# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=18 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 19 --- ## [How do you calculate the average document size in streams?](https://discuss.elastic.co/t/how-do-you-calculate-the-average-document-size-in-streams/385117)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 1\ **Last updated:** [February 19, 2026, 4:08pm UTC](https://discuss.elastic.co/t/how-do-you-calculate-the-average-document-size-in-streams/385117 "2026-02-19T16:08:24Z")
Streams is a really great feature that you have added, which was really needed. Now for the question. As the title suggests. How does the daily average get calculated? I tried calculating the average document size by… --- ## [Fleet isn't loading](https://discuss.elastic.co/t/fleet-isnt-loading/384946)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 2\ **Last updated:** [February 19, 2026, 2:59pm UTC](https://discuss.elastic.co/t/fleet-isnt-loading/384946 "2026-02-19T14:59:34Z")
Fleet takes too much time to load It worked when we opened the internet access to the machine, so we have made a firewall rule to go to elastic.co However, the problem still resides What should I look for or how… --- ## [Kibana permissions - different behavior between read and custom privileges](https://discuss.elastic.co/t/kibana-permissions-different-behavior-between-read-and-custom-privileges/385112)
**Author:** [@Ror](https://discuss.elastic.co/u/Ror)\ **Replies:** 1\ **Last updated:** [February 19, 2026, 1:50pm UTC](https://discuss.elastic.co/t/kibana-permissions-different-behavior-between-read-and-custom-privileges/385112 "2026-02-19T13:50:58Z")
I recently migrated from elastic cloud to elastic cloud on kubernetes. In order to migrate, I restored a snapshot with all the users and roles. I wanted to make a change to a custom role I created to allow a user to crea… --- ## [mTLS configuration confusion between Elasticsearch & Kibana](https://discuss.elastic.co/t/mtls-configuration-confusion-between-elasticsearch-kibana/385105)
**Author:** [@Reviving9721](https://discuss.elastic.co/u/Reviving9721)\ **Replies:** 2\ **Last updated:** [February 19, 2026, 2:38am UTC](https://discuss.elastic.co/t/mtls-configuration-confusion-between-elasticsearch-kibana/385105 "2026-02-19T02:38:32Z")
Currently attempting to configure mTLS between Elasticsearch & Kibana, but I am getting this error… (stack 9.3.0) \[2026-02-18T15:25:30,182\]\[WARN \]\[o.e.h.AbstractHttpServerTransport\] \[testelastic.internal\] caught excepti… --- ## [Operating system version when running inside Kubernetes daemonset](https://discuss.elastic.co/t/operating-system-version-when-running-inside-kubernetes-daemonset/385099)
**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\ **Replies:** 0\ **Last updated:** [February 18, 2026, 4:36pm UTC](https://discuss.elastic.co/t/operating-system-version-when-running-inside-kubernetes-daemonset/385099 "2026-02-18T16:36:36Z")
Hello, I am running metricbeat inside a Kubernetes cluster as a DaemonSet based on the manifest yaml https://raw.githubusercontent.com/elastic/beats/8.19/deploy/kubernetes/metricbeat-kubernetes.yaml . However, the outp… --- ## [\`agent.logging.to\_eventlog: true\` fails with "appName cannot be empty" even when running as Windows service](https://discuss.elastic.co/t/agent-logging-to-eventlog-true-fails-with-appname-cannot-be-empty-even-when-running-as-windows-service/385096)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 0\ **Last updated:** [February 18, 2026, 12:39pm UTC](https://discuss.elastic.co/t/agent-logging-to-eventlog-true-fails-with-appname-cannot-be-empty-even-when-running-as-windows-service/385096 "2026-02-18T12:39:48Z")
Environment: Elastic Agent: 9.1.10 (build: 45f734) OS: Windows Server 2022 Mode: Standalone (no Fleet) Problem: Setting agent.logging.to\_eventlog: true in elastic-agent.yml causes agent to fail on startup with: elas… --- ## [How to implement RAG with index mapping](https://discuss.elastic.co/t/how-to-implement-rag-with-index-mapping/385095)
**Author:** [@kirancchand](https://discuss.elastic.co/u/kirancchand)\ **Replies:** 0\ **Last updated:** [February 18, 2026, 12:22pm UTC](https://discuss.elastic.co/t/how-to-implement-rag-with-index-mapping/385095 "2026-02-18T12:22:39Z")
I need to create a RAG application which use mappings of my index to create query and execute and then response back.can i get any idea to do this? does vectorise and implement RAG or my query which would be better to im… --- ## [Elasticsearch put all indices to read-only mode before upgrade](https://discuss.elastic.co/t/elasticsearch-put-all-indices-to-read-only-mode-before-upgrade/378590)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 7\ **Last updated:** [February 18, 2026, 10:41am UTC](https://discuss.elastic.co/t/elasticsearch-put-all-indices-to-read-only-mode-before-upgrade/378590 "2026-02-18T10:41:01Z")
Hello, Is is possible to put all indexes including all system to read-only mode ? I was looking about that but could find only read-only mode to dedicated one index. I'm doing test upgrade and everytime when I try to … --- ## [Field \_size on data stream](https://discuss.elastic.co/t/field-size-on-data-stream/384982)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 15\ **Last updated:** [February 18, 2026, 10:18am UTC](https://discuss.elastic.co/t/field-size-on-data-stream/384982 "2026-02-18T10:18:30Z")
Hi,I'd like to set the \_size field on a data stream associated with an integration. How can I do this? The data stream has a custom index template associated with it: GET \_index\_template/logs-thales\_udp.log-custom { "… --- ## [Registry Fields with Winlogbeat](https://discuss.elastic.co/t/registry-fields-with-winlogbeat/385082)
**Author:** [@TheBob](https://discuss.elastic.co/u/TheBob)\ **Replies:** 1\ **Last updated:** [February 17, 2026, 10:05pm UTC](https://discuss.elastic.co/t/registry-fields-with-winlogbeat/385082 "2026-02-17T22:05:07Z")
Running an Elastic Stack version 8 server. Trying to get Winlogbeat to send events to the server and run some detection rules alerts on them, but not getting all the expected fields configured. E.g. one of the rules mon… --- ## [AbuseCH integration issue](https://discuss.elastic.co/t/abusech-integration-issue/385076)
**Author:** [@maryam\_naeem](https://discuss.elastic.co/u/maryam_naeem)\ **Replies:** 3\ **Last updated:** [February 17, 2026, 4:29pm UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076 "2026-02-17T16:29:52Z")
I am using elastic basic plan , but i have a problem being encountered whenever i integrate abusech integration v1.25.0 , i cant see any datastream or data indices , which means the data is not flowing , when i researc… --- ## [Is it safe to upgrade on cloud using upgrade button from console](https://discuss.elastic.co/t/is-it-safe-to-upgrade-on-cloud-using-upgrade-button-from-console/385077)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 0\ **Last updated:** [February 17, 2026, 11:10am UTC](https://discuss.elastic.co/t/is-it-safe-to-upgrade-on-cloud-using-upgrade-button-from-console/385077 "2026-02-17T11:10:58Z")
I am upgrading from v8.9 to v8.19.x to v9.3.0. we are currently using java HLR 7.17. So, I want to move to server v8.19.x first and then deploy java REST v8.19 and then upgrade server to v9.3.0. Is it ok to use upgrade … --- ## [Nodes Stats Breaker Tripped Meaning](https://discuss.elastic.co/t/nodes-stats-breaker-tripped-meaning/359392)
**Author:** [@jquisenberry](https://discuss.elastic.co/u/jquisenberry)\ **Replies:** 1\ **Last updated:** [February 17, 2026, 11:00am UTC](https://discuss.elastic.co/t/nodes-stats-breaker-tripped-meaning/359392 "2026-02-17T11:00:33Z")
In the Nodes Stats API, what does "tripped": ### mean? I am running version 7.17. I understand that tripping a circuit breaker means that some activity has caused JVM heap consumption in excess of limit\_size. What I wo… --- ## [Long-term snapshot compatibility across major versions (10+ year archive use case)](https://discuss.elastic.co/t/long-term-snapshot-compatibility-across-major-versions-10-year-archive-use-case/385068)
**Author:** [@jiriNovotny](https://discuss.elastic.co/u/jiriNovotny)\ **Replies:** 9\ **Last updated:** [February 16, 2026, 8:01pm UTC](https://discuss.elastic.co/t/long-term-snapshot-compatibility-across-major-versions-10-year-archive-use-case/385068 "2026-02-16T20:01:31Z")
Hello, I’m looking for clarification regarding the functionality described in the documentation about reading indices from older Elasticsearch versions: Currently, our process is as follows: We store indices as sna… --- ## [Best practices for migrating ELK artifacts and configurations across environments](https://discuss.elastic.co/t/best-practices-for-migrating-elk-artifacts-and-configurations-across-environments/385051)
**Author:** [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Replies:** 4\ **Last updated:** [February 16, 2026, 1:25pm UTC](https://discuss.elastic.co/t/best-practices-for-migrating-elk-artifacts-and-configurations-across-environments/385051 "2026-02-16T13:25:19Z")
Hi All, I am looking for guidance on best practices for migrating ELK artifacts from lower environments (e.g., Dev/Test) to higher environments (e.g., UAT/Prod). For application code, we typically use GitLab/Jenkins wi… --- ## [Packaging quantity not searchable](https://discuss.elastic.co/t/packaging-quantity-not-searchable/384914)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 2\ **Last updated:** [February 16, 2026, 10:05am UTC](https://discuss.elastic.co/t/packaging-quantity-not-searchable/384914 "2026-02-16T10:05:44Z")
We are currently getting zero results when searching with term along with quantity for example coke 1l. So, I want to index a new field packquantity which has values like 1 kg, 500 g, 2l. But my concern here is how to ha… --- ## [ELK final output](https://discuss.elastic.co/t/elk-final-output/384962)
**Author:** [@scorpoin82](https://discuss.elastic.co/u/scorpoin82)\ **Replies:** 3\ **Last updated:** [February 16, 2026, 2:59am UTC](https://discuss.elastic.co/t/elk-final-output/384962 "2026-02-16T02:59:34Z")
Hello community, I have setup a small ELK cluster with 3 Master nodes , 3 Data Nodes , 3 Logstash Nodes and 1 Kibana Node. 3 Logstash nodes are behind F5 load balancer and those logstash connected with data nodes. Now… --- ## [Fastest way to retrieve all unique terms in batches](https://discuss.elastic.co/t/fastest-way-to-retrieve-all-unique-terms-in-batches/385057)
**Author:** [@srishtii](https://discuss.elastic.co/u/srishtii)\ **Replies:** 1\ **Last updated:** [February 15, 2026, 9:47pm UTC](https://discuss.elastic.co/t/fastest-way-to-retrieve-all-unique-terms-in-batches/385057 "2026-02-15T21:47:17Z")
I’m looking for the fastest and safest way to retrieve all unique values of a field for a given time range, in batches. My requirements are: :white\_check\_mark: Retrieve 100% of unique terms (no missing buckets) … --- ## [DLQ setup issue for specific application in Logstash pipeline](https://discuss.elastic.co/t/dlq-setup-issue-for-specific-application-in-logstash-pipeline/385059)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [February 15, 2026, 4:57pm UTC](https://discuss.elastic.co/t/dlq-setup-issue-for-specific-application-in-logstash-pipeline/385059 "2026-02-15T16:57:05Z")
We have a single Logstash pipeline that listens on port 5044 and receives data from multiple Beats sources. Filebeat is installed on one of the source servers, and we want to configure a Dead Letter Queue (DLQ) only for … --- ## [How to use sniffer capability in elasticsearch-java client tool?](https://discuss.elastic.co/t/how-to-use-sniffer-capability-in-elasticsearch-java-client-tool/385038)
**Author:** [@mloine](https://discuss.elastic.co/u/mloine)\ **Replies:** 3\ **Last updated:** [February 15, 2026, 3:05pm UTC](https://discuss.elastic.co/t/how-to-use-sniffer-capability-in-elasticsearch-java-client-tool/385038 "2026-02-15T15:05:13Z")
How to use sniffer capability in elasticsearch-java client tool? According to the documentation, it is not supported by default, and the dependencies are \ \co.elastic.clients\ \ **Author:** [@Erik\_Reuter](https://discuss.elastic.co/u/Erik_Reuter)\ **Replies:** 1\ **Last updated:** [February 15, 2026, 11:16am UTC](https://discuss.elastic.co/t/lens-table-is-always-sorted-on-oldest-leftmost-column-need-to-sort-on-newest-rightmost-column/385015 "2026-02-15T11:16:41Z") I have created a Table, where I would like for it to automatically sort records on the column having the newest date, but it defaults to sorting on the oldest date… we use this on a overhead screen showing general status… --- ## [Kibana Cross-Site Scripting Vulnerability - Unencoded Character in JSON Response](https://discuss.elastic.co/t/kibana-cross-site-scripting-vulnerability-unencoded-character-in-json-response/385041)
**Author:** [@Rakesh\_Bhalani](https://discuss.elastic.co/u/Rakesh_Bhalani)\ **Replies:** 1\ **Last updated:** [February 13, 2026, 1:42pm UTC](https://discuss.elastic.co/t/kibana-cross-site-scripting-vulnerability-unencoded-character-in-json-response/385041 "2026-02-13T13:42:59Z")
We have on-prime installation of kibana-8.14.0, It is being analyzed by the vulnerability detection tool Qualys, tool is reporting JSON response of following API as vulnerable to Cross-Site-Scripting Kibana API call ma… --- ## [I need a docker image with enrollment token disabled](https://discuss.elastic.co/t/i-need-a-docker-image-with-enrollment-token-disabled/385027)
**Author:** [@Shivu007](https://discuss.elastic.co/u/Shivu007)\ **Replies:** 1\ **Last updated:** [February 12, 2026, 9:02pm UTC](https://discuss.elastic.co/t/i-need-a-docker-image-with-enrollment-token-disabled/385027 "2026-02-12T21:02:57Z")
Hi team, I’m currently working on the elasticsearch and kibana Docker image for the snowflake SPCS container. However, I’m unable to generate the enrollment token and the logs also do not display the token or password w… --- ## [Kibana Instance Crashing During PDF/CSV Export on Elastic Cloud](https://discuss.elastic.co/t/kibana-instance-crashing-during-pdf-csv-export-on-elastic-cloud/384990)
**Author:** [@Hichem\_Blagui](https://discuss.elastic.co/u/Hichem_Blagui)\ **Replies:** 4\ **Last updated:** [February 12, 2026, 2:07pm UTC](https://discuss.elastic.co/t/kibana-instance-crashing-during-pdf-csv-export-on-elastic-cloud/384990 "2026-02-12T14:07:28Z")
Hi, I am experiencing frequent instance crashes when attempting to export default dashboards (PDF/PNG/CSV) from Kibana. I am currently using Elastic Cloud and do not have access to the underlying terminal or the physica… --- ## [Can't disable Kibana calls to 169.254.169.254](https://discuss.elastic.co/t/cant-disable-kibana-calls-to-169-254-169-254/385018)
**Author:** [@fentom](https://discuss.elastic.co/u/fentom)\ **Replies:** 0\ **Last updated:** [February 12, 2026, 10:01am UTC](https://discuss.elastic.co/t/cant-disable-kibana-calls-to-169-254-169-254/385018 "2026-02-12T10:01:40Z")
I’m running Kibana and Elasticsearch using ECK Operator on an air gapped K8s cluster which also uses Cilium to configure network policies. In the Hubble UI provided by Cilium I can see that requests from Elasticsearch a… --- ## [APT will consider Elastic repositories invalid soon](https://discuss.elastic.co/t/apt-will-consider-elastic-repositories-invalid-soon/384448)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 4\ **Last updated:** [February 12, 2026, 8:57am UTC](https://discuss.elastic.co/t/apt-will-consider-elastic-repositories-invalid-soon/384448 "2026-02-12T08:57:44Z")
Hi, On Debian 13+, apt will soon consider Elastic repository invalid Warning: https://artifacts.elastic.co/packages/8.x/apt/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details … --- ## [Elasticsearch Indexing, Relevance Tuning, and Performance Issues in a Dynamic Restaurant Menu Website](https://discuss.elastic.co/t/elasticsearch-indexing-relevance-tuning-and-performance-issues-in-a-dynamic-restaurant-menu-website/385012)
**Author:** [@joeroot](https://discuss.elastic.co/u/joeroot)\ **Replies:** 1\ **Last updated:** [February 12, 2026, 6:37am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-relevance-tuning-and-performance-issues-in-a-dynamic-restaurant-menu-website/385012 "2026-02-12T06:37:25Z")
I am managing a restaurant menu website that relies heavily on Elasticsearch to power search functionality across menu items, categories, ingredients, dietary tags, and promotional offers. The dataset includes hundreds o… --- ## [📢 Announcing: Kibana MCP Server - Control Kibana using Claude AI](https://discuss.elastic.co/t/announcing-kibana-mcp-server-control-kibana-using-claude-ai/377757)
**Author:** [@azmatjan139](https://discuss.elastic.co/u/azmatjan139)\ **Replies:** 4\ **Last updated:** [February 12, 2026, 12:16am UTC](https://discuss.elastic.co/t/announcing-kibana-mcp-server-control-kibana-using-claude-ai/377757 "2026-02-12T00:16:33Z")
Project Introduction I'm excited to announce Kibana MCP Server, a new open-source implementation based on the Model Context Protocol (MCP) that allows any MCP-compatible AI client (such as Claude Desktop) to access and m… --- ## [Elasticsearch migration from 7.17 to 8.15](https://discuss.elastic.co/t/elasticsearch-migration-from-7-17-to-8-15/384978)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 8\ **Last updated:** [February 11, 2026, 9:53pm UTC](https://discuss.elastic.co/t/elasticsearch-migration-from-7-17-to-8-15/384978 "2026-02-11T21:53:00Z")
We need to upgrade from ES 7.17.3 to 8.15.2. We have done the following so far: Ran Upgrade Assistant on 7.17.3 and fixed any reported “Critical” issues. No Critical issue is being reported now. Taken snapshot on a NA… --- ## [Failed to check if maintenance windows are active](https://discuss.elastic.co/t/failed-to-check-if-maintenance-windows-are-active/384984)
**Author:** [@GiorgioS13](https://discuss.elastic.co/u/GiorgioS13)\ **Replies:** 6\ **Last updated:** [February 11, 2026, 12:15pm UTC](https://discuss.elastic.co/t/failed-to-check-if-maintenance-windows-are-active/384984 "2026-02-11T12:15:26Z")
After the update of the on-premises deployment, this error appears. What could be the root cause? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=17) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=19)