bf9ada2ea62f41e55c Mon Sep 17 00:00:00 2001 From: Dariusz Wilkialis Date: Fri, 26 Jun 2026 16:51:17 +0200 Subject: [PATCH 2/2] Update release-notes/elastic-security/known-issues.md Co-authored-by: Susan <23287722+susan-shu-c@users.noreply.github.com> --- release-notes/elastic-security/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md index cb5185e713..41965ae5ec 100644 --- a/release-notes/elastic-security/known-issues.md +++ b/release-notes/elastic-security/known-issues.md @@ -27,7 +27,7 @@ Known issues are significant defects or limitations that may impact your impleme **Applies to: {{stack}} 9.3.6 and 8.19.17** **Impact**
-The [Problem Child](https://www.elastic.co/docs/reference/integrations/problemchild) and [DGA](https://www.elastic.co/docs/reference/integrations/dga) integration packages fail to install. This is caused by an {{es}} validation that limits field names in trained models to 100 characters. +The [ProblemChild](https://www.elastic.co/docs/reference/integrations/problemchild) (Living off the Land Detection) and [DGA](https://www.elastic.co/docs/reference/integrations/dga) integration packages fail to install. This is caused by an {{es}} validation that limits field names in trained models to 100 characters. **Workaround**
Upgrade to {{stack}} 9.3.7 or 8.19.18.