Elasticsearch 8.3.0 Release Notes: Known Issues, Enhancements, and New Features

Elasticsearch 8.3.0 is a distributed, multi‑tenant full‑text search engine built on Lucene and released under the SSPL + Elastic License.

Known issues

Authentication failures when using SAS tokens to create or access snapshots of Azure snapshot repositories may affect self‑managed deployments of 8.3.0.

Deprecations

Authentication configuration without a bound password in LDAP or Active Directory is deprecated.

Enhancements

Aggregations

Improved min/max performance in random_sampler aggregation.

Authentication

Configurable claims support in JWT Realm tokens.

Warning when disabling user roles due to document or field‑level security requirements.

TokenService now decodes JWT and changes warning to debug level.

Authorization

Improved runtime denied error messages.

Performance boost for boolean‑only “Has Privilege” responses.

Relaxed role name length limits in role API.

Extended kibana_system role for Osquery manager.

Autoscaling

Added CPU range support for required nodes.

New features

Geo

New geo_grid query usable with geogrid aggregations.

Health

Added support for impact_areas in health impacts.

Added troubleshooting guide for shard allocation actions.

Added potential impacts for remaining health indicators.

Health API drill‑down improvements.

Tracking of master history per node.

Index‑priority sorting of index names.

Mapping

Support for dots in field names for metrics use cases.

Synthetic source support.

SQL

Partial results allowed in SQL queries.

Search

Snapshots can be used as simple archives.

TSDB

Downsampling implemented on time‑series indices.