# Announcements **URL:** https://discuss.elastic.co/c/announcements/5.md?page=9 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 10 --- ## [Authentication Error for User \[elastic\] When Accessing Elasticsearch from Kibana](https://discuss.elastic.co/t/authentication-error-for-user-elastic-when-accessing-elasticsearch-from-kibana/374251)
**Author:** [@TYQ33](https://discuss.elastic.co/u/TYQ33)\ **Replies:** 3\ **Last updated:** [February 10, 2025, 1:45am UTC](https://discuss.elastic.co/t/authentication-error-for-user-elastic-when-accessing-elasticsearch-from-kibana/374251 "2025-02-10T01:45:09Z")
Hi everyone, I'm encountering an authentication issue between Kibana and Elasticsearch. Upon starting Kibana, I receive the following error indicating that Kibana cannot obtain license information from Elasticsearch due… --- ## [Can cloudflare R2 be used as a frozen tier in onprem set up](https://discuss.elastic.co/t/can-cloudflare-r2-be-used-as-a-frozen-tier-in-onprem-set-up/374173)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 1\ **Last updated:** [February 6, 2025, 6:53pm UTC](https://discuss.elastic.co/t/can-cloudflare-r2-be-used-as-a-frozen-tier-in-onprem-set-up/374173 "2025-02-06T18:53:57Z")
Hi Team! Cancloudflare r2 be used for the frozen tier with elastic? Please help --- ## [Kibana 8.15.1 Security Update (ESA-2024-27, ESA-2024-28)](https://discuss.elastic.co/t/kibana-8-15-1-security-update-esa-2024-27-esa-2024-28/366119)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 5, 2024, 7:19pm UTC](https://discuss.elastic.co/t/kibana-8-15-1-security-update-esa-2024-27-esa-2024-28/366119 "2024-09-05T19:19:30Z")
Kibana arbitrary code execution via YAML deserialization in Amazon Bedrock Connector (ESA-2024-27) A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con… --- ## [Filtering logs thorugh fleet server](https://discuss.elastic.co/t/filtering-logs-thorugh-fleet-server/373795)
**Author:** [@Mohit\_Verma1](https://discuss.elastic.co/u/Mohit_Verma1)\ **Replies:** 4\ **Last updated:** [January 29, 2025, 5:19pm UTC](https://discuss.elastic.co/t/filtering-logs-thorugh-fleet-server/373795 "2025-01-29T17:19:34Z")
I have installed Elastic Agent on multiple servers to collect logs and send them to Elasticsearch via Fleet Server. I want to filter logs at the source so that only error-level logs are collected and sent, instead of col… --- ## [Fleet Server 8.15.0 Security Update ( ESA-2024-31)](https://discuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 22, 2025, 3:09pm UTC](https://discuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522 "2025-01-22T15:09:01Z")
Fleet Server sensitive information exposure via logs (ESA-2024-31) An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The natur… --- ## [Kibana 8.15.0 Security Update (ESA-2024-29, ESA-2024-30)](https://discuss.elastic.co/t/kibana-8-15-0-security-update-esa-2024-29-esa-2024-30/373521)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 22, 2025, 3:04pm UTC](https://discuss.elastic.co/t/kibana-8-15-0-security-update-esa-2024-29-esa-2024-30/373521 "2025-01-22T15:04:36Z")
Kibana server-side request forgery (ESA-2024-29) A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health\_check API could be used to send requests to internal endpoints. Due to the… --- ## [Kibana 7.17.23 and 8.14.2 Security Update (ESA-2024-26)](https://discuss.elastic.co/t/kibana-7-17-23-and-8-14-2-security-update-esa-2024-26/373443)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 21, 2025, 10:50am UTC](https://discuss.elastic.co/t/kibana-7-17-23-and-8-14-2-security-update-esa-2024-26/373443 "2025-01-21T10:50:17Z")
Kibana allocation of resources without limits or throttling leads to crash (ESA-2024-26) An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /a… --- ## [Elasticsearch 7.17.21 and 8.13.3 Security Update (ESA-2024-25)](https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 21, 2025, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442 "2025-01-21T10:49:35Z")
Elasticsearch allocation of resources without limits or throttling leads to crash (ESA-2024-25) An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resultin… --- ## [Elastic Defend 8.13.3 Security Update (ESA-2024-24)](https://discuss.elastic.co/t/elastic-defend-8-13-3-security-update-esa-2024-24/373441)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 21, 2025, 10:48am UTC](https://discuss.elastic.co/t/elastic-defend-8-13-3-security-update-esa-2024-24/373441 "2025-01-21T10:48:45Z")
Elastic Defend Improper Handling of Alternate Encoding Leads to Crash (ESA-2024-24) Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a m… --- ## [What’s new in Elastic 8.17](https://discuss.elastic.co/t/what-s-new-in-elastic-8-17/371952)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 13, 2024, 10:15am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-17/371952 "2024-12-13T10:15:29Z")
:tada: What’s new in Elastic 8.17 Learn about Elastic 8.17 with logsdb now in GA, the new Elastic rerank model and full-text search support for ES|QL. LogsDB (basic) With the general availability of the Elasticsearch… --- ## [Elasticsearch 8.16.2 / 8.17.0 Security Update](https://discuss.elastic.co/t/elasticsearch-8-16-2-8-17-0-security-update/372091)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [December 17, 2024, 8:29pm UTC](https://discuss.elastic.co/t/elasticsearch-8-16-2-8-17-0-security-update/372091 "2024-12-17T20:29:06Z")
Elasticsearch Incorrect Authorization (ESA-2024-46) An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elas… --- ## [Elasticsearch Serverless is GA](https://discuss.elastic.co/t/elasticsearch-serverless-is-ga/371370)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [December 3, 2024, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-serverless-is-ga/371370 "2024-12-03T10:53:37Z")
No nodes, no shards, no versions: Elasticsearch Serverless is GA on AWS — right from re:invent. Some of the best resources to get you up and running: Official announcement blog post Differences from self-managed or ho… --- ## [🎉 What’s new in Elastic 8.16](https://discuss.elastic.co/t/what-s-new-in-elastic-8-16/370418)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [November 12, 2024, 5:55pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-16/370418 "2024-11-12T17:55:00Z")
:tada: What’s new in Elastic 8.16 Learn about Elastic 8.16 which includes the first release ever of the Better Binary Quantization (BBQ) within a vector database, an updated Kibana experience, cloud assets protection and… --- ## [Rally 2.11.1](https://discuss.elastic.co/t/rally-2-11-1/370245)
**Author:** [@favilo](https://discuss.elastic.co/u/favilo)\ **Replies:** 0\ **Last updated:** [November 8, 2024, 10:19pm UTC](https://discuss.elastic.co/t/rally-2-11-1/370245 "2024-11-08T22:19:05Z")
Rally 2.11.1 has just been released! 2.11.1 Highlights #1875: Switch to JDK 21 Enhancements #1884: Add Jinja filters for creating dynamic date ranges based on now() #1871: \[ES-8436\] feat: Change Dockerfile base image… --- ## [Some of our public repositories are not available ATM](https://discuss.elastic.co/t/some-of-our-public-repositories-are-not-available-atm/369726)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 1\ **Last updated:** [October 29, 2024, 5:49pm UTC](https://discuss.elastic.co/t/some-of-our-public-repositories-are-not-available-atm/369726 "2024-10-29T17:49:43Z")
As part of an internal change task, some of our public git repositories hosted under Elastic's GitHub organisation were marked as private. As a result, when attempting to access these repositories an error may be seen. O… --- ## [Elasticsearch is Open Source, again](https://discuss.elastic.co/t/elasticsearch-is-open-source-again/365798)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [August 30, 2024, 7:05am UTC](https://discuss.elastic.co/t/elasticsearch-is-open-source-again/365798 "2024-08-30T07:05:39Z")
Hey Elasticsearch and Kibana are going open source, again! We are super excited by this addition of an open source license alongside ELv2 and SSPL. The repositories will be updated soonish. You can read more about th… --- ## [Sales wont contact me](https://discuss.elastic.co/t/sales-wont-contact-me/365776)
**Author:** [@karunakarac](https://discuss.elastic.co/u/karunakarac)\ **Replies:** 1\ **Last updated:** [August 29, 2024, 3:30pm UTC](https://discuss.elastic.co/t/sales-wont-contact-me/365776 "2024-08-29T15:30:11Z")
Been trying to reach sales for a couple of weeks now. This is my last attempt before I move on to something else. I have gotten nothing back from the sales team (and yes I monitor my spam just in case). I have a budget a… --- ## [Elastic Security Multi tenant for on premises setup](https://discuss.elastic.co/t/elastic-security-multi-tenant-for-on-premises-setup/365618)
**Author:** [@amitsail](https://discuss.elastic.co/u/amitsail)\ **Replies:** 2\ **Last updated:** [August 27, 2024, 2:15pm UTC](https://discuss.elastic.co/t/elastic-security-multi-tenant-for-on-premises-setup/365618 "2024-08-27T14:15:52Z")
Hello Members, As a new member of this community, I am seeking your expert advice and guidance on a pressing issue I'm facing. I am looking to set up an Elastic SIEM (Security Information and Event Management) solution … --- ## [Elasticsearch master pods failing master not discovered or elected yet, an election requires at least 2 nodes](https://discuss.elastic.co/t/elasticsearch-master-pods-failing-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/365591)
**Author:** [@gaurav671](https://discuss.elastic.co/u/gaurav671)\ **Replies:** 6\ **Last updated:** [August 27, 2024, 12:49pm UTC](https://discuss.elastic.co/t/elasticsearch-master-pods-failing-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/365591 "2024-08-27T12:49:59Z")
Hello, I'm facing an issue with my elasticsearch cluster. I have 15 pods running in multiple nodes on my kubernetes cluster. 3 elasticsearch master pod, 12 elasticsearch-data pods are running . We are facing issue with … --- ## [APM Server 8.14.0 Security Update (ESA-2024-09)](https://discuss.elastic.co/t/apm-server-8-14-0-security-update-esa-2024-09/364946)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [August 15, 2024, 9:54am UTC](https://discuss.elastic.co/t/apm-server-8-14-0-security-update-esa-2024-09/364946 "2024-08-15T09:54:42Z")
APM Server - Uncontrolled Resource Consumption through HTTP/2 endpoints - CVE-2023-45288 (ESA-2024-09) On April 4, 2024, the Go Project announced CVE-2023-45288, which can lead to CPU exhaustion as an attacker can cause… --- ## [Kibana 8.14.2 / 7.17.23 Security Update (ESA-2024-22)](https://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/364424)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 1\ **Last updated:** [August 12, 2024, 9:28pm UTC](https://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/364424 "2024-08-12T21:28:13Z")
Kibana arbitrary code execution via prototype pollution (ESA-2024-22) A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write acc… --- ## [Elastic Agent 8.15.0 Security Update (ESA-2024-23)](https://discuss.elastic.co/t/elastic-agent-8-15-0-security-update-esa-2024-23/364635)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [August 8, 2024, 11:33pm UTC](https://discuss.elastic.co/t/elastic-agent-8-15-0-security-update-esa-2024-23/364635 "2024-08-08T23:33:32Z")
Elastic Agent Insertion of Sensitive Information into Log File (ESA-2024-23) An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured… --- ## [🎉 What’s new in Elastic 8.15](https://discuss.elastic.co/t/what-s-new-in-elastic-8-15/364628)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [August 8, 2024, 7:58pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-15/364628 "2024-08-08T19:58:07Z")
Learn about Elastic 8.15 which includes better semantic search, new OTel distribution, SIEM data import, and more. The 8.15 release includes: semantic\_text: making RAG development much easier with simplified mappin… --- ## [Kibana 8.7.1 Security Updates (ESA-2023-07, ESA-2023-08)](https://discuss.elastic.co/t/kibana-8-7-1-security-updates-esa-2023-07-esa-2023-08/332330)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 4:08pm UTC](https://discuss.elastic.co/t/kibana-8-7-1-security-updates-esa-2023-07-esa-2023-08/332330 "2023-05-02T16:08:35Z")
Kibana arbitrary code execution (ESA-2023-07) Kibana contains an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute… --- ## [APM Server 8.14.0 Security Update (ESA-2024-19)](https://discuss.elastic.co/t/apm-server-8-14-0-security-update-esa-2024-19/364289)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [August 2, 2024, 8:20pm UTC](https://discuss.elastic.co/t/apm-server-8-14-0-security-update-esa-2024-19/364289 "2024-08-02T20:20:04Z")
APM Server Insertion of Sensitive Information into Log File (ESA-2024-19) APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailable\_shards\_exception for a speci… --- ## [Elasticsearch 8.13.0/7.17.23 Security Update (ESA-2024-12)](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-23-security-update-esa-2024-12/364157)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [July 31, 2024, 5:12pm UTC](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-23-security-update-esa-2024-12/364157 "2024-07-31T17:12:52Z")
Elasticsearch elasticsearch-certutil csr fails to encrypt private key (ESA-2024-12) It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new… --- ## [Kibana 7.17.23/8.14.0 Security Update (ESA-2024-16)](https://discuss.elastic.co/t/kibana-7-17-23-8-14-0-security-update-esa-2024-16/364094)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [July 30, 2024, 9:22pm UTC](https://discuss.elastic.co/t/kibana-7-17-23-8-14-0-security-update-esa-2024-16/364094 "2024-07-30T21:22:31Z")
Kibana Denial of Service issue (ESA-2024-16) An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific… --- ## [Elastic Cloud Enterprise 3.7.2 Security Update (ESA-2024-18)](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-2-security-update-esa-2024-18/362181)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [June 28, 2024, 4:54am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-2-security-update-esa-2024-18/362181 "2024-06-28T04:54:13Z")
ECE Improper Authorization (ESA-2024-18) It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys th… --- ## [Kibana 7.17.22 / 8.14.0 Security Update (ESA-2024-17)](https://discuss.elastic.co/t/kibana-7-17-22-8-14-0-security-update-esa-2024-17/361508)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 3:27pm UTC](https://discuss.elastic.co/t/kibana-7-17-22-8-14-0-security-update-esa-2024-17/361508 "2024-06-14T15:27:57Z")
Kibana RCE due to chromium type confusion (ESA-2024-17) On March 26, 2024, a type confusion vulnerability was found in WebAssembly in Google Chrome version prior to 123.0.6312.86 which allows a remote attacker to execut… --- ## [Issue with Logging lighttpd Logs from OPNsense](https://discuss.elastic.co/t/issue-with-logging-lighttpd-logs-from-opnsense/361839)
**Author:** [@Hsing](https://discuss.elastic.co/u/Hsing)\ **Replies:** 0\ **Last updated:** [June 21, 2024, 9:30am UTC](https://discuss.elastic.co/t/issue-with-logging-lighttpd-logs-from-opnsense/361839 "2024-06-21T09:30:30Z")
Hello Community, I have a question regarding OPNsense logging. I'm currently referencing two documents from the "Kali Purple SOC-IAB - Overview": Elastic-Agent Beats My current issue is that I want to log my lighttpd… [Previous page](https://discuss.elastic.co/c/announcements/5.md?page=8) [Next page](https://discuss.elastic.co/c/announcements/5.md?page=10)