# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=7 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 8 --- ## [Kibana 9.3.1 dashboard loads slow](https://discuss.elastic.co/t/kibana-9-3-1-dashboard-loads-slow/387206)
**Author:** [@mittal\_rawal](https://discuss.elastic.co/u/mittal_rawal)\ **Replies:** 9\ **Last updated:** [June 25, 2026, 2:18pm UTC](https://discuss.elastic.co/t/kibana-9-3-1-dashboard-loads-slow/387206 "2026-06-25T14:18:38Z")
Hi Team, i have recently migrated elk from 8.16 to 9.3.1 i notice slowness in dashboard load. time take to loads 1-2 minutes for all panels in dashboard i want to load that within 10sec below i am sharing my cluster d… --- ## [The proper way to reindex a data stream index](https://discuss.elastic.co/t/the-proper-way-to-reindex-a-data-stream-index/371102)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 2\ **Last updated:** [June 25, 2026, 2:03pm UTC](https://discuss.elastic.co/t/the-proper-way-to-reindex-a-data-stream-index/371102 "2026-06-25T14:03:56Z")
I have run into an issue with mappings in an data stream index. Can someone help me out? I am getting data type conflicts between the new mapping and old mapping of some fields. What I want to do is just remove the mappi… --- ## [Metricbeat SQL Module with cursor rereading rows](https://discuss.elastic.co/t/metricbeat-sql-module-with-cursor-rereading-rows/387286)
**Author:** [@lpeter](https://discuss.elastic.co/u/lpeter)\ **Replies:** 3\ **Last updated:** [June 25, 2026, 7:39am UTC](https://discuss.elastic.co/t/metricbeat-sql-module-with-cursor-rereading-rows/387286 "2026-06-25T07:39:31Z")
Hello! I think I may have hit a bug where Metricbeat SQL module's cursor state can be read from the wrong Elastic Agent component data path, causing cursor reset and duplicate ingestion. This is on Elastic Agent / Metr… --- ## [Elastic OTP never comes](https://discuss.elastic.co/t/elastic-otp-never-comes/384319)
**Author:** [@Pegasus](https://discuss.elastic.co/u/Pegasus)\ **Replies:** 6\ **Last updated:** [June 25, 2026, 1:59am UTC](https://discuss.elastic.co/t/elastic-otp-never-comes/384319 "2026-06-25T01:59:46Z")
I signed up for Elastic Cloud (hosted) and was able to log in only during the initial signup. Since then, I have not been receiving the OTP, which is preventing me from logging in. This is extremely frustrating. --- ## [Autodiscovery Strategy for Transitioning from Heartbeat to Synthetics](https://discuss.elastic.co/t/autodiscovery-strategy-for-transitioning-from-heartbeat-to-synthetics/387228)
**Author:** [@Cristian\_Pereyra](https://discuss.elastic.co/u/Cristian_Pereyra)\ **Replies:** 1\ **Last updated:** [June 24, 2026, 2:10am UTC](https://discuss.elastic.co/t/autodiscovery-strategy-for-transitioning-from-heartbeat-to-synthetics/387228 "2026-06-24T02:10:57Z")
Hello everyone. The topic that brings us here is Heartbeat autodiscover. We have many deployments that are going to be modified and we need to automate the detection and creation of monitors. The problem that is added … --- ## [Filebeat memory usage increases overtime until OOM](https://discuss.elastic.co/t/filebeat-memory-usage-increases-overtime-until-oom/387098)
**Author:** [@ryd-devops](https://discuss.elastic.co/u/ryd-devops)\ **Replies:** 3\ **Last updated:** [June 23, 2026, 6:28pm UTC](https://discuss.elastic.co/t/filebeat-memory-usage-increases-overtime-until-oom/387098 "2026-06-23T18:28:25Z")
We run filebeat (9.4.2) in our kubernetes clusters, mostly using the autodiscoverfeature and annotations. We have a lot of cronjobs and sidecar containers as well.. from a logging perspective filebeat is working great b… --- ## [X-pack-security warnings after upgrading to 9.3.3](https://discuss.elastic.co/t/x-pack-security-warnings-after-upgrading-to-9-3-3/385852)
**Author:** [@Koirin](https://discuss.elastic.co/u/Koirin)\ **Replies:** 9\ **Last updated:** [June 23, 2026, 8:48am UTC](https://discuss.elastic.co/t/x-pack-security-warnings-after-upgrading-to-9-3-3/385852 "2026-06-23T08:48:42Z")
Hello - I just upgraded our node in our monitoring-cluster (single-node) from 9.2.4 to 9.3.3 and have started receiving warnings regarding the x-pack-security getting denied reading some internal files in the docker-cont… --- ## [Auto update GeoLite DB](https://discuss.elastic.co/t/auto-update-geolite-db/386728)
**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Replies:** 2\ **Last updated:** [June 22, 2026, 1:49pm UTC](https://discuss.elastic.co/t/auto-update-geolite-db/386728 "2026-06-22T13:49:28Z")
Hello Logstash logs following warnings/errors related to GeoLite: failed to fetch ASN database {:exception=\>"503 Service Unavailable"} failed to fetch City database {:exception=\>"503 Service Unavailable"} The managed… --- ## [Kibana Index Pattern Configuration Problem](https://discuss.elastic.co/t/kibana-index-pattern-configuration-problem/386854)
**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Replies:** 12\ **Last updated:** [June 19, 2026, 6:00pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-configuration-problem/386854 "2026-06-19T18:00:59Z")
I configured Logstash as follows: input { file { path =\> "/var/log/apache2/access.log" } } filter { grok { match =\> { "message" =\> "%{COMBINEDAPACHELOG}" } } date { match =\> \[ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z"… --- ## [Cloudwatch Integration State File Conflict](https://discuss.elastic.co/t/cloudwatch-integration-state-file-conflict/386904)
**Author:** [@andreaskapfer](https://discuss.elastic.co/u/andreaskapfer)\ **Replies:** 0\ **Last updated:** [June 19, 2026, 1:38pm UTC](https://discuss.elastic.co/t/cloudwatch-integration-state-file-conflict/386904 "2026-06-19T13:38:26Z")
Hello, we have registered an agent running on AWS ECS to collect our Kubernetes logs from AWS Cloudwatch. We are using start\_position: lastSync and a persistent AWS EFS volume for the agent's state. We are fetching two… --- ## [Can we send a report generated by AI assistance from AI chat](https://discuss.elastic.co/t/can-we-send-a-report-generated-by-ai-assistance-from-ai-chat/386896)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [June 18, 2026, 7:42pm UTC](https://discuss.elastic.co/t/can-we-send-a-report-generated-by-ai-assistance-from-ai-chat/386896 "2026-06-18T19:42:24Z")
Hi Team, We are evaluating the Elastic AI Assistant capabilities and would like to understand its support for automated reporting. Could you please confirm whether the Elastic AI Assistant can: Automatically generat… --- ## [\[PSA\] Data shipped via Elastic Agent 9.3.4 might be dropped due to problem in the serialization of time fields](https://discuss.elastic.co/t/psa-data-shipped-via-elastic-agent-9-3-4-might-be-dropped-due-to-problem-in-the-serialization-of-time-fields/386888)
**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Replies:** 0\ **Last updated:** [June 17, 2026, 4:36pm UTC](https://discuss.elastic.co/t/psa-data-shipped-via-elastic-agent-9-3-4-might-be-dropped-due-to-problem-in-the-serialization-of-time-fields/386888 "2026-06-17T16:36:04Z")
A performance optimization in Elastic Agent 9.3.4 causes timestamp fields sent from Beats based inputs and integrations to be incorrectly serialized to an empty {} JSON object. This does not affect the primary @timestamp … --- ## [Best Practice for Keeping Separate DC and DR Elasticsearch Open-Source Clusters in Sync](https://discuss.elastic.co/t/best-practice-for-keeping-separate-dc-and-dr-elasticsearch-open-source-clusters-in-sync/386887)
**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\ **Replies:** 2\ **Last updated:** [June 17, 2026, 2:26pm UTC](https://discuss.elastic.co/t/best-practice-for-keeping-separate-dc-and-dr-elasticsearch-open-source-clusters-in-sync/386887 "2026-06-17T14:26:15Z")
Hi Team, We have two separate Elasticsearch Open-Source clusters running on Linux servers: DC Cluster 6 nodes 3 Dedicated Master nodes 3 Data nodes Active production cluster DR Cluster 6 nodes 3 Dedicated Master… --- ## [Cannot disable "xpack.monitoring.collection.enabled" setting](https://discuss.elastic.co/t/cannot-disable-xpack-monitoring-collection-enabled-setting/357358)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 6\ **Last updated:** [June 17, 2026, 7:50am UTC](https://discuss.elastic.co/t/cannot-disable-xpack-monitoring-collection-enabled-setting/357358 "2026-06-17T07:50:56Z")
Hello, I'm using Kibana upgrade assistant to fix a vulnerability issue, the problem is I need to resolve all warnings, one warning that i couldn't fix is this : the setting \[xpack.monitoring.collection.enabled\] is curr… --- ## [404 when curl URL Ingest, Elasticsearch and Fleet](https://discuss.elastic.co/t/404-when-curl-url-ingest-elasticsearch-and-fleet/386860)
**Author:** [@steven.p](https://discuss.elastic.co/u/steven.p)\ **Replies:** 3\ **Last updated:** [June 16, 2026, 2:12pm UTC](https://discuss.elastic.co/t/404-when-curl-url-ingest-elasticsearch-and-fleet/386860 "2026-06-16T14:12:17Z")
Hi I am just trying to understand when doing a CURL on the URLs of Fleet, Elasticsearch and Ingest, that it always presents a 404. This is with an agents installed and without. Is there some sort of block? --- ## [V8.17.3 ES Cloud: Random morning ConnectionTimeout to Elastic Cloud from Django/Kubernetes, same request succeeds seconds later](https://discuss.elastic.co/t/v8-17-3-es-cloud-random-morning-connectiontimeout-to-elastic-cloud-from-django-kubernetes-same-request-succeeds-seconds-later/386774)
**Author:** [@Husein\_Kantarci](https://discuss.elastic.co/u/Husein_Kantarci)\ **Replies:** 2\ **Last updated:** [June 16, 2026, 10:01am UTC](https://discuss.elastic.co/t/v8-17-3-es-cloud-random-morning-connectiontimeout-to-elastic-cloud-from-django-kubernetes-same-request-succeeds-seconds-later/386774 "2026-06-16T10:01:23Z")
Hi, We are seeing intermittent elastic\_transport.ConnectionTimeout: Connection timed out errors from our Django application to Elastic Cloud. Environment: Django app running on Kubernetes (EKS) uWSGI, 1 process per p… --- ## [Spring WebFlux 7 (Spring Boot 4): NoSuchMethodError in DispatcherHandlerInstrumentation](https://discuss.elastic.co/t/spring-webflux-7-spring-boot-4-nosuchmethoderror-in-dispatcherhandlerinstrumentation/386817)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 1\ **Last updated:** [June 16, 2026, 5:09am UTC](https://discuss.elastic.co/t/spring-webflux-7-spring-boot-4-nosuchmethoderror-in-dispatcherhandlerinstrumentation/386817 "2026-06-16T05:09:49Z")
Hi there, When the fix will be released? Looking eagerly for above fix. Current latest build 1.55.6 has been released in April 2nd week. Regards --- ## [Elasticsearch 9.2.1 snapshot visible in repository but restore fails with snapshot\_missing\_exception](https://discuss.elastic.co/t/elasticsearch-9-2-1-snapshot-visible-in-repository-but-restore-fails-with-snapshot-missing-exception/386829)
**Author:** [@shantia](https://discuss.elastic.co/u/shantia)\ **Replies:** 8\ **Last updated:** [June 15, 2026, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-9-2-1-snapshot-visible-in-repository-but-restore-fails-with-snapshot-missing-exception/386829 "2026-06-15T13:59:41Z")
I have an Elasticsearch 9.2.1 cluster configured with Snapshot Lifecycle Management (SLM) that takes nightly snapshots to an S3 repository. The snapshots are successfully created, and I can see all snapshot metadata in t… --- ## [Courses on Elastic.Clients.Elasticsearch](https://discuss.elastic.co/t/courses-on-elastic-clients-elasticsearch/386125)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 12\ **Last updated:** [June 15, 2026, 1:27pm UTC](https://discuss.elastic.co/t/courses-on-elastic-clients-elasticsearch/386125 "2026-06-15T13:27:55Z")
We need to upgrade from NEST to the new API and are DESPARATELY looking for courses (paid or unpaid) to guide us through this process. Can anyone help? Thanks --- ## [Crash in filebeat 9.3.0 on error "concurrent map iteration and map write"](https://discuss.elastic.co/t/crash-in-filebeat-9-3-0-on-error-concurrent-map-iteration-and-map-write/386208)
**Author:** [@grzegorzkw](https://discuss.elastic.co/u/grzegorzkw)\ **Replies:** 1\ **Last updated:** [June 15, 2026, 12:15pm UTC](https://discuss.elastic.co/t/crash-in-filebeat-9-3-0-on-error-concurrent-map-iteration-and-map-write/386208 "2026-06-15T12:15:01Z")
Hello, One of our filebeat deployments is bumping into the below error which crashes the service overall: fatal error: concurrent map iteration and map write goroutine 1 \[running\]: internal/runtime/maps.fatal({0x69991… --- ## [Elastic Defend api/endpoint/metadata: Pagination stuck when more than pageSize endpoints share the same last\_checkin timestamp](https://discuss.elastic.co/t/elastic-defend-api-endpoint-metadata-pagination-stuck-when-more-than-pagesize-endpoints-share-the-same-last-checkin-timestamp/386844)
**Author:** [@d7d929022f550dc3d90e](https://discuss.elastic.co/u/d7d929022f550dc3d90e)\ **Replies:** 1\ **Last updated:** [June 13, 2026, 1:36am UTC](https://discuss.elastic.co/t/elastic-defend-api-endpoint-metadata-pagination-stuck-when-more-than-pagesize-endpoints-share-the-same-last-checkin-timestamp/386844 "2026-06-13T01:36:58Z")
We are paginating through all endpoints using the Kibana api/endpoint/metadata API. The API does not support PIT or search\_after, so we are using cursor-based pagination with sortField=last\_checkin, sortDirection=asc, a… --- ## [Newly created Agent policy has space\_id set to null in version 9.4.2](https://discuss.elastic.co/t/newly-created-agent-policy-has-space-id-set-to-null-in-version-9-4-2/386845)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 3\ **Last updated:** [June 13, 2026, 12:14am UTC](https://discuss.elastic.co/t/newly-created-agent-policy-has-space-id-set-to-null-in-version-9-4-2/386845 "2026-06-13T00:14:32Z")
POST kbn://api/fleet/agent\_policies { "description": "Private Location Agent Policy", "monitoring\_enabled": \[ "logs", "metrics" \], "name": "Priv Location Agent Policy", "namespace": "default" } { "item": {… --- ## [Elastic Agents Update Issue Behind Proxy](https://discuss.elastic.co/t/elastic-agents-update-issue-behind-proxy/362361)
**Author:** [@werheids](https://discuss.elastic.co/u/werheids)\ **Replies:** 6\ **Last updated:** [June 12, 2026, 5:36pm UTC](https://discuss.elastic.co/t/elastic-agents-update-issue-behind-proxy/362361 "2026-06-12T17:36:33Z")
Hello, I'm having an issue where my Elastic Agents are unable to update. The following error occurs: \[elastic\_agent\]\[warn\] unable to download package: 2 errors occurred: \* package '/opt/Elastic/Agent/data/elastic-agen… --- ## [Haproxy integration: failed fetching haproxy info: not supported](https://discuss.elastic.co/t/haproxy-integration-failed-fetching-haproxy-info-not-supported/386841)
**Author:** [@Florian\_Heigl](https://discuss.elastic.co/u/Florian_Heigl)\ **Replies:** 1\ **Last updated:** [June 12, 2026, 4:45pm UTC](https://discuss.elastic.co/t/haproxy-integration-failed-fetching-haproxy-info-not-supported/386841 "2026-06-12T16:45:09Z")
Hi, I'm looking at an issue with the haproxy integration. It came up after an update but in this case it might have already been broken before that. the error message I see is: elastic-pfsense-input | {"log.level":"e… --- ## [Kibana Alerts - Is there a way to schedule rule execution at a specific time daily?](https://discuss.elastic.co/t/kibana-alerts-is-there-a-way-to-schedule-rule-execution-at-a-specific-time-daily/386822)
**Author:** [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Replies:** 2\ **Last updated:** [June 12, 2026, 1:27pm UTC](https://discuss.elastic.co/t/kibana-alerts-is-there-a-way-to-schedule-rule-execution-at-a-specific-time-daily/386822 "2026-06-12T13:27:51Z")
Hello Community, I am working with Kibana Alerting rules and have a use case where I need an alert to execute at a fixed time every day (e.g., every day at 03:00 UTC), rather than on a recurring interval like "every 1 h… --- ## [Loghstash service is not getting started going in continues restart having error: Logstash stopped processing because of an error: (NoMethodError) private method \`run' called for #\](https://discuss.elastic.co/t/loghstash-service-is-not-getting-started-going-in-continues-restart-having-error-logstash-stopped-processing-because-of-an-error-nomethoderror-private-method-run-called-for-logstash-0x32a806ef/386799)
**Author:** [@ashish.jagtap](https://discuss.elastic.co/u/ashish.jagtap)\ **Replies:** 15\ **Last updated:** [June 12, 2026, 6:47am UTC](https://discuss.elastic.co/t/loghstash-service-is-not-getting-started-going-in-continues-restart-having-error-logstash-stopped-processing-because-of-an-error-nomethoderror-private-method-run-called-for-logstash-0x32a806ef/386799 "2026-06-12T06:47:06Z")
loghstash service is not getting started going in continues restart. Error: Logstash stopped processing because of an error: (NoMethodError) private method run' called for #\ Jun 10 16:15:03… --- ## [Eland-imported naver/splade-v3 text\_expansion produces much smaller sparse vectors and worse ranking than local SentenceTransformers SparseEncoder](https://discuss.elastic.co/t/eland-imported-naver-splade-v3-text-expansion-produces-much-smaller-sparse-vectors-and-worse-ranking-than-local-sentencetransformers-sparseencoder/386819)
**Author:** [@alrolo3](https://discuss.elastic.co/u/alrolo3)\ **Replies:** 0\ **Last updated:** [June 11, 2026, 9:39pm UTC](https://discuss.elastic.co/t/eland-imported-naver-splade-v3-text-expansion-produces-much-smaller-sparse-vectors-and-worse-ranking-than-local-sentencetransformers-sparseencoder/386819 "2026-06-11T21:39:41Z")
Eland-imported naver/splade-v3 text\_expansion produces much smaller sparse vectors and worse ranking than local SentenceTransformers SparseEncoder Environment Elasticsearch version: 9.4.2 Eland Docker image used: docke… --- ## [Race between ThreadContext.close() and context access may throw IllegalStateException](https://discuss.elastic.co/t/race-between-threadcontext-close-and-context-access-may-throw-illegalstateexception/386792)
**Author:** [@denyjohn](https://discuss.elastic.co/u/denyjohn)\ **Replies:** 1\ **Last updated:** [June 11, 2026, 3:43pm UTC](https://discuss.elastic.co/t/race-between-threadcontext-close-and-context-access-may-throw-illegalstateexception/386792 "2026-06-11T15:43:39Z")
In v6.4.2, ThreadContext stores request-specific headers and transient values in the shared field threadLocal, whose concrete type is ThreadContext.ContextThreadLocal. There appears to be a race between ThreadContext.cl… --- ## [New .Net API](https://discuss.elastic.co/t/new-net-api/386806)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 0\ **Last updated:** [June 10, 2026, 10:51pm UTC](https://discuss.elastic.co/t/new-net-api/386806 "2026-06-10T22:51:48Z")
Thanks. Also we used to be able to build filters incrementally as below. How do we do it in the new API. Thanks internal static List\\> BuildFilter(SearchCriteria searchCrite… --- ## [Csv filter parsing error](https://discuss.elastic.co/t/csv-filter-parsing-error/386766)
**Author:** [@carellevbt](https://discuss.elastic.co/u/carellevbt)\ **Replies:** 2\ **Last updated:** [June 10, 2026, 9:45am UTC](https://discuss.elastic.co/t/csv-filter-parsing-error/386766 "2026-06-10T09:45:20Z")
Hello, I have multiple csv files I need to ingest. Among the csv files I have 13 column header names variations. I would like to use the autodetect\_column\_names to avoid manually configuring these column names. Also ple… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=6) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=8)