Merge branch 'master' into drilldowns-temp

.github/CODEOWNERS

@@ -348,6 +348,7 @@
 
 # Security Solution sub teams
 /x-pack/plugins/case @elastic/security-threat-hunting
+/x-pack/plugins/timelines @elastic/security-threat-hunting
 /x-pack/test/case_api_integration @elastic/security-threat-hunting
 /x-pack/plugins/lists @elastic/security-detections-response
 

docs/api/actions-and-connectors/legacy/create.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Create connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<create-connector-api>> instead.
+deprecated::[7.13.0,Use <<create-connector-api>> instead.]
 
 Creates a connector.
 

docs/api/actions-and-connectors/legacy/delete.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Delete connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<delete-connector-api>> instead.
+deprecated::[7.13.0,Use <<delete-connector-api>> instead.]
 
 Deletes a connector by ID.
 

docs/api/actions-and-connectors/legacy/execute.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Execute connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<execute-connector-api>> instead.
+deprecated::[7.13.0,Use <<execute-connector-api>> instead.]
 
 Executes a connector by ID.
 

docs/api/actions-and-connectors/legacy/get.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Get connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-connector-api>> instead.
+deprecated::[7.13.0,Use <<get-connector-api>> instead.]
 
 Retrieves a connector by ID.
 

docs/api/actions-and-connectors/legacy/get_all.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Get all connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-all-connectors-api>> instead.
+deprecated::[7.13.0,Use <<get-all-connectors-api>> instead.]
 
 Retrieves all connectors.
 

docs/api/actions-and-connectors/legacy/list.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy List all connector types</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<list-connector-types-api>> instead.
+deprecated::[7.13.0,Use <<list-connector-types-api>> instead.]
 
 Retrieves a list of all connector types.
 

docs/api/actions-and-connectors/legacy/update.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy Update connector</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<update-connector-api>> instead.
+deprecated::[7.13.0,Use <<update-connector-api>> instead.]
 
 Updates the attributes for an existing connector.
 

docs/api/alerting/legacy/create.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy create alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<create-rule-api>> instead.
+deprecated::[7.13.0,Use <<create-rule-api>> instead.]
 
 Create {kib} alerts.
 

docs/api/alerting/legacy/delete.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy delete alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<delete-rule-api>> instead.
+deprecated::[7.13.0,Use <<delete-rule-api>> instead.]
 
 Permanently remove an alert.
 

docs/api/alerting/legacy/disable.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy disable alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<disable-rule-api>> instead.
+deprecated::[7.13.0,Use <<disable-rule-api>> instead.]
 
 Disable an alert.
 

docs/api/alerting/legacy/enable.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy enable alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<enable-rule-api>> instead.
+deprecated::[7.13.0,Use <<enable-rule-api>> instead.]
 
 Enable an alert.
 

docs/api/alerting/legacy/find.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy find alerts</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<find-rules-api>> instead.
+deprecated::[7.13.0,Use <<find-rules-api>> instead.]
 
 Retrieve a paginated set of alerts based on condition.
 

docs/api/alerting/legacy/get.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy get alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-rule-api>> instead.
+deprecated::[7.13.0,Use <<get-rule-api>> instead.]
 
 Retrieve an alert by ID.
 

docs/api/alerting/legacy/health.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy get Alerting framework health</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<get-alerting-framework-health-api>> instead.
+deprecated::[7.13.0,Use <<get-alerting-framework-health-api>> instead.]
 
 Retrieve the health status of the Alerting framework.
 

docs/api/alerting/legacy/list.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy list all alert types</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<list-rule-types-api>> instead.
+deprecated::[7.13.0,Use <<list-rule-types-api>> instead.]
 
 Retrieve a list of all alert types.
 

docs/api/alerting/legacy/mute.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy mute alert instance</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<mute-alert-api>> instead.
+deprecated::[7.13.0,Use <<mute-alert-api>> instead.]
 
 Mute an alert instance.
 

docs/api/alerting/legacy/mute_all.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy mute all alert instances</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<mute-all-alerts-api>> instead.
+deprecated::[7.13.0,Use <<mute-all-alerts-api>> instead.]
 
 Mute all alert instances.
 

docs/api/alerting/legacy/unmute.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy unmute alert instance</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<unmute-alert-api>> instead.
+deprecated::[7.13.0,Use <<unmute-alert-api>> instead.]
 
 Unmute an alert instance.
 

docs/api/alerting/legacy/unmute_all.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy unmute all alert instances</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<unmute-all-alerts-api>> instead.
+deprecated::[7.13.0,Use <<unmute-all-alerts-api>> instead.]
 
 Unmute all alert instances.
 

docs/api/alerting/legacy/update.asciidoc

@@ -4,7 +4,7 @@
 <titleabbrev>Legacy update alert</titleabbrev>
 ++++
 
-WARNING: Deprecated in 7.13.0. Use <<update-rule-api>> instead.
+deprecated::[7.13.0,Use <<update-rule-api>> instead.]
 
 Update the attributes for an existing alert.
 

docs/developer/plugin-list.asciidoc

@@ -537,6 +537,10 @@ Documentation: https://www.elastic.co/guide/en/kibana/master/task-manager-produc
 |Gathers all usage collection, retrieving them from both: OSS and X-Pack plugins.
 
 
+|{kib-repo}blob/{branch}/x-pack/plugins/timelines/README.md[timelines]
+|Timelines is a plugin that provides a grid component with accompanying server side apis to help users identify events of interest and perform root cause analysis within Kibana.
+
+
 |{kib-repo}blob/{branch}/x-pack/plugins/transform/readme.md[transform]
 |This plugin provides access to the transforms features provided by Elastic.
 

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.aggconfig.fieldistimefield.md

@@ -7,9 +7,9 @@
 <b>Signature:</b>
 
 ```typescript
-fieldIsTimeField(): boolean | "" | undefined;
+fieldIsTimeField(): boolean;
 ```
 <b>Returns:</b>
 
-`boolean | "" | undefined`
+`boolean`
 

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.aggconfigs.md

@@ -23,6 +23,7 @@ export declare class AggConfigs
 |  [aggs](./kibana-plugin-plugins-data-public.aggconfigs.aggs.md) |  | <code>IAggConfig[]</code> |  |
 |  [createAggConfig](./kibana-plugin-plugins-data-public.aggconfigs.createaggconfig.md) |  | <code>&lt;T extends AggConfig = AggConfig&gt;(params: CreateAggConfigParams, { addToAggConfigs }?: {</code><br/><code>        addToAggConfigs?: boolean &#124; undefined;</code><br/><code>    }) =&gt; T</code> |  |
 |  [indexPattern](./kibana-plugin-plugins-data-public.aggconfigs.indexpattern.md) |  | <code>IndexPattern</code> |  |
+|  [timeFields](./kibana-plugin-plugins-data-public.aggconfigs.timefields.md) |  | <code>string[]</code> |  |
 |  [timeRange](./kibana-plugin-plugins-data-public.aggconfigs.timerange.md) |  | <code>TimeRange</code> |  |
 
 ## Methods
@@ -43,6 +44,7 @@ export declare class AggConfigs
 |  [getResponseAggs()](./kibana-plugin-plugins-data-public.aggconfigs.getresponseaggs.md) |  | Gets the AggConfigs (and possibly ResponseAggConfigs) that represent the values that will be produced when all aggs are run.<!-- -->With multi-value metric aggs it is possible for a single agg request to result in multiple agg values, which is why the length of a vis' responseValuesAggs may be different than the vis' aggs {<!-- -->array\[AggConfig\]<!-- -->} |
 |  [jsonDataEquals(aggConfigs)](./kibana-plugin-plugins-data-public.aggconfigs.jsondataequals.md) |  | Data-by-data comparison of this Aggregation Ignores the non-array indexes |
 |  [onSearchRequestStart(searchSource, options)](./kibana-plugin-plugins-data-public.aggconfigs.onsearchrequeststart.md) |  |  |
+|  [setTimeFields(timeFields)](./kibana-plugin-plugins-data-public.aggconfigs.settimefields.md) |  |  |
 |  [setTimeRange(timeRange)](./kibana-plugin-plugins-data-public.aggconfigs.settimerange.md) |  |  |
 |  [toDsl(hierarchical)](./kibana-plugin-plugins-data-public.aggconfigs.todsl.md) |  |  |
 

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.aggconfigs.settimefields.md

@@ -0,0 +1,22 @@
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [kibana-plugin-plugins-data-public](./kibana-plugin-plugins-data-public.md) &gt; [AggConfigs](./kibana-plugin-plugins-data-public.aggconfigs.md) &gt; [setTimeFields](./kibana-plugin-plugins-data-public.aggconfigs.settimefields.md)
+
+## AggConfigs.setTimeFields() method
+
+<b>Signature:</b>
+
+```typescript
+setTimeFields(timeFields: string[] | undefined): void;
+```
+
+## Parameters
+
+|  Parameter | Type | Description |
+|  --- | --- | --- |
+|  timeFields | <code>string[] &#124; undefined</code> |  |
+
+<b>Returns:</b>
+
+`void`
+

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.aggconfigs.timefields.md

@@ -0,0 +1,11 @@
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [kibana-plugin-plugins-data-public](./kibana-plugin-plugins-data-public.md) &gt; [AggConfigs](./kibana-plugin-plugins-data-public.aggconfigs.md) &gt; [timeFields](./kibana-plugin-plugins-data-public.aggconfigs.timefields.md)
+
+## AggConfigs.timeFields property
+
+<b>Signature:</b>
+
+```typescript
+timeFields?: string[];
+```

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.aggfunctionsmapping.aggsinglepercentile.md

@@ -0,0 +1,11 @@
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [kibana-plugin-plugins-data-public](./kibana-plugin-plugins-data-public.md) &gt; [AggFunctionsMapping](./kibana-plugin-plugins-data-public.aggfunctionsmapping.md) &gt; [aggSinglePercentile](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggsinglepercentile.md)
+
+## AggFunctionsMapping.aggSinglePercentile property
+
+<b>Signature:</b>
+
+```typescript
+aggSinglePercentile: ReturnType<typeof aggSinglePercentile>;
+```

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.aggfunctionsmapping.md

@@ -45,6 +45,7 @@ export interface AggFunctionsMapping
 |  [aggRange](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggrange.md) | <code>ReturnType&lt;typeof aggRange&gt;</code> |  |
 |  [aggSerialDiff](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggserialdiff.md) | <code>ReturnType&lt;typeof aggSerialDiff&gt;</code> |  |
 |  [aggSignificantTerms](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggsignificantterms.md) | <code>ReturnType&lt;typeof aggSignificantTerms&gt;</code> |  |
+|  [aggSinglePercentile](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggsinglepercentile.md) | <code>ReturnType&lt;typeof aggSinglePercentile&gt;</code> |  |
 |  [aggStdDeviation](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggstddeviation.md) | <code>ReturnType&lt;typeof aggStdDeviation&gt;</code> |  |
 |  [aggSum](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggsum.md) | <code>ReturnType&lt;typeof aggSum&gt;</code> |  |
 |  [aggTerms](./kibana-plugin-plugins-data-public.aggfunctionsmapping.aggterms.md) | <code>ReturnType&lt;typeof aggTerms&gt;</code> |  |

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.metric_types.md

@@ -32,6 +32,7 @@ export declare enum METRIC_TYPES
 |  PERCENTILE\_RANKS | <code>&quot;percentile_ranks&quot;</code> |  |
 |  PERCENTILES | <code>&quot;percentiles&quot;</code> |  |
 |  SERIAL\_DIFF | <code>&quot;serial_diff&quot;</code> |  |
+|  SINGLE\_PERCENTILE | <code>&quot;single_percentile&quot;</code> |  |
 |  STD\_DEV | <code>&quot;std_dev&quot;</code> |  |
 |  SUM | <code>&quot;sum&quot;</code> |  |
 |  SUM\_BUCKET | <code>&quot;sum_bucket&quot;</code> |  |

docs/development/plugins/data/public/kibana-plugin-plugins-data-public.search.md

@@ -14,7 +14,7 @@ search: {
         intervalOptions: ({
             display: string;
             val: string;
-            enabled(agg: import("../common").IBucketAggConfig): boolean | "" | undefined;
+            enabled(agg: import("../common").IBucketAggConfig): boolean;
         } | {
             display: string;
             val: string;
@@ -47,6 +47,11 @@ search: {
             intervalLabel: string;
         })[];
         getNumberHistogramIntervalByDatatableColumn: (column: import("../../expressions").DatatableColumn) => number | undefined;
+        getDateHistogramMetaDataByDatatableColumn: (column: import("../../expressions").DatatableColumn) => {
+            interval: string | undefined;
+            timeZone: string | undefined;
+            timeRange: import("../common").TimeRange | undefined;
+        } | undefined;
     };
     getRequestInspectorStats: typeof getRequestInspectorStats;
     getResponseInspectorStats: typeof getResponseInspectorStats;

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.aggfunctionsmapping.aggsinglepercentile.md

@@ -0,0 +1,11 @@
+<!-- Do not edit this file. It is automatically generated by API Documenter. -->
+
+[Home](./index.md) &gt; [kibana-plugin-plugins-data-server](./kibana-plugin-plugins-data-server.md) &gt; [AggFunctionsMapping](./kibana-plugin-plugins-data-server.aggfunctionsmapping.md) &gt; [aggSinglePercentile](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggsinglepercentile.md)
+
+## AggFunctionsMapping.aggSinglePercentile property
+
+<b>Signature:</b>
+
+```typescript
+aggSinglePercentile: ReturnType<typeof aggSinglePercentile>;
+```

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.aggfunctionsmapping.md

@@ -45,6 +45,7 @@ export interface AggFunctionsMapping
 |  [aggRange](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggrange.md) | <code>ReturnType&lt;typeof aggRange&gt;</code> |  |
 |  [aggSerialDiff](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggserialdiff.md) | <code>ReturnType&lt;typeof aggSerialDiff&gt;</code> |  |
 |  [aggSignificantTerms](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggsignificantterms.md) | <code>ReturnType&lt;typeof aggSignificantTerms&gt;</code> |  |
+|  [aggSinglePercentile](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggsinglepercentile.md) | <code>ReturnType&lt;typeof aggSinglePercentile&gt;</code> |  |
 |  [aggStdDeviation](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggstddeviation.md) | <code>ReturnType&lt;typeof aggStdDeviation&gt;</code> |  |
 |  [aggSum](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggsum.md) | <code>ReturnType&lt;typeof aggSum&gt;</code> |  |
 |  [aggTerms](./kibana-plugin-plugins-data-server.aggfunctionsmapping.aggterms.md) | <code>ReturnType&lt;typeof aggTerms&gt;</code> |  |

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.md

@@ -14,6 +14,6 @@ export declare class IndexPatternsServiceProvider implements Plugin<void, IndexP
 
 |  Method | Modifiers | Description |
 |  --- | --- | --- |
-|  [setup(core, { expressions })](./kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md) |  |  |
+|  [setup(core, { expressions, usageCollection })](./kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md) |  |  |
 |  [start(core, { fieldFormats, logger })](./kibana-plugin-plugins-data-server.indexpatternsserviceprovider.start.md) |  |  |
 

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.setup.md

@@ -7,15 +7,15 @@
 <b>Signature:</b>
 
 ```typescript
-setup(core: CoreSetup<DataPluginStartDependencies, DataPluginStart>, { expressions }: IndexPatternsServiceSetupDeps): void;
+setup(core: CoreSetup<IndexPatternsServiceStartDeps, DataPluginStart>, { expressions, usageCollection }: IndexPatternsServiceSetupDeps): void;
 ```
 
 ## Parameters
 
 |  Parameter | Type | Description |
 |  --- | --- | --- |
-|  core | <code>CoreSetup&lt;DataPluginStartDependencies, DataPluginStart&gt;</code> |  |
-|  { expressions } | <code>IndexPatternsServiceSetupDeps</code> |  |
+|  core | <code>CoreSetup&lt;IndexPatternsServiceStartDeps, DataPluginStart&gt;</code> |  |
+|  { expressions, usageCollection } | <code>IndexPatternsServiceSetupDeps</code> |  |
 
 <b>Returns:</b>
 

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.indexpatternsserviceprovider.start.md

@@ -8,7 +8,7 @@
 
 ```typescript
 start(core: CoreStart, { fieldFormats, logger }: IndexPatternsServiceStartDeps): {
-        indexPatternsServiceFactory: (savedObjectsClient: SavedObjectsClientContract, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
+        indexPatternsServiceFactory: (savedObjectsClient: Pick<import("../../../../core/server").SavedObjectsClient, "get" | "delete" | "create" | "bulkCreate" | "checkConflicts" | "find" | "bulkGet" | "resolve" | "update" | "addToNamespaces" | "deleteFromNamespaces" | "bulkUpdate" | "removeReferencesTo" | "openPointInTimeForType" | "closePointInTime" | "createPointInTimeFinder" | "errors">, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
     };
 ```
 
@@ -22,6 +22,6 @@ start(core: CoreStart, { fieldFormats, logger }: IndexPatternsServiceStartDeps):
 <b>Returns:</b>
 
 `{
-        indexPatternsServiceFactory: (savedObjectsClient: SavedObjectsClientContract, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
+        indexPatternsServiceFactory: (savedObjectsClient: Pick<import("../../../../core/server").SavedObjectsClient, "get" | "delete" | "create" | "bulkCreate" | "checkConflicts" | "find" | "bulkGet" | "resolve" | "update" | "addToNamespaces" | "deleteFromNamespaces" | "bulkUpdate" | "removeReferencesTo" | "openPointInTimeForType" | "closePointInTime" | "createPointInTimeFinder" | "errors">, elasticsearchClient: ElasticsearchClient) => Promise<IndexPatternsCommonService>;
     }`
 

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.metric_types.md

@@ -32,6 +32,7 @@ export declare enum METRIC_TYPES
 |  PERCENTILE\_RANKS | <code>&quot;percentile_ranks&quot;</code> |  |
 |  PERCENTILES | <code>&quot;percentiles&quot;</code> |  |
 |  SERIAL\_DIFF | <code>&quot;serial_diff&quot;</code> |  |
+|  SINGLE\_PERCENTILE | <code>&quot;single_percentile&quot;</code> |  |
 |  STD\_DEV | <code>&quot;std_dev&quot;</code> |  |
 |  SUM | <code>&quot;sum&quot;</code> |  |
 |  SUM\_BUCKET | <code>&quot;sum_bucket&quot;</code> |  |

docs/development/plugins/data/server/kibana-plugin-plugins-data-server.search.md

@@ -14,7 +14,7 @@ search: {
         intervalOptions: ({
             display: string;
             val: string;
-            enabled(agg: import("../common").IBucketAggConfig): boolean | "" | undefined;
+            enabled(agg: import("../common").IBucketAggConfig): boolean;
         } | {
             display: string;
             val: string;