# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=3 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 4 --- ## [Elasticsearch Engineer Learning (Changing Data) Module not loading environment](https://discuss.elastic.co/t/elasticsearch-engineer-learning-changing-data-module-not-loading-environment/389925)
**Author:** [@Etiosa](https://discuss.elastic.co/u/Etiosa)\ **Replies:** 3\ **Last updated:** [September 2, 2026, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-learning-changing-data-module-not-loading-environment/389925 "2026-09-02T16:21:16Z")
Hi, i have an issue, when i try to to load changing data module in the elastic course it will not load the environment for days now, i have tried different browsers and same thing and other modules open except this on… --- ## [Release Version Dates](https://discuss.elastic.co/t/release-version-dates/390130)
**Author:** [@jameswiggins](https://discuss.elastic.co/u/jameswiggins)\ **Replies:** 3\ **Last updated:** [September 2, 2026, 2:54pm UTC](https://discuss.elastic.co/t/release-version-dates/390130 "2026-09-02T14:54:37Z")
The documentation states You can upgrade to a higher version if the target version was released after your current version. Upgrades to versions released before your current version are not supported, even if the versi… --- ## [Kibana Lens/Time Series Chart Incorrectly Splits Documents That Fall Exactly on a Minute Boundary](https://discuss.elastic.co/t/kibana-lens-time-series-chart-incorrectly-splits-documents-that-fall-exactly-on-a-minute-boundary/390125)
**Author:** [@sebastian31231](https://discuss.elastic.co/u/sebastian31231)\ **Replies:** 0\ **Last updated:** [September 2, 2026, 9:03am UTC](https://discuss.elastic.co/t/kibana-lens-time-series-chart-incorrectly-splits-documents-that-fall-exactly-on-a-minute-boundary/390125 "2026-09-02T09:03:59Z")
Hi, I’m having an issue with data visualization in Kibana on a time series chart. It appears that documents whose timestamps fall very close to the start of a full minute - e.g., \`12:15:00.03\` - aren’t always assigned t… --- ## [Intermittent metric registration error: worker\_millis\_per\_event](https://discuss.elastic.co/t/intermittent-metric-registration-error-worker-millis-per-event/383836)
**Author:** [@mariyabanatic](https://discuss.elastic.co/u/mariyabanatic)\ **Replies:** 8\ **Last updated:** [September 2, 2026, 6:02am UTC](https://discuss.elastic.co/t/intermittent-metric-registration-error-worker-millis-per-event/383836 "2026-09-02T06:02:11Z")
Issue Intermittent warning during pipeline startup. The worker\_millis\_per\_event metric fails to register but pipeline functions normally. \[org.logstash.execution.AbstractPipelineExt\] Metric registration error: \`worker\_m… --- ## [Jakarta.mail dependency downgraded](https://discuss.elastic.co/t/jakarta-mail-dependency-downgraded/390039)
**Author:** [@manick02](https://discuss.elastic.co/u/manick02)\ **Replies:** 2\ **Last updated:** [September 1, 2026, 8:11pm UTC](https://discuss.elastic.co/t/jakarta-mail-dependency-downgraded/390039 "2026-09-01T20:11:07Z")
I noticed jakarta.mail dependency downgraded from 1.6.8( in 8.18.6 )to 1.6.3 (in 8.19.20) We were tracking the CVE CVE-2025-7962 internally and was wondering if this downgrade made it open it again --- ## [Netapp & elasticsearch?](https://discuss.elastic.co/t/netapp-elasticsearch/390020)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [September 1, 2026, 4:47am UTC](https://discuss.elastic.co/t/netapp-elasticsearch/390020 "2026-09-01T04:47:01Z")
I would like to run an Elastic stack on VMware VMs. These VMs should run on NetApp via iSCSI/FC with XFS. It is a good or a bad idea? Does it work as good as local storage? Any input, shared story / experience about thi… --- ## [Error fetching data for metricset system.service](https://discuss.elastic.co/t/error-fetching-data-for-metricset-system-service/389951)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 5:12am UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-system-service/389951 "2026-08-31T05:12:50Z")
Hello everyone, I’m using Elastic Agent version 8.19.14, managed by Fleet, with the Linux Metrics integration to collect the status of Systemd units. Sometimes I notice that the agent becomes “Unhealthy” due to the fol… --- ## [Filebeat and Nanosecond Timestamps](https://discuss.elastic.co/t/filebeat-and-nanosecond-timestamps/389204)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 3:55am UTC](https://discuss.elastic.co/t/filebeat-and-nanosecond-timestamps/389204 "2026-08-31T03:55:37Z")
Hi, Can I get some clarification around how filebeat handles an inbound timestamp field of nanosecond precision when it uses that field to set @timestamp? Also, can filebeat generate nanosecond timestamps? --- ## [How to reliably verify a snapshot restore succeeded? Failed shards disappear from \_recovery](https://discuss.elastic.co/t/how-to-reliably-verify-a-snapshot-restore-succeeded-failed-shards-disappear-from-recovery/389912)
**Author:** [@ciprianamza](https://discuss.elastic.co/u/ciprianamza)\ **Replies:** 10\ **Last updated:** [August 30, 2026, 4:03pm UTC](https://discuss.elastic.co/t/how-to-reliably-verify-a-snapshot-restore-succeeded-failed-shards-disappear-from-recovery/389912 "2026-08-30T16:03:41Z")
Hello, I'd like to raise a possible problem I recently ran into in an internal application, and which I see the current Curator implementation mirrors as well (curator/curator/utils.py at v5.8.4 · elastic/curator · GitH… --- ## [Trigger alert for individual cpu core crossing 95% utilization](https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [August 28, 2026, 12:19pm UTC](https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959 "2026-08-28T12:19:32Z")
I have a simple requirement to trigger alert if any of the CPU core breach 95% threshold:(using alert/rule in kibana) Challenge facing: system.core.total.pct this field gives abnormal values to be used like 1000, 4700, … --- ## [How to change data view for an already created map?](https://discuss.elastic.co/t/how-to-change-data-view-for-an-already-created-map/389961)
**Author:** [@HaydenB0101](https://discuss.elastic.co/u/HaydenB0101)\ **Replies:** 1\ **Last updated:** [August 27, 2026, 7:18pm UTC](https://discuss.elastic.co/t/how-to-change-data-view-for-an-already-created-map/389961 "2026-08-27T19:18:16Z")
Hello, I imported a map from a separate server and want to change the data view that the map is using. I can't find any option to change the data view, only to see the details of the source. I tried looking through the … --- ## [Potential impact of Apache Log4j issue #4255 on Elastic products](https://discuss.elastic.co/t/potential-impact-of-apache-log4j-issue-4255-on-elastic-products/389937)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [August 26, 2026, 6:33pm UTC](https://discuss.elastic.co/t/potential-impact-of-apache-log4j-issue-4255-on-elastic-products/389937 "2026-08-26T18:33:20Z")
Hello, A new Apache Log4j security issue was reported on August 24, 2026: There is also a public PoC/reproduction here: According to the report, the issue affects Log4j's handling of serialized LogEvent objects an… --- ## [Elastic Defend Endpoint Protection Complete message](https://discuss.elastic.co/t/elastic-defend-endpoint-protection-complete-message/389934)
**Author:** [@jpedersm](https://discuss.elastic.co/u/jpedersm)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 2:48pm UTC](https://discuss.elastic.co/t/elastic-defend-endpoint-protection-complete-message/389934 "2026-08-26T14:48:20Z")
In a lab, I am trying to make a switch on the settings in Elastic Defend. The default is set to protect and notify on items from Malware to ransomware. When changing the settings from Protect to Detect and disabling no… --- ## [Moment.js Vulnerability](https://discuss.elastic.co/t/moment-js-vulnerability/389932)
**Author:** [@ashish.jagtap](https://discuss.elastic.co/u/ashish.jagtap)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 2:01pm UTC](https://discuss.elastic.co/t/moment-js-vulnerability/389932 "2026-08-26T14:01:42Z")
Hello, I am using Elasticsearch-Kibana version 7.17.2. In the security tests, it was observed that there was a vulnerability in moment.js software. moment.js 2.28.0 --\> CVE-2022-24785 Do we have remediation plan for … --- ## [Inquiry schedule: Backport concurrent-ruby 1.3.7 to Logstash 8.19.x for CVE-2026-54904(High)](https://discuss.elastic.co/t/inquiry-schedule-backport-concurrent-ruby-1-3-7-to-logstash-8-19-x-for-cve-2026-54904-high/389887)
**Author:** [@Della](https://discuss.elastic.co/u/Della)\ **Replies:** 1\ **Last updated:** [August 24, 2026, 4:12pm UTC](https://discuss.elastic.co/t/inquiry-schedule-backport-concurrent-ruby-1-3-7-to-logstash-8-19-x-for-cve-2026-54904-high/389887 "2026-08-24T16:12:13Z")
Dear Elastic Security & Logstash Team, We are running Logstash 8.19.19 in production environment. Security scanning (Docker Scout/Trivy) detects high vulnerability CVE-2026-54904 in embedded concurrent-ruby gem 1.1.9. T… --- ## [Indexing a small multi-field text dataset with the Elasticsearch Python client](https://discuss.elastic.co/t/indexing-a-small-multi-field-text-dataset-with-the-elasticsearch-python-client/389858)
**Author:** [@Cagatay\_Aydin](https://discuss.elastic.co/u/Cagatay_Aydin)\ **Replies:** 1\ **Last updated:** [August 24, 2026, 1:17pm UTC](https://discuss.elastic.co/t/indexing-a-small-multi-field-text-dataset-with-the-elasticsearch-python-client/389858 "2026-08-24T13:17:45Z")
Hi everyone, I have been testing Elasticsearch with a small dataset where each document contains several related text fields rather than one large body field. The dataset has 78 tarot card records. Each record includes… --- ## [ES, kibana both having ca.crt issues?](https://discuss.elastic.co/t/es-kibana-both-having-ca-crt-issues/389738)
**Author:** [@rik](https://discuss.elastic.co/u/rik)\ **Replies:** 12\ **Last updated:** [August 21, 2026, 10:13am UTC](https://discuss.elastic.co/t/es-kibana-both-having-ca-crt-issues/389738 "2026-08-21T10:13:56Z")
I'm not able to start up either the ES or kibana containers and I suspect the root cause has to do with ca-cert issues. i'm attaching my compose file below for reference with ES, the log shows this error: "@timestamp"… --- ## [Response\_split not splitting final response after a chain/while sequence completes](https://discuss.elastic.co/t/response-split-not-splitting-final-response-after-a-chain-while-sequence-completes/389417)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 2\ **Last updated:** [August 20, 2026, 10:42pm UTC](https://discuss.elastic.co/t/response-split-not-splitting-final-response-after-a-chain-while-sequence-completes/389417 "2026-08-20T22:42:35Z")
I have a working chain/while setup that polls an async job-status endpoint until completion — this part works correctly, and only the final ("finished") response reaches message/event.original, as expected. The problem:… --- ## [Set Custom Agent as Default in Agent Selection](https://discuss.elastic.co/t/set-custom-agent-as-default-in-agent-selection/389809)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [August 20, 2026, 8:42pm UTC](https://discuss.elastic.co/t/set-custom-agent-as-default-in-agent-selection/389809 "2026-08-20T20:42:10Z")
Hi Elastic Team, We have created a custom agent using Elastic Agent Builder. Currently, when a user opens the Agent Builder chat, the Agent Selection is automatically set to “Elastic AI Agent”. Our requirement is to m… --- ## [Fleet Server - disable certificate verification](https://discuss.elastic.co/t/fleet-server-disable-certificate-verification/389825)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 1\ **Last updated:** [August 20, 2026, 3:07pm UTC](https://discuss.elastic.co/t/fleet-server-disable-certificate-verification/389825 "2026-08-20T15:07:59Z")
Hi How can I disable cert verification on integrations running on Fleet Server? The agent (fleet server) is Fleet Managed, running as a service on Linux. All agents are running well, sending logs and metrics, however, … --- ## [Removing empty fields from an event (2026 edition!)](https://discuss.elastic.co/t/removing-empty-fields-from-an-event-2026-edition/389831)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 0\ **Last updated:** [August 20, 2026, 3:02pm UTC](https://discuss.elastic.co/t/removing-empty-fields-from-an-event-2026-edition/389831 "2026-08-20T15:02:02Z")
Continuing the discussion from Removing empty fields from an event (2024 edition!): It now removes any empty objects left over after removing empty fields: filter { ruby { id =\> "remove empty fields" path =\> … --- ## [Filebeat now processor seams to be buggy](https://discuss.elastic.co/t/filebeat-now-processor-seams-to-be-buggy/389776)
**Author:** [@Toony](https://discuss.elastic.co/u/Toony)\ **Replies:** 14\ **Last updated:** [August 20, 2026, 12:15pm UTC](https://discuss.elastic.co/t/filebeat-now-processor-seams-to-be-buggy/389776 "2026-08-20T12:15:47Z")
Hi, It seems the now processor behaves strangely If I set a now processor in filebeat at the top yaml level like this: processors: - now: field: metadata.timeline.t1 and configure Logstash like this: input {… --- ## [logstash-output-elasticsearch error](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936)
**Author:** [@wujun](https://discuss.elastic.co/u/wujun)\ **Replies:** 3\ **Last updated:** [August 20, 2026, 10:49am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936 "2026-08-20T10:49:20Z")
\[WARN \] 2026-07-09 10:54:37.480 \[Ruby-0-Thread-9: /usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-output-elasticsearch-12.1.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:234\] elasticsearch - F… --- ## [Kibana Dashboard search blocks bracket characters in \[\] prefix](https://discuss.elastic.co/t/kibana-dashboard-search-blocks-bracket-characters-in-prefix/389725)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 4\ **Last updated:** [August 19, 2026, 6:20pm UTC](https://discuss.elastic.co/t/kibana-dashboard-search-blocks-bracket-characters-in-prefix/389725 "2026-08-19T18:20:53Z")
We are using ELK 9.4.3 We are seeing this error when searching our dashboard. I though using brackets was a naming convention from Kibana itself so why is it giving an error? --- ## [Can't Install Elastic Agent On Windows Server](https://discuss.elastic.co/t/cant-install-elastic-agent-on-windows-server/389779)
**Author:** [@mureeb](https://discuss.elastic.co/u/mureeb)\ **Replies:** 0\ **Last updated:** [August 19, 2026, 10:17am UTC](https://discuss.elastic.co/t/cant-install-elastic-agent-on-windows-server/389779 "2026-08-19T10:17:48Z")
Environment Context: OS: Windows (x86\_64) Elastic Agent Version: 9.5.1 Deployment: Fleet-managed (On-Prem/Self-Managed Fleet Server) Endpoint Protection: Kaspersky EDR (Disabled during troubleshooting) Iss… --- ## [Using time shift in ES|QL dashboard panels](https://discuss.elastic.co/t/using-time-shift-in-es-ql-dashboard-panels/389751)
**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\ **Replies:** 2\ **Last updated:** [August 19, 2026, 7:17am UTC](https://discuss.elastic.co/t/using-time-shift-in-es-ql-dashboard-panels/389751 "2026-08-19T07:17:12Z")
Is time shift planned for ES|QL dashboard panels? I'm building Kibana dashboards using ES|QL and would like to compare the time range selected in the dashboard with the same period 52 weeks earlier. Ideally, I'd like t… --- ## [Recommended Resources](https://discuss.elastic.co/t/recommended-resources/389231)
**Author:** [@Rahul\_Kumar8](https://discuss.elastic.co/u/Rahul_Kumar8)\ **Replies:** 1\ **Last updated:** [August 18, 2026, 7:45am UTC](https://discuss.elastic.co/t/recommended-resources/389231 "2026-08-18T07:45:29Z")
I could not find any public documentation stating recommended resources for my kibana, elastic and logstash. What would the resource guide be if i had 100GB/day logs ? --- ## [Int Overflow produces invalid Filebeat stats](https://discuss.elastic.co/t/int-overflow-produces-invalid-filebeat-stats/389458)
**Author:** [@fleaz](https://discuss.elastic.co/u/fleaz)\ **Replies:** 3\ **Last updated:** [August 17, 2026, 1:09pm UTC](https://discuss.elastic.co/t/int-overflow-produces-invalid-filebeat-stats/389458 "2026-08-17T13:09:48Z")
Hey, we recently discovered some strange metrics coming from our Filebeats (8.19.19 running in k8s) because we have an alert to check for queue usage and alert if the queue gets to full. Sometimes the value for "Queue … --- ## [How to get details about es CVE fixes](https://discuss.elastic.co/t/how-to-get-details-about-es-cve-fixes/389615)
**Author:** [@manick02](https://discuss.elastic.co/u/manick02)\ **Replies:** 7\ **Last updated:** [August 17, 2026, 11:27am UTC](https://discuss.elastic.co/t/how-to-get-details-about-es-cve-fixes/389615 "2026-08-17T11:27:41Z")
I read somewhere in the forum that Elastic does not discuss about CVE fixes in the forum. What is the right method to reach-out to elastic? There are two things we need to document for every CVE identified in ES - 1 whet… --- ## [Latency graph not showing](https://discuss.elastic.co/t/latency-graph-not-showing/389668)
**Author:** [@ajoshi](https://discuss.elastic.co/u/ajoshi)\ **Replies:** 3\ **Last updated:** [August 15, 2026, 4:24pm UTC](https://discuss.elastic.co/t/latency-graph-not-showing/389668 "2026-08-15T16:24:03Z")
latency graph not coming in APM dashboard other things are coming i don't know why ? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=2) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=4)