# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=6

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 7

---

## [Unable to get keyspace metrics for Redis Integration](https://discuss.elastic.co/t/unable-to-get-keyspace-metrics-for-redis-integration/388123)

<div class="topic-metadata">

**Author:** [@Mansi\_Sharma1](https://discuss.elastic.co/u/Mansi_Sharma1)\
**Replies:** 0\
**Last updated:** [July 10, 2026, 1:06pm UTC](https://discuss.elastic.co/t/unable-to-get-keyspace-metrics-for-redis-integration/388123 "2026-07-10T13:06:45Z")

</div>

Hello, I integrated Redis Integration my Elastic Stack version is 9.1.2. For 1 service every dataset is coming. but for rest 3 the keyspace dataset is not populating anything. i cant even see the redis.keyspace datas…

---

## [Cost of E5 model usage](https://discuss.elastic.co/t/cost-of-e5-model-usage/388115)

<div class="topic-metadata">

**Author:** [@MR\_INTENSE\_GAMING](https://discuss.elastic.co/u/MR_INTENSE_GAMING)\
**Replies:** 0\
**Last updated:** [July 10, 2026, 10:51am UTC](https://discuss.elastic.co/t/cost-of-e5-model-usage/388115 "2026-07-10T10:51:27Z")

</div>

I reviewed the documentation for the E5 embedding model and found that it is available with the Enterprise subscription. However, upon further reading, I noticed that deploying the model requires an ML node, which incurs…

---

## [Migrate unmanaged index to data stream](https://discuss.elastic.co/t/migrate-unmanaged-index-to-data-stream/387725)

<div class="topic-metadata">

**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\
**Replies:** 2\
**Last updated:** [July 10, 2026, 8:24am UTC](https://discuss.elastic.co/t/migrate-unmanaged-index-to-data-stream/387725 "2026-07-10T08:24:58Z")

</div>

Hi, I have an index that receives a large amount of data. It is currently 250 GB in size (Elasticsearch 9.4.2), and data is continuously being ingested into it. I want to migrate it to a data stream. I also want to ap…

---

## [Cannot renew free Basic license on 5.2.2 — register.elastic.co reCAPTCHA shows "Invalid site key"](https://discuss.elastic.co/t/cannot-renew-free-basic-license-on-5-2-2-register-elastic-co-recaptcha-shows-invalid-site-key/387409)

<div class="topic-metadata">

**Author:** [@gbl0915](https://discuss.elastic.co/u/gbl0915)\
**Replies:** 12\
**Last updated:** [July 10, 2026, 12:07am UTC](https://discuss.elastic.co/t/cannot-renew-free-basic-license-on-5-2-2-register-elastic-co-recaptcha-shows-invalid-site-key/387409 "2026-07-10T00:07:11Z")

</div>

Hi, I'm trying to renew the free Basic license for a self-managed Elasticsearch/Kibana 5.2.2 cluster (X-Pack), which uses the one-year Basic license that has to be re-registered. The official self-service page no longe…

---

## [Elastic Mapping For Search and Updates](https://discuss.elastic.co/t/elastic-mapping-for-search-and-updates/387907)

<div class="topic-metadata">

**Author:** [@Harinder\_Singh](https://discuss.elastic.co/u/Harinder_Singh)\
**Replies:** 5\
**Last updated:** [July 9, 2026, 5:57pm UTC](https://discuss.elastic.co/t/elastic-mapping-for-search-and-updates/387907 "2026-07-09T17:57:05Z")

</div>

Hi, I am building an Enterprise level search for a Digital Asset Management where I can have below Entities Asset id, name, source, owner, expirationdate , tags Each of these assets can be tagged to i items , campaig…

---

## [Elasticsearch 7.17.28 Critical Bugs](https://discuss.elastic.co/t/elasticsearch-7-17-28-critical-bugs/387493)

<div class="topic-metadata">

**Author:** [@Abdullah\_Shah](https://discuss.elastic.co/u/Abdullah_Shah)\
**Replies:** 4\
**Last updated:** [July 9, 2026, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-28-critical-bugs/387493 "2026-07-09T08:40:31Z")

</div>

Anyone still using Elasticsearch 7.17.28 I'm facing some issues and would like to see if it's a elasticsearch issue or something else Issues like Snapshot repo permission issue Desc: Elasticsearch loses repo access…

---

## [Elasticseach 9.4.0 Won't Start on Nehalem CPU "does not support all the following CPU features"](https://discuss.elastic.co/t/elasticseach-9-4-0-wont-start-on-nehalem-cpu-does-not-support-all-the-following-cpu-features/386216)

<div class="topic-metadata">

**Author:** [@amorrow](https://discuss.elastic.co/u/amorrow)\
**Replies:** 12\
**Last updated:** [July 8, 2026, 3:08pm UTC](https://discuss.elastic.co/t/elasticseach-9-4-0-wont-start-on-nehalem-cpu-does-not-support-all-the-following-cpu-features/386216 "2026-07-08T15:08:12Z")

</div>

I got an unexpected surprise today when I tried to upgrade my Elasticsearch cluster from 9.3.4 to 9.4.0 on Ubuntu 24.04 LTS using deb packages. The service won't start. May 07 08:33:52 elk3 systemd\[1\]: Starting elastics…

---

## [Elasticsearch Hardware Requirements](https://discuss.elastic.co/t/elasticsearch-hardware-requirements/387878)

<div class="topic-metadata">

**Author:** [@Sam11](https://discuss.elastic.co/u/Sam11)\
**Replies:** 5\
**Last updated:** [July 8, 2026, 2:45pm UTC](https://discuss.elastic.co/t/elasticsearch-hardware-requirements/387878 "2026-07-08T14:45:10Z")

</div>

Hi everyone, I am a bit confused about elasticsearch memory-to-storage ratio. And I would appreciate some clarifications. I know that for warm nodes the ratio is 1:160 and 1:30 for hot nodes. The offical Elasticsearch…

---

## [Can't deploy model on ML node due to insufficient memory](https://discuss.elastic.co/t/cant-deploy-model-on-ml-node-due-to-insufficient-memory/387871)

<div class="topic-metadata">

**Author:** [@Giorgi\_Jambazishvili](https://discuss.elastic.co/u/Giorgi_Jambazishvili)\
**Replies:** 0\
**Last updated:** [July 8, 2026, 11:23am UTC](https://discuss.elastic.co/t/cant-deploy-model-on-ml-node-due-to-insufficient-memory/387871 "2026-07-08T11:23:02Z")

</div>

I am using Elasticsearch cloud. I currently host the free-tier ML node, but the same behavior occurs on the next available tier (node w/ 2GB of memory). I am trying to deploy the E5 embedding model, preferably base, but…

---

## [The selected trace cannot be found](https://discuss.elastic.co/t/the-selected-trace-cannot-be-found/387491)

<div class="topic-metadata">

**Author:** [@hailinux](https://discuss.elastic.co/u/hailinux)\
**Replies:** 4\
**Last updated:** [July 8, 2026, 9:52am UTC](https://discuss.elastic.co/t/the-selected-trace-cannot-be-found/387491 "2026-07-08T09:52:17Z")

</div>

Help me solve the APM problem The selected trace cannot be found . Now I access the Kibana UI: Observability -\> APM-\>Services -\> name service . so this I see Transactions and error as pictured. Please help me quickl…

---

## [Compound sort with \`missing: "\_last"\` silently drops/substitutes hits when every document ties on the leading field](https://discuss.elastic.co/t/compound-sort-with-missing-last-silently-drops-substitutes-hits-when-every-document-ties-on-the-leading-field/387834)

<div class="topic-metadata">

**Author:** [@Kent-Kuan](https://discuss.elastic.co/u/Kent-Kuan)\
**Replies:** 0\
**Last updated:** [July 8, 2026, 3:26am UTC](https://discuss.elastic.co/t/compound-sort-with-missing-last-silently-drops-substitutes-hits-when-every-document-ties-on-the-leading-field/387834 "2026-07-08T03:26:18Z")

</div>

We found a correctness bug: sorting by two fields where the leading field is missing on every matching document returns a wrong, incomplete top-N — even though the result should be mathematically identical to sorting by …

---

## [Kibana 8.19.17 fails to start after upgrade with FATAL Error \[ERR\_REQUIRE\_ESM\] in @elastic/charts](https://discuss.elastic.co/t/kibana-8-19-17-fails-to-start-after-upgrade-with-fatal-error-err-require-esm-in-elastic-charts/387406)

<div class="topic-metadata">

**Author:** [@JPPereira](https://discuss.elastic.co/u/JPPereira)\
**Replies:** 4\
**Last updated:** [July 7, 2026, 4:07pm UTC](https://discuss.elastic.co/t/kibana-8-19-17-fails-to-start-after-upgrade-with-fatal-error-err-require-esm-in-elastic-charts/387406 "2026-07-07T16:07:51Z")

</div>

Hi everyone, I am experiencing a crash loop with Kibana version 8.19.17 after upgrade on Rocky Linux 9.8 (Kernel 5.14). The service starts but crashes and restarts every ~20 seconds. Error Logs Here is the fatal error …

---

## [Ingesting Logs Without Integration Approach (SIEM)](https://discuss.elastic.co/t/ingesting-logs-without-integration-approach-siem/387666)

<div class="topic-metadata">

**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\
**Replies:** 1\
**Last updated:** [July 7, 2026, 2:14pm UTC](https://discuss.elastic.co/t/ingesting-logs-without-integration-approach-siem/387666 "2026-07-07T14:14:35Z")

</div>

I have been taksed to ingest logs of APPS/WEBSITES which are hosted on cloud like SAP S/4 , paypac , tally etc etc (30+apps - mainly proprietary/internal apps like ) Q1. what approach should i be using each time i get …

---

## [Filebeat to Elastic Agent(otel collector) migration - 9.4.2](https://discuss.elastic.co/t/filebeat-to-elastic-agent-otel-collector-migration-9-4-2/387302)

<div class="topic-metadata">

**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\
**Replies:** 7\
**Last updated:** [July 7, 2026, 1:15pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-agent-otel-collector-migration-9-4-2/387302 "2026-07-07T13:15:03Z")

</div>

I am currently migrating our existing Filebeat-based log collection architecture to the Elastic Agent as OpenTelemetry Collector approach and would appreciate some clarification. I am following the "Elastic Agent as O…

---

## [Do i need to use the ingest node instead of hot nodes in logstash output](https://discuss.elastic.co/t/do-i-need-to-use-the-ingest-node-instead-of-hot-nodes-in-logstash-output/387607)

<div class="topic-metadata">

**Author:** [@kkumar123](https://discuss.elastic.co/u/kkumar123)\
**Replies:** 2\
**Last updated:** [July 7, 2026, 11:50am UTC](https://discuss.elastic.co/t/do-i-need-to-use-the-ingest-node-instead-of-hot-nodes-in-logstash-output/387607 "2026-07-07T11:50:33Z")

</div>

Hello i have dedicated nodes of ml,coordinate, and ml and hot currently i am using the hot nodes in the out put of the logstash but i want to know shouldn't i remove the ingest role from hot and use ingest node in out o…

---

## [ES client upgrade to 9.X](https://discuss.elastic.co/t/es-client-upgrade-to-9-x/387693)

<div class="topic-metadata">

**Author:** [@sundar.s](https://discuss.elastic.co/u/sundar.s)\
**Replies:** 3\
**Last updated:** [July 7, 2026, 11:18am UTC](https://discuss.elastic.co/t/es-client-upgrade-to-9-x/387693 "2026-07-07T11:18:27Z")

</div>

Our product is currently with Current ES client version: 7.17.9 - co.elastic.clients:elasticsearch-java 7.17.9 with Java API Client Current ES server version: 8.14.3 for test automation Java:17 We are in process of a…

---

## [How can I generate the full list of dependencies required to build a Kibana plugin in airgapped env?](https://discuss.elastic.co/t/how-can-i-generate-the-full-list-of-dependencies-required-to-build-a-kibana-plugin-in-airgapped-env/386297)

<div class="topic-metadata">

**Author:** [@Rishav](https://discuss.elastic.co/u/Rishav)\
**Replies:** 1\
**Last updated:** [July 6, 2026, 9:34am UTC](https://discuss.elastic.co/t/how-can-i-generate-the-full-list-of-dependencies-required-to-build-a-kibana-plugin-in-airgapped-env/386297 "2026-07-06T09:34:18Z")

</div>

We currently build our Kibana plugins in a CI/CD pipeline on a VM with full internet access. As part of a security hardening effort, we are moving this build to an airgapped environment where all dependencies must be res…

---

## [Node thread\_pools choked](https://discuss.elastic.co/t/node-thread-pools-choked/387466)

<div class="topic-metadata">

**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\
**Replies:** 2\
**Last updated:** [July 3, 2026, 7:15am UTC](https://discuss.elastic.co/t/node-thread-pools-choked/387466 "2026-07-03T07:15:44Z")

</div>

We are using elasticsearch 7.17.6 in one our cluster. Recently we saw that two of the hot nodes had their thread\_pools choked. Increased Queue and rejections. From jstack it seems that the node's CPU is occupied doi…

---

## [One Kibana for three clusters](https://discuss.elastic.co/t/one-kibana-for-three-clusters/387479)

<div class="topic-metadata">

**Author:** [@kkumar123](https://discuss.elastic.co/u/kkumar123)\
**Replies:** 1\
**Last updated:** [July 2, 2026, 4:23pm UTC](https://discuss.elastic.co/t/one-kibana-for-three-clusters/387479 "2026-07-02T16:23:31Z")

</div>

Based on the discussion threads I've reviewed and my understanding, Kibana can connect to only one Elasticsearch cluster. Even if Cross-Cluster Search (CCS) and Cross-Cluster Replication (CCR) are configured, Kibana stil…

---

## [RBAC - Manage spaces - how to disable it?](https://discuss.elastic.co/t/rbac-manage-spaces-how-to-disable-it/386881)

<div class="topic-metadata">

**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\
**Replies:** 6\
**Last updated:** [July 2, 2026, 7:26am UTC](https://discuss.elastic.co/t/rbac-manage-spaces-how-to-disable-it/386881 "2026-07-02T07:26:56Z")

</div>

In elastic stack 9.4 we want to disable /enable "Manage spaces" functionality. I found only this in the documentation: "An example of a built-in role is kibana\_admin. Assigning this role to your users will grant access…

---

## [Timezone in watcher](https://discuss.elastic.co/t/timezone-in-watcher/387430)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 3\
**Last updated:** [July 1, 2026, 1:40pm UTC](https://discuss.elastic.co/t/timezone-in-watcher/387430 "2026-07-01T13:40:47Z")

</div>

I have created a watcher to send business dashboards to clients . Elasticsearch watcher supports UTC and the requirement is reports should receive at 8 am first day of every month. I forgot about UTC when creating below …

---

## [Elastic certificate password](https://discuss.elastic.co/t/elastic-certificate-password/386883)

<div class="topic-metadata">

**Author:** [@Hamda\_A](https://discuss.elastic.co/u/Hamda_A)\
**Replies:** 3\
**Last updated:** [July 1, 2026, 1:29pm UTC](https://discuss.elastic.co/t/elastic-certificate-password/386883 "2026-07-01T13:29:07Z")

</div>

Hello, Our Elasticsearch cluster certificates have expired, and we generated a new certificate authority and elastic certificate without a password. After uploading the new certificate to the different nodes and trying …

---

## [\[ERROR\]\[plugins.monitoring.monitoring\] Could not find license information for cluster = 'mylogging'. Please check the cluster's master node server logs for errors or warnings](https://discuss.elastic.co/t/error-plugins-monitoring-monitoring-could-not-find-license-information-for-cluster-mylogging-please-check-the-clusters-master-node-server-logs-for-errors-or-warnings/387415)

<div class="topic-metadata">

**Author:** [@zteddie](https://discuss.elastic.co/u/zteddie)\
**Replies:** 1\
**Last updated:** [June 30, 2026, 7:44pm UTC](https://discuss.elastic.co/t/error-plugins-monitoring-monitoring-could-not-find-license-information-for-cluster-mylogging-please-check-the-clusters-master-node-server-logs-for-errors-or-warnings/387415 "2026-06-30T19:44:16Z")

</div>

I am upgrading my elasticsearch stack hosted on an AKS cluster. The cluster is running with basic license. Everything seemed fine with 8.19.17. But after I upgraded to 9.4.2, kibana is throwing out following error (when …

---

## [Apm data timestamps wrong =\> high load and slow responses](https://discuss.elastic.co/t/apm-data-timestamps-wrong-high-load-and-slow-responses/387329)

<div class="topic-metadata">

**Author:** [@nb71](https://discuss.elastic.co/u/nb71)\
**Replies:** 13\
**Last updated:** [June 30, 2026, 2:41pm UTC](https://discuss.elastic.co/t/apm-data-timestamps-wrong-high-load-and-slow-responses/387329 "2026-06-30T14:41:12Z")

</div>

We have an Elastic Cloud installation running version 9.4.0. Overall, it is quite heavily loaded. We have multiple dashboards that use APM and RUM data. We started noticing that the dashboards were becoming slower and …

---

## [Optimizing Elasticsearch Indexing and Search Performance for a Growing Morse Code Website with High-Volume Translation and Analytics Data](https://discuss.elastic.co/t/optimizing-elasticsearch-indexing-and-search-performance-for-a-growing-morse-code-website-with-high-volume-translation-and-analytics-data/387398)

<div class="topic-metadata">

**Author:** [@joeroot](https://discuss.elastic.co/u/joeroot)\
**Replies:** 1\
**Last updated:** [June 30, 2026, 6:51am UTC](https://discuss.elastic.co/t/optimizing-elasticsearch-indexing-and-search-performance-for-a-growing-morse-code-website-with-high-volume-translation-and-analytics-data/387398 "2026-06-30T06:51:50Z")

</div>

I run a Morse Code translator website that allows users to convert plain text into Morse code, decode Morse messages, browse educational articles, and use interactive learning tools. As the website has grown, I have also…

---

## [How to upgrade from Elastic Stack 8 to 9.1?](https://discuss.elastic.co/t/how-to-upgrade-from-elastic-stack-8-to-9-1/378383)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 6\
**Last updated:** [June 29, 2026, 10:10am UTC](https://discuss.elastic.co/t/how-to-upgrade-from-elastic-stack-8-to-9-1/378383 "2026-06-29T10:10:24Z")

</div>

Hello There isnt a clear guide (like other versions) on how to upgrade from Elastic Stack 8 (8.18) to Elastic Stack 9 (9.1). What is the best procedure on doing this? Im using Debian and I rather do it all thru apt-get …

---

## [I want to do the max of the sum doc\_count per second in line grpah visualization](https://discuss.elastic.co/t/i-want-to-do-the-max-of-the-sum-doc-count-per-second-in-line-grpah-visualization/387260)

<div class="topic-metadata">

**Author:** [@Goncalo\_Santos](https://discuss.elastic.co/u/Goncalo_Santos)\
**Replies:** 1\
**Last updated:** [June 29, 2026, 1:22am UTC](https://discuss.elastic.co/t/i-want-to-do-the-max-of-the-sum-doc-count-per-second-in-line-grpah-visualization/387260 "2026-06-29T01:22:58Z")

</div>

Hello. I'm trying to get the maximum value of the sum doc\_count but using a max\_bucket aggregation it either reaches the maximum number of buckets (error: "too\_many\_buckets\_exception"), or it ajusts the timerange to be …

---

## [Kibana still shows the hidden indices even with Include hidden indices set to off](https://discuss.elastic.co/t/kibana-still-shows-the-hidden-indices-even-with-include-hidden-indices-set-to-off/387310)

<div class="topic-metadata">

**Author:** [@alifiroozi80](https://discuss.elastic.co/u/alifiroozi80)\
**Replies:** 4\
**Last updated:** [June 27, 2026, 7:29am UTC](https://discuss.elastic.co/t/kibana-still-shows-the-hidden-indices-even-with-include-hidden-indices-set-to-off/387310 "2026-06-27T07:29:18Z")

</div>

Hello everyone Even with Include hidden indices set to off, I can still see the . indices (belongs to xpack) in Kibana. How can I disable them so they don't show in Kibana? version: 9.4.2

---

## [Elasticsearch 8.17 → 8.19 upgrade: kNN now eagerly defaults "k = size", breaking aggregation-only queries](https://discuss.elastic.co/t/elasticsearch-8-17-8-19-upgrade-knn-now-eagerly-defaults-k-size-breaking-aggregation-only-queries/384628)

<div class="topic-metadata">

**Author:** [@shekhar\_k](https://discuss.elastic.co/u/shekhar_k)\
**Replies:** 5\
**Last updated:** [June 26, 2026, 7:11pm UTC](https://discuss.elastic.co/t/elasticsearch-8-17-8-19-upgrade-knn-now-eagerly-defaults-k-size-breaking-aggregation-only-queries/384628 "2026-06-26T19:11:15Z")

</div>

I’m upgrading Elasticsearch from 8.17.3 to 8.19.10 and ran into a behavioural change with kNN + aggregations that breaks an existing use case. What worked in 8.17.3: We use knn inside the query DSL (bool.must) together…

---

## [In oracle integration, The sysmetric dataset is not being populated ? Could it be because of the oracle db being a PDB instead of CDB?](https://discuss.elastic.co/t/in-oracle-integration-the-sysmetric-dataset-is-not-being-populated-could-it-be-because-of-the-oracle-db-being-a-pdb-instead-of-cdb/387344)

<div class="topic-metadata">

**Author:** [@Mansi\_Sharma1](https://discuss.elastic.co/u/Mansi_Sharma1)\
**Replies:** 0\
**Last updated:** [June 26, 2026, 9:08am UTC](https://discuss.elastic.co/t/in-oracle-integration-the-sysmetric-dataset-is-not-being-populated-could-it-be-because-of-the-oracle-db-being-a-pdb-instead-of-cdb/387344 "2026-06-26T09:08:02Z")

</div>

Hi, I integrated a oracle db using elastic agent oracle integration, the rest of the datastream\_datasets are populating all of the fields execept for the SYSMETRIC one. I even checked with the DB team and they have gra…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=5)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=7)
