Clarify Automatic Migration trouble shooting steps when no integrations shown for translated rules by Copilot · Pull Request #7123 · elastic/docs-content

Copilot · 2026-06-26T14:15:08Z

This PR tightens wording in the Automatic Migration FAQ and closes a troubleshooting gap where translated rules show no integrations despite correct index mapping. It also makes the troubleshooting flow more actionable by directing users to the correct Kibana UI location before API checks.

FAQ wording cleanup
- Updated the FAQ question in solutions/security/get-started/automatic-migration.md to focus on the actionable symptom:
  - from mixed semantic-search/integration phrasing
  - to “Why are no integrations shown for translated rules?”
Troubleshooting flow: operator guidance
- In solutions/security/get-started/automatic-migration-troubleshooting.md Step 1, added explicit guidance on where to run APIs:
  - Kibana Dev Tools Console link
  - Self-managed path: Management → Dev Tools
  - Elastic Cloud path: Developer tools
Troubleshooting flow: post-Step-13 model verification

…entry

logeekal

Great initiative angela to add these to the docs. It looks good but i have some small comments.

logeekal · 2026-06-30T08:35:13Z

+- **Semantic search returning no results or wrong results** — Jina produces dense vectors; ELSER produces sparse vectors; they are incompatible vector spaces.
+- **`function_score` queries with `min_score` returning zero hits** — scores computed against mismatched embeddings are meaningless and rarely cross any threshold.
+
+The root cause is that when the index was created, the ELSER inference endpoint was not available, so Elasticsearch fell back to whichever inference endpoint was configured. The field name `elser_embedding` is just a label; what matters is the `inference_id` baked into the index mapping at creation time.


Can we show here the example of the wrong inference model ID and query to check it.

added a reference to see the inference model ID.
https://github.com/elastic/docs-content/pull/7123/changes#diff-f411b451c4783970ac6e6c8440f549f60551e166db8420ea644a3b63f8a27fcaR79

logeekal · 2026-06-30T08:36:36Z

+PUT _inference/sparse_embedding/elser-2-elasticsearch
+{
+  "service": "elser",
+  "service_settings": { "num_allocations": 1, "num_threads": 1 }
+}
+```


Are we sure about this? Should we direct user to go to Trained Models -> Deploy Elser?

Added a link to
https://www.elastic.co/docs/explore-analyze/machine-learning/nlp/ml-nlp-elser#download-deploy-elser

The request is coming from the page as well.

…and steps for ELSER inference endpoint configuration.

github-actions · 2026-06-30T15:07:12Z

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

github-actions · 2026-06-30T15:08:23Z

🔍 Preview links for changed docs

github-actions · 2026-06-30T15:08:31Z

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

…clarifying the API request instructions.

…ic migration documentation

… to use ELSER as the default inference modal (#275766) (#276269) # Backport This will backport the following commits from `main` to `9.4`: - [[Automatic Migration] Set automatic migration integration index to use ELSER as the default inference modal (#275766)](#275766)  ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sorenlouv/backport)  Co-authored-by: Angela Chuang <6295984+angorayc@users.noreply.github.com>

logeekal · 2026-07-03T11:10:35Z

+    "_source": {
+      "excludes": ["elser_embedding"]
+    }
+  },
+  "dest": {
+    "index": "kibana-siem-rule-migrations-integrations-backup"
+  },
+  "script": {
+    "source": """
+      def embedding = ctx._source.remove('elser_embedding');
+      if (embedding != null) {
+        if (embedding instanceof Map && embedding.containsKey('text')) {
+          ctx._source['elser_embedding'] = embedding['text'];
+        } else if (embedding instanceof String) {
+          ctx._source['elser_embedding'] = embedding;
+        }
+      }
+    """,
+    "lang": "painless"


I don't this is correct. I think elster_embedding should be re-indexed as-is. embeddings are created in a separate field called _inference_fields.

Alternatively, we can simply create an empty index. Integration index is populated automatically when a migration is started.

logeekal · 2026-07-03T11:11:10Z

+
+- ELSER ML model must be available on the cluster.
+- You must have index admin privileges.
+- Expect downtime or degraded search on this index during the reindex process.


Make sure any automatic migration is not running. If it is, it should be stopped.

Add ELSER troubleshooting guide and FAQ entry for automatic migration

9a4d23e

Copilot AI assigned Copilot and angorayc Jun 26, 2026

Copilot created this pull request from a session on behalf of angorayc June 26, 2026 14:15 View session

Copilot started work on behalf of angorayc June 26, 2026 14:16 View session

Copilot finished work on behalf of angorayc June 26, 2026 14:17

Copilot AI requested a review from angorayc June 26, 2026 14:17

Copilot started work on behalf of angorayc June 26, 2026 14:23 View session

Copilot finished work on behalf of angorayc June 26, 2026 14:25

Copilot started work on behalf of angorayc June 26, 2026 14:26 View session

Copilot finished work on behalf of angorayc June 26, 2026 14:27

angorayc mentioned this pull request Jun 26, 2026

[Automatic Migration] Improves integration matching quality of MS Sentinel Rules elastic/kibana#274497

Merged

13 tasks

Copilot started work on behalf of angorayc June 26, 2026 14:47 View session

Add 'no integrations found' symptom to troubleshooting guide and FAQ …

36a3b49

…entry

Copilot AI changed the title ~~Adding FAQ entry and troubleshooting guide for elser_embedding~~ docs(security): add troubleshooting guide for wrong ELSER inference model on elser_embedding field Jun 26, 2026

Copilot finished work on behalf of angorayc June 26, 2026 14:48

Copilot started work on behalf of angorayc June 26, 2026 14:51 View session

Rename automatic migration troubleshooting heading

a8cc898

Copilot AI changed the title ~~docs(security): add troubleshooting guide for wrong ELSER inference model on elser_embedding field~~ Document ELSER inference mismatch causing missing translated-rule integrations Jun 26, 2026

Copilot finished work on behalf of angorayc June 26, 2026 14:53

Copilot started work on behalf of angorayc June 26, 2026 14:56 View session

Update automatic migration FAQ heading

57bd73b

Copilot AI changed the title ~~Document ELSER inference mismatch causing missing translated-rule integrations~~ Clarify Automatic Migration FAQ heading for translated rules Jun 26, 2026

Copilot finished work on behalf of angorayc June 26, 2026 14:58

Copilot started work on behalf of angorayc June 26, 2026 15:19 View session

Add ELSER deployment follow-up steps

8901c18

Copilot AI changed the title ~~Clarify Automatic Migration FAQ heading for translated rules~~ Clarify Automatic Migration integrations guidance and add ELSER deployment recovery steps Jun 26, 2026

Copilot finished work on behalf of angorayc June 26, 2026 15:20

Copilot started work on behalf of angorayc June 26, 2026 15:37 View session

Add Dev Tools guidance to Step 1

323e563

Copilot AI changed the title ~~Clarify Automatic Migration integrations guidance and add ELSER deployment recovery steps~~ Clarify Automatic Migration FAQ and extend troubleshooting with Dev Tools + ELSER deployment checks Jun 26, 2026

Copilot finished work on behalf of angorayc June 26, 2026 15:39

angorayc marked this pull request as ready for review June 26, 2026 16:51

angorayc requested review from a team as code owners June 26, 2026 16:51

angorayc approved these changes Jun 26, 2026

View reviewed changes

angorayc changed the title ~~Clarify Automatic Migration FAQ and extend troubleshooting with Dev Tools + ELSER deployment checks~~ Clarify Automatic Migration trouble shooting steps when no integrations shown for translated rules Jun 26, 2026

angorayc requested a review from logeekal June 29, 2026 08:11

logeekal reviewed Jun 30, 2026

View reviewed changes

florent-leborgne removed the request for review from a team June 30, 2026 09:40

Update automatic migration troubleshooting guide to clarify symptoms …

acf3a2e

…and steps for ELSER inference endpoint configuration.

github-actions Bot deployed to docs-preview June 30, 2026 15:10 View deployment

Adding verification steps for the elser_embedding inference ID and …

80d9d1a

…clarifying the API request instructions.

github-actions Bot deployed to docs-preview June 30, 2026 15:34 View deployment

Addressed the Elastic Docs Style Checker comments

f8be83a

github-actions Bot deployed to docs-preview June 30, 2026 15:45 View deployment

angorayc requested a review from logeekal June 30, 2026 15:51

This was referenced Jul 1, 2026

[Automatic Migration] No recommended integrations for translated rules elastic/kibana#275757

Open

[Automatic Migration] Set automatic migration integration index to use ELSER as the default inference modal elastic/kibana#275766

Merged

Add requirement for ELSER availability in rule migrations for automat…

1712990

…ic migration documentation

angorayc requested a review from a team as a code owner July 1, 2026 13:03

github-actions Bot deployed to docs-preview July 1, 2026 13:06 View deployment

logeekal reviewed Jul 7, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Clarify Automatic Migration trouble shooting steps when no integrations shown for translated rules#7123

Clarify Automatic Migration trouble shooting steps when no integrations shown for translated rules#7123
angorayc with Copilot wants to merge 10 commits into
mainfrom
copilot/add-faq-entry-and-troubleshooting-guide

Copilot AI commented Jun 26, 2026 •

edited by angorayc

Loading

Uh oh!

logeekal left a comment

Uh oh!

Uh oh!

Uh oh!

logeekal Jun 30, 2026

Uh oh!

angorayc Jun 30, 2026

Uh oh!

logeekal Jun 30, 2026

Uh oh!

angorayc Jun 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

github-actions Bot commented Jun 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 30, 2026 •

edited

Loading

Uh oh!

logeekal Jul 3, 2026

Uh oh!

logeekal Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Copilot AI commented Jun 26, 2026 • edited by angorayc Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

logeekal left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

logeekal Jun 30, 2026

Choose a reason for hiding this comment

Uh oh!

angorayc Jun 30, 2026

Choose a reason for hiding this comment

Uh oh!

logeekal Jun 30, 2026

Choose a reason for hiding this comment

Uh oh!

angorayc Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 30, 2026

Elastic Docs AI PR menu

Uh oh!

github-actions Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Preview links for changed docs

Uh oh!

github-actions Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Elastic Docs Style Checker (Vale)

Uh oh!

logeekal Jul 3, 2026

Choose a reason for hiding this comment

Uh oh!

logeekal Jul 3, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jun 26, 2026 •

edited by angorayc

Loading

angorayc Jun 30, 2026 •

edited

Loading

github-actions Bot commented Jun 30, 2026 •

edited

Loading

github-actions Bot commented Jun 30, 2026 •

edited

Loading