Summary
The Inbox app now splits into an 'Awaiting response' table and a 'History' audit feed, giving a durable, searchable, filterable record of every waitForInput step that has been responded to, timed out, or whose parent workflow was deleted. Responses now also surface an inline 'reasoning' summary from the prior step when available, and concurrent responses are resolved first-writer-wins with a clean conflict error for losing responders. The feature remains gated behind xpack.inbox.enabled, which is not on by default.
Why this needs docs: Most of the PR body is internal audit-trail plumbing (concurrency handling, schema additions, retention internals) that is not user-facing per the release_note:skip label, so the title and gap are narrowed to the actual visible surface — the Inbox app's History tab and reasoning display; confidence is moderated because the base Inbox app's documentation maturity/status wasn't independently confirmed beyond the flag gate.
Resources
- PR #269218 — [Security Solution] Adds Inbox history
Screenshots from PR
Availability
| Channel |
Details |
| Stack |
v9.5.0 |
| Serverless |
Jul 6–Jul 10 |
| Feature status |
preview |
| Feature flag |
xpack.inbox.enabled |
Created with Docs Quest Scanner by @nastasha-solomon
Suggested edits
Human-in-the-loop workflows > Resume a paused workflow > From the Kibana UI
- What the docs say: Open the execution view. The paused step renders a form generated from the schema. Fill it in, submit, and the workflow resumes.
- What to add: This description is now incomplete: reviewers respond through the Inbox app's 'Awaiting response' table and Respond flyout, not just a generic execution-view form, and the flyout now also shows an inline reasoning summary when the preceding step produced one. Also note that if two people try to respond to the same step, only the first response is applied and the other gets a conflict error. Applies from 9.5.0 (technical preview, requires xpack.inbox.enabled) and in serverless.
Human-in-the-loop workflows > New subsection after pause/resume description
- What the docs say: Page currently stops at describing pause and resume behavior, with no mention of any audit trail or history view.
- What to add: Add a short section describing the Inbox app's History tab: a searchable, sortable, filterable audit feed of waitForInput steps that were responded to, timed out, or whose parent workflow was deleted (flagged with a 'Workflow deleted' badge). Include a caveat that history is purged if the workflow is force-deleted. Applies from 9.5.0 (technical preview, requires xpack.inbox.enabled) and in serverless.
Summary
The Inbox app now splits into an 'Awaiting response' table and a 'History' audit feed, giving a durable, searchable, filterable record of every waitForInput step that has been responded to, timed out, or whose parent workflow was deleted. Responses now also surface an inline 'reasoning' summary from the prior step when available, and concurrent responses are resolved first-writer-wins with a clean conflict error for losing responders. The feature remains gated behind xpack.inbox.enabled, which is not on by default.
Why this needs docs: Most of the PR body is internal audit-trail plumbing (concurrency handling, schema additions, retention internals) that is not user-facing per the release_note:skip label, so the title and gap are narrowed to the actual visible surface — the Inbox app's History tab and reasoning display; confidence is moderated because the base Inbox app's documentation maturity/status wasn't independently confirmed beyond the flag gate.
Resources
Screenshots from PR
Availability
Created with Docs Quest Scanner by @nastasha-solomon
Suggested edits
Human-in-the-loop workflows > Resume a paused workflow > From the Kibana UI
Human-in-the-loop workflows > New subsection after pause/resume description