Kibana 9.3.0 using <...> parts of log messages as HTML elements on Discover page

Elastic Stack Kibana
1

Hi, I just upgraded to Kibana 9.3.0 from 9.2.3 and it seems like part of the log message enclosed within <> is removed if it contains alphabet? It doesn’t seem to affect numbers. For example,

2026-02-06 04:41:12,718 INFO some.program.module(128):Search for <John Doe> found <48> items in <0.314> seconds

becomes

2026-02-06 04:41:12,718 INFO some.program.module(128):Search for  found <48> items in <0.314> seconds

in the Discover view page. However, when I click the diagonal arrow on the left side to see the JSON, it contains the full message. Am I doing something wrong or is it a bug?

2

Hi @aqiank,

Can you please check what value is returned from Elasticsearch by opening Inspect flyout (from the top right corner on Discover page) and navigating to Response tab of it?

3

Hi @jughosta , the response from inspect contains the correct, unaltered message. Only the main summary view alters the displayed message.

4

Ah I think I see what the issue is now. After looking at the console, it seems like the <> is being treated as HTML element.

5

What is the solution type of the current Kibana space? Is it Classic or Observability? Can you please share a redacted screenshot?

6

It’s Observability. Here’s a screenshot.

kibana-9.3.0-issue-redacted
kibana-9.3.0-issue-redacted2848×704 131 KB

7

Thanks for reporting! We will look into it.