# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=12 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 13 --- ## [How to install the repository plug-in in a rolling upgrade to ensure that business reading and writing are not affected](https://discuss.elastic.co/t/how-to-install-the-repository-plug-in-in-a-rolling-upgrade-to-ensure-that-business-reading-and-writing-are-not-affected/385924)
**Author:** [@mloine](https://discuss.elastic.co/u/mloine)\ **Replies:** 4\ **Last updated:** [April 20, 2026, 9:43am UTC](https://discuss.elastic.co/t/how-to-install-the-repository-plug-in-in-a-rolling-upgrade-to-ensure-that-business-reading-and-writing-are-not-affected/385924 "2026-04-20T09:43:40Z")
Background: Because the business scenario does not allow downtime maintenance and there will be a large number of read and write operations during the period, only rolling installation of plug-ins can be considered The … --- ## [Palo alto (pan Metrics) integration tips](https://discuss.elastic.co/t/palo-alto-pan-metrics-integration-tips/385943)
**Author:** [@a.elbacha](https://discuss.elastic.co/u/a.elbacha)\ **Replies:** 0\ **Last updated:** [April 19, 2026, 7:04pm UTC](https://discuss.elastic.co/t/palo-alto-pan-metrics-integration-tips/385943 "2026-04-19T19:04:27Z")
I am trying to integrate PAN with ELK to fetch metrics and later on enable anomaly detection to proactively detect any connections failure or packet drops. Moreover, is it supported in service Maps to visualize the traf… --- ## [Upgrade 8.19.13 and errors starting regarding entitlement](https://discuss.elastic.co/t/upgrade-8-19-13-and-errors-starting-regarding-entitlement/385923)
**Author:** [@Juan\_Carlos\_Sanchez](https://discuss.elastic.co/u/Juan_Carlos_Sanchez)\ **Replies:** 2\ **Last updated:** [April 17, 2026, 7:37pm UTC](https://discuss.elastic.co/t/upgrade-8-19-13-and-errors-starting-regarding-entitlement/385923 "2026-04-17T19:37:07Z")
Hi, We are facing issue starting the elasticsearch with version 8.19.13 showing this error message: \[2026-04-16T15:15:34,195\]\[INFO \]\[o.e.n.NativeAccess \] Using native vector library; to disable start with -Dorg.… --- ## [Getting Session error on Kibana UI](https://discuss.elastic.co/t/getting-session-error-on-kibana-ui/385888)
**Author:** [@Cache\_Digitech](https://discuss.elastic.co/u/Cache_Digitech)\ **Replies:** 8\ **Last updated:** [April 17, 2026, 3:20pm UTC](https://discuss.elastic.co/t/getting-session-error-on-kibana-ui/385888 "2026-04-17T15:20:34Z")
As shown in the screenshot , I’m having this issue . I tried a fresh installation and again after running for few days , I got this error again. I did some research and found that the roles for the kibana\_system user … --- ## [Elastic Agent Logstash data streams not working](https://discuss.elastic.co/t/elastic-agent-logstash-data-streams-not-working/385925)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [April 17, 2026, 11:05am UTC](https://discuss.elastic.co/t/elastic-agent-logstash-data-streams-not-working/385925 "2026-04-17T11:05:28Z")
This is my logstash.yml else if "apps" in \[tags\] { mutate { # replace =\> { "\[@metadata\]\[index\_prefix\]" =\> "applications-%{+YYYY.MM}" } add\_field =\> { "\[data\_stream\]\[type\]" =\> "logs" "\[d… --- ## [Getting LAST record in aggr in ES|QL](https://discuss.elastic.co/t/getting-last-record-in-aggr-in-es-ql/372903)
**Author:** [@jfsardon](https://discuss.elastic.co/u/jfsardon)\ **Replies:** 11\ **Last updated:** [April 16, 2026, 6:33pm UTC](https://discuss.elastic.co/t/getting-last-record-in-aggr-in-es-ql/372903 "2026-04-16T18:33:40Z")
Is there an simple way to get the last value of a field (@timestamp sorted) for each customer, hostname, etc.. For example : select logs-myindex-xxx | SORT (@timestamp) | STATS LAST (maxsize) BY customer, hostname... b… --- ## [Metricbeat move to Ceph mgr/dashboard API](https://discuss.elastic.co/t/metricbeat-move-to-ceph-mgr-dashboard-api/385921)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 0\ **Last updated:** [April 16, 2026, 2:32pm UTC](https://discuss.elastic.co/t/metricbeat-move-to-ceph-mgr-dashboard-api/385921 "2026-04-16T14:32:09Z")
Is there any plans for metricbeat to transition from the deprecated CEPH mgr/restful API to the mgr/dashboard API ? --- ## [Kibana 9.3.1 Disabling message "New! Connect AutoOps to this self-managed cluster"](https://discuss.elastic.co/t/kibana-9-3-1-disabling-message-new-connect-autoops-to-this-self-managed-cluster/385736)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 14\ **Last updated:** [April 16, 2026, 10:10am UTC](https://discuss.elastic.co/t/kibana-9-3-1-disabling-message-new-connect-autoops-to-this-self-managed-cluster/385736 "2026-04-16T10:10:01Z")
We would like to not present this message to our users. Is there a way this disable this? --- ## [Embedding Kibana Dashboards with multiple anon accounts](https://discuss.elastic.co/t/embedding-kibana-dashboards-with-multiple-anon-accounts/385905)
**Author:** [@HermanDev](https://discuss.elastic.co/u/HermanDev)\ **Replies:** 1\ **Last updated:** [April 16, 2026, 7:27am UTC](https://discuss.elastic.co/t/embedding-kibana-dashboards-with-multiple-anon-accounts/385905 "2026-04-16T07:27:59Z")
Here is my use case: We built 4 analytics dashboards, and would like to have those 4 dashboards embedded into our site. I have managed to get this working using anonymous accounts. The problem we are facing is that ou… --- ## [Date filter plugin in Logstash configuration](https://discuss.elastic.co/t/date-filter-plugin-in-logstash-configuration/385899)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 6\ **Last updated:** [April 16, 2026, 5:24am UTC](https://discuss.elastic.co/t/date-filter-plugin-in-logstash-configuration/385899 "2026-04-16T05:24:53Z")
In my Logstash configuration we use the "Date filter plugin" several times. It already looks like a mess for me. Is it possible to use only once the "Date Filter Plugin" at the end of the Filter section in the logstash … --- ## [Kibana visualizations dont load upon opening from a formed URL via python and posted in slack](https://discuss.elastic.co/t/kibana-visualizations-dont-load-upon-opening-from-a-formed-url-via-python-and-posted-in-slack/385890)
**Author:** [@shinysap](https://discuss.elastic.co/u/shinysap)\ **Replies:** 3\ **Last updated:** [April 15, 2026, 11:17am UTC](https://discuss.elastic.co/t/kibana-visualizations-dont-load-upon-opening-from-a-formed-url-via-python-and-posted-in-slack/385890 "2026-04-15T11:17:37Z")
Kibana visualizations dont load upon opening from a formed URL via python and posted in slack Its a line chart visulization. But when i open the dashboard direct from the dashboards page and paste the KQL it works. --- ## [Elastic Agent Poll time adjusting](https://discuss.elastic.co/t/elastic-agent-poll-time-adjusting/385882)
**Author:** [@etrevino-lumificyber](https://discuss.elastic.co/u/etrevino-lumificyber)\ **Replies:** 0\ **Last updated:** [April 14, 2026, 2:39pm UTC](https://discuss.elastic.co/t/elastic-agent-poll-time-adjusting/385882 "2026-04-14T14:39:29Z")
Hello everyone, I have a client who would like an option to adjust the amount of web requests going outbound from the elastic agent. I recommended adding filters on their end to drop those logs in Cisco Umbrella. Is the… --- ## [High sustained read traffic from Elasticsearch hot pods](https://discuss.elastic.co/t/high-sustained-read-traffic-from-elasticsearch-hot-pods/385508)
**Author:** [@cjpowers](https://discuss.elastic.co/u/cjpowers)\ **Replies:** 16\ **Last updated:** [April 14, 2026, 1:40pm UTC](https://discuss.elastic.co/t/high-sustained-read-traffic-from-elasticsearch-hot-pods/385508 "2026-04-14T13:40:32Z")
I’m running an EFK stack in an RKE2 cluster on RHEL 8.5. The VMs are hosted in vSphere and use centralized NetApp storage. Our Elasticsearch footprint currently looks like this: 2 master nodes 2 client nodes 2 hot da… --- ## [Advice on snapshot and restore setup for elasticsearch DR scenario](https://discuss.elastic.co/t/advice-on-snapshot-and-restore-setup-for-elasticsearch-dr-scenario/385873)
**Author:** [@fffasttFGHb3t](https://discuss.elastic.co/u/fffasttFGHb3t)\ **Replies:** 1\ **Last updated:** [April 13, 2026, 6:55pm UTC](https://discuss.elastic.co/t/advice-on-snapshot-and-restore-setup-for-elasticsearch-dr-scenario/385873 "2026-04-13T18:55:09Z")
We currently have an elasticsearch cluster deployed on-prem kubernetes with the elastic operator. Our main goals are exactly as described in the documentation: Regularly back up a cluster with no downtime Recover data… --- ## [Sythetics icmp down alert received but host and agent had been unenrolled!](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 6\ **Last updated:** [April 13, 2026, 9:20am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866 "2026-04-13T09:20:44Z")
host had been decommissioned. agent had been unrolled weeks back BUT still getting sythetics icmp down alert today. Kindly assist! --- ## [ELK Kibana 9.3.1 How do we disable the AI Assistant?](https://discuss.elastic.co/t/elk-kibana-9-3-1-how-do-we-disable-the-ai-assistant/385822)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 7\ **Last updated:** [April 12, 2026, 6:02am UTC](https://discuss.elastic.co/t/elk-kibana-9-3-1-how-do-we-disable-the-ai-assistant/385822 "2026-04-12T06:02:46Z")
How can we disable the AI Assistant button on the top bar? --- ## [Virtual Machines or Containers?](https://discuss.elastic.co/t/virtual-machines-or-containers/385765)
**Author:** [@saba\_kallel](https://discuss.elastic.co/u/saba_kallel)\ **Replies:** 4\ **Last updated:** [April 10, 2026, 1:13pm UTC](https://discuss.elastic.co/t/virtual-machines-or-containers/385765 "2026-04-10T13:13:29Z")
Hello everyone, I am currently working on my final-year project, which focuses on designing and automating the deployment of a highly available and fault-tolerant ELK stack (Elasticsearch, Logstash, Kibana). The goal o… --- ## [Unable to view rule detail. (Unable to load rule)](https://discuss.elastic.co/t/unable-to-view-rule-detail-unable-to-load-rule/385837)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 2\ **Last updated:** [April 10, 2026, 6:19am UTC](https://discuss.elastic.co/t/unable-to-view-rule-detail-unable-to-load-rule/385837 "2026-04-10T06:19:53Z")
Alerts trigger. However unable to view rule detail. (Unable to load rule) --- ## [Qualys VMDR Integration Missing Data](https://discuss.elastic.co/t/qualys-vmdr-integration-missing-data/385834)
**Author:** [@difi80211g](https://discuss.elastic.co/u/difi80211g)\ **Replies:** 1\ **Last updated:** [April 10, 2026, 5:49am UTC](https://discuss.elastic.co/t/qualys-vmdr-integration-missing-data/385834 "2026-04-10T05:49:10Z")
I have setup the Qualys VMDR integration and all checks seem to be fine, however i am not getting any asset or KB data, but i am getting the User activity logs. I verified permissions in qualys and api logs in qualys bu… --- ## [Delete saved object of type url via Kibana 7 API](https://discuss.elastic.co/t/delete-saved-object-of-type-url-via-kibana-7-api/385805)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 5\ **Last updated:** [April 9, 2026, 1:53pm UTC](https://discuss.elastic.co/t/delete-saved-object-of-type-url-via-kibana-7-api/385805 "2026-04-09T13:53:34Z")
Ahead of upgrading Kibana from 7 (yes I know) to 8, I'm looking at ~1500 short URLs which it has been decided are no longer needed. (N.B. Some short URLs are still wanted.) Deleting them using the Kibana GUI would be exc… --- ## [Elastic Stack Self-Managed Multi-Node – Fleet Server TLS](https://discuss.elastic.co/t/elastic-stack-self-managed-multi-node-fleet-server-tls/384902)
**Author:** [@4l13v](https://discuss.elastic.co/u/4l13v)\ **Replies:** 1\ **Last updated:** [April 9, 2026, 1:10pm UTC](https://discuss.elastic.co/t/elastic-stack-self-managed-multi-node-fleet-server-tls/384902 "2026-04-09T13:10:19Z")
I am running a self-managed Elastic Stack (8.x) on a private network and trying to deploy Fleet Server with production TLS certificates. I am facing certificate trust and agent enrollment issues. Then I saw on documenta… --- ## [Unable to search data in fields](https://discuss.elastic.co/t/unable-to-search-data-in-fields/385824)
**Author:** [@s1ackspace](https://discuss.elastic.co/u/s1ackspace)\ **Replies:** 4\ **Last updated:** [April 9, 2026, 11:19am UTC](https://discuss.elastic.co/t/unable-to-search-data-in-fields/385824 "2026-04-09T11:19:08Z")
Hi, I have data in indice parsed with custom pipeline. After reindex that indice i can’t make aggregations (in discover module i see only empty fields) and visualizations from that data however data are still searchable… --- ## [Kibana cluster status show stale](https://discuss.elastic.co/t/kibana-cluster-status-show-stale/385502)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 4\ **Last updated:** [April 9, 2026, 7:28am UTC](https://discuss.elastic.co/t/kibana-cluster-status-show-stale/385502 "2026-04-09T07:28:29Z")
Management \>\> Stack Monitoring Clusters \>\> Click on the cluster Cluster Overview page \>\> Scroll down to Kibana \>\> Click Instances Kibana instances page status show stale All instances are green. alerts are clear. Las… --- ## [Elastic Agent 9.2.7 Error: failed to execute enroll command](https://discuss.elastic.co/t/elastic-agent-9-2-7-error-failed-to-execute-enroll-command/385818)
**Author:** [@Faza\_Syarof](https://discuss.elastic.co/u/Faza_Syarof)\ **Replies:** 1\ **Last updated:** [April 9, 2026, 6:35am UTC](https://discuss.elastic.co/t/elastic-agent-9-2-7-error-failed-to-execute-enroll-command/385818 "2026-04-09T06:35:28Z")
Hi, Please help me, I try to reinstall fleet server but got error I already uninstall with command : elastic-agent uninstall and remove folder under /opt/Elastic but still got error below \[ \] Failed to Enroll \[0s\]… --- ## [GUI \>\> Cluster \>\> Logstash \>\> Nodes (no nodes displayed)](https://discuss.elastic.co/t/gui-cluster-logstash-nodes-no-nodes-displayed/385739)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 6\ **Last updated:** [April 9, 2026, 5:50am UTC](https://discuss.elastic.co/t/gui-cluster-logstash-nodes-no-nodes-displayed/385739 "2026-04-09T05:50:33Z")
When we click on Nodes under the Logstash section. Nothing is displayed!! --- ## [When 8.19.14 will be released? Being hitting hard by #144748](https://discuss.elastic.co/t/when-8-19-14-will-be-released-being-hitting-hard-by-144748/385798)
**Author:** [@carlosmg1](https://discuss.elastic.co/u/carlosmg1)\ **Replies:** 4\ **Last updated:** [April 8, 2026, 4:45pm UTC](https://discuss.elastic.co/t/when-8-19-14-will-be-released-being-hitting-hard-by-144748/385798 "2026-04-08T16:45:42Z")
Hi, we upgraded to 8.19.13, just to discover we’re having a lot of problems because mentioned issue related to percolate queries. i’ve seen the release note for the 8.19.14 is already up, but no release itself (btw, we … --- ## [I have ES on a 5 Windows machines](https://discuss.elastic.co/t/i-have-es-on-a-5-windows-machines/385781)
**Author:** [@stanimir\_kirilov](https://discuss.elastic.co/u/stanimir_kirilov)\ **Replies:** 1\ **Last updated:** [April 8, 2026, 4:07pm UTC](https://discuss.elastic.co/t/i-have-es-on-a-5-windows-machines/385781 "2026-04-08T16:07:42Z")
Hello, I’m running Elasticsearch on five Windows virtual machines, and applying Windows updates to them is extremely time‑consuming.Each time I have to stop the shard allocation then proceed with the Windows updates, mak… --- ## [Disable auto create data view](https://discuss.elastic.co/t/disable-auto-create-data-view/385795)
**Author:** [@tmp13](https://discuss.elastic.co/u/tmp13)\ **Replies:** 7\ **Last updated:** [April 8, 2026, 7:37am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795 "2026-04-08T07:37:44Z")
Hi. I use Kibana 9.3 I cant find how to disable auto create dataview like: logs-\* metrics-\* All logs Thnx. --- ## [Unable to register secondary azure snapshot repo. Elasticsearch says client not found](https://discuss.elastic.co/t/unable-to-register-secondary-azure-snapshot-repo-elasticsearch-says-client-not-found/385806)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 1\ **Last updated:** [April 7, 2026, 7:44pm UTC](https://discuss.elastic.co/t/unable-to-register-secondary-azure-snapshot-repo-elasticsearch-says-client-not-found/385806 "2026-04-07T19:44:04Z")
I’m trying to add a secondary snapshot repo repo to a cluster to migrate data. I’ve added the account info and key into the elasticsearch keystore, you can see them here: elasticsearch-keystore list azure.client.defau… --- ## [Search url Saved Objects by Title](https://discuss.elastic.co/t/search-url-saved-objects-by-title/385701)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 4\ **Last updated:** [April 7, 2026, 3:35pm UTC](https://discuss.elastic.co/t/search-url-saved-objects-by-title/385701 "2026-04-07T15:35:43Z")
Kibana 7.17.28 (yes, I know.) In the Stack Management \> Saved Objects section there is a Search field. I want to search for objects of type url with a given Title, or even a given id attribute which I've extracted from … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=11) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=13)