# 2025: The Year in Review **URL:** \ **Category:** Meta Elastic\ **Created:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333 "2026-01-01T21:52:18Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/1 "2026-01-01T21:52:18Z")
## 2025's Top Users ## Most Time Reading | User | Hours Read | | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/50/140206_2.png) @RainTown | 237 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) @stephenb | 124 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) @leandrojmp | 103 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/50/143659_2.png) @Tortoise | 81 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) @Christian_Dahlqvist | 80 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) @Rios | 49 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) @DavidTurner | 25 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) @Badger | 25 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/137187_2.png) @dadoonet | 15 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/50/104935_2.png) @carly.richmond | 14 | ## Most Topics | User | Topics | | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/9/998c96cd230c926cc2a919ee38372cc35c478436.png) @erikg | 80 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ismisepaul/50/102235_2.png) @ismisepaul | 38 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/50/110326_2.png) @juancamiloll | 22 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/searchwithme/50/137075_2.png) @searchwithme | 21 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francesco_esposito/50/141865_2.png) @Francesco_Esposito | 18 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/a/1/a11c6505a333690227d98426f177523700931b8f.png) @Aniket_Pant | 14 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cristina_marletta_li/50/137793_2.png) @Cristina_Marletta_Li | 14 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/50/25011_2.png) @spinscale | 13 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/50/16922_2.png) @willemdh | 13 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amol_nagotkar/50/124188_2.png) @Amol_Nagotkar | 13 | ## Most Replies | User | Replies | | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/50/140206_2.png) @RainTown | 919 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) @stephenb | 908 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) @leandrojmp | 839 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) @Christian_Dahlqvist | 464 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/50/143659_2.png) @Tortoise | 443 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) @DavidTurner | 305 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/137187_2.png) @dadoonet | 270 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/50/104935_2.png) @carly.richmond | 269 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) @Rios | 215 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) @Badger | 213 | ## Most Replied to | User | Replies | | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) @stephenb | 643 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/50/140206_2.png) @RainTown | 641 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) @leandrojmp | 587 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) @Christian_Dahlqvist | 350 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/50/143659_2.png) @Tortoise | 251 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) @DavidTurner | 193 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/50/104935_2.png) @carly.richmond | 175 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/137187_2.png) @dadoonet | 154 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) @Badger | 140 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) @Rios | 109 | ## Most Likes Given | User | Likes | | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/50/140206_2.png) @RainTown | 308 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) @stephenb | 263 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) @Christian_Dahlqvist | 254 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) @Rios | 149 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/50/16922_2.png) @willemdh | 145 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/50/143659_2.png) @Tortoise | 135 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/7/5/7584ab2191095dd520962ce84ebdac752b959fde.png) @DMinovski | 93 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/137187_2.png) @dadoonet | 92 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/9/998c96cd230c926cc2a919ee38372cc35c478436.png) @erikg | 73 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) @leandrojmp | 45 | ## Most Likes Received | User | Likes | | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) @leandrojmp | 338 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/50/140206_2.png) @RainTown | 276 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) @stephenb | 250 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) @DavidTurner | 155 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) @Christian_Dahlqvist | 123 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/137187_2.png) @dadoonet | 87 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) @Badger | 83 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/50/143659_2.png) @Tortoise | 82 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/50/104935_2.png) @carly.richmond | 56 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) @Rios | 47 | ## Most Visits | User | Days Visited | | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) @leandrojmp | 365 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) @Badger | 365 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) @stephenb | 365 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) @Christian_Dahlqvist | 365 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) @Rios | 361 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/podarcismuralis/50/122606_2.png) @PodarcisMuralis | 346 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/50/140206_2.png) @RainTown | 345 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_harwood1/50/101255_2.png) @Mark_Harwood1 | 320 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/50/83401_2.png) @BenB196 | 314 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/50/71328_2.png) @hendry.lim | 312 | [All Yearly Visits](https://discuss.elastic.co/u?order=days_visited&period=yearly) ## Daily Visits | Days Visited | Users | | --- | --- | | 365 | 4 | | 361 | 1 | | 346 | 1 | | 345 | 1 | | 320 | 1 | | 314 | 1 | | 312 | 1 | | 301 | 1 | | 280 | 1 | | 262 | 1 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/2 "2026-01-01T21:52:19Z")
## [Top #Elasticsearch Topics](https://discuss.elastic.co/c/elastic-stack/elasticsearch/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lakshya_gupta/50/146116_2.png) | [High CPU Usage on a few data nodes / Hotspotting of data](https://discuss.elastic.co/t/high-cpu-usage-on-a-few-data-nodes-hotspotting-of-data/383954) | 30 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/7/3/7390b9f82f247320d0e4c98caf60b59474f0759f.png) | [EntitlementBootstrap failure preventing startup: AttachNotSupportedException: Unable to open socket file](https://discuss.elastic.co/t/entitlementbootstrap-failure-preventing-startup-attachnotsupportedexception-unable-to-open-socket-file/382452) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ronwilson/50/140954_2.png) | [Slow bulk speed](https://discuss.elastic.co/t/slow-bulk-speed/373675) | 10 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/2/b/2b5038d14ae1825264538483f64ef60e8eb738dc.png) | [Missing repodata/filelists.xml in yum repo causes repo sync to fail](https://discuss.elastic.co/t/missing-repodata-filelists-xml-in-yum-repo-causes-repo-sync-to-fail/374168) | 9 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fpeter/50/144024_2.png) | [Query execution drastically increased after upgrade elastic cloud hosted deployment from v8.18.4 to v9.0.4](https://discuss.elastic.co/t/query-execution-drastically-increased-after-upgrade-elastic-cloud-hosted-deployment-from-v8-18-4-to-v9-0-4/382908) | 8 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lakshya_gupta/50/146116_2.png) | [High CPU Usage on a few data nodes / Hotspotting of data](https://discuss.elastic.co/t/high-cpu-usage-on-a-few-data-nodes-hotspotting-of-data/383954) | 168 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ronwilson/50/140954_2.png) | [Slow bulk speed](https://discuss.elastic.co/t/slow-bulk-speed/373675) | 61 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/7/3/7390b9f82f247320d0e4c98caf60b59474f0759f.png) | [EntitlementBootstrap failure preventing startup: AttachNotSupportedException: Unable to open socket file](https://discuss.elastic.co/t/entitlementbootstrap-failure-preventing-startup-attachnotsupportedexception-unable-to-open-socket-file/382452) | 58 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sathish12/50/143619_2.png) | [Elastic cluster is getting down after 2 - 3 hours](https://discuss.elastic.co/t/elastic-cluster-is-getting-down-after-2-3-hours/383971) | 55 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/2/a/2a49d728f9e41b4198bc12a22edda8565a3a7701.png) | [Starting Fscrawler with SSL error](https://discuss.elastic.co/t/starting-fscrawler-with-ssl-error/375028) | 52 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/applike-ss/50/143018_2.png) | [Increased Read IOPS usage after upgrade from 8.18.0 to 9.0.1](https://discuss.elastic.co/t/increased-read-iops-usage-after-upgrade-from-8-18-0-to-9-0-1/377986) | 18 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dominbdg/50/102457_2.png) | [Issues with upgrade from 8.18.1 to 9.0.1](https://discuss.elastic.co/t/issues-with-upgrade-from-8-18-1-to-9-0-1/378753) | 18 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/2/b/2b5038d14ae1825264538483f64ef60e8eb738dc.png) | [Missing repodata/filelists.xml in yum repo causes repo sync to fail](https://discuss.elastic.co/t/missing-repodata-filelists-xml-in-yum-repo-causes-repo-sync-to-fail/374168) | 18 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/8/4/848cb041f078b354af9f806c08e9c6a6e3ec675a.png) | [Issues upgrading Elasticsearch from 8 to 9 due to old 7.x indices and restricted Kibana indices](https://discuss.elastic.co/t/issues-upgrading-elasticsearch-from-8-to-9-due-to-old-7-x-indices-and-restricted-kibana-indices/379133) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skeyby/50/142612_2.png) | [New logsdb format](https://discuss.elastic.co/t/new-logsdb-format/377101) | 17 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/3 "2026-01-01T21:52:19Z")
## [Top #Kibana Topics](https://discuss.elastic.co/c/elastic-stack/kibana/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/e/9ea5a0b9c88b7e08b29e2d13b40ee8b5faf36a7e.png) | [[ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. self signed certificate](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate/376240) | 5 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/madhu_challapalli/50/140968_2.png) | [Critical http://10.54.120.149:9200 seems to be unreachable](https://discuss.elastic.co/t/critical-http-10-54-120-149-9200-seems-to-be-unreachable/377728) | 34 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/3/4/346ba554179f67f86fecccdf51c555ae56b7fba1.png) | [Why can't i connect kibana with Elasticsearch?](https://discuss.elastic.co/t/why-cant-i-connect-kibana-with-elasticsearch/379574) | 26 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nzeland149/50/143060_2.png) | [Setup a Machine Learning rule is not active](https://discuss.elastic.co/t/setup-a-machine-learning-rule-is-not-active/378170) | 25 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/e/9e916d10158a4de63426ee95321f9e9f1ac15005.png) | [Log not visible on Kibana Interface](https://discuss.elastic.co/t/log-not-visible-on-kibana-interface/375193) | 22 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/e/9ea5a0b9c88b7e08b29e2d13b40ee8b5faf36a7e.png) | [[ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. self signed certificate](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate/376240) | 21 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_wang2/50/145138_2.png) | [Kibana 9.1.4 on Windows fails to start due to Timelion plugin: Cannot find module '../series\_functions/undefined'](https://discuss.elastic.co/t/kibana-9-1-4-on-windows-fails-to-start-due-to-timelion-plugin-cannot-find-module-series-functions-undefined/382144) | 18 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/madhu_challapalli/50/140968_2.png) | [Critical http://10.54.120.149:9200 seems to be unreachable](https://discuss.elastic.co/t/critical-http-10-54-120-149-9200-seems-to-be-unreachable/377728) | 16 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/7/9/79e19739c4d69836e65c546af6d265aabfce7416.png) | [To use the full set of free features, please update ES to the default dist](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-please-update-es-to-the-default-dist/374334) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matt_janda/50/140341_2.png) | [Log level highlighting in Discover](https://discuss.elastic.co/t/log-level-highlighting-in-discover/376732) | 16 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/3/5/3529367e57ee3e86ca81858651268d39d7ee3ac8.png) | [Upgrade elasticsearch from version 7.16 to 7.17](https://discuss.elastic.co/t/upgrade-elasticsearch-from-version-7-16-to-7-17/373837) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/4 "2026-01-01T21:52:20Z")
## [Top #Logstash Topics](https://discuss.elastic.co/c/elastic-stack/logstash/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francesco_esposito/50/141865_2.png) | [Forwarding the http input data to http output data](https://discuss.elastic.co/t/forwarding-the-http-input-data-to-http-output-data/375567) | 7 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/e/a/eabfd6cfbad96463e479bb4e60ecc4477083043b.png) | [Logstash-output-elasticsearch Connection reset while trying to send bulk request to elasticsearch](https://discuss.elastic.co/t/logstash-output-elasticsearch-connection-reset-while-trying-to-send-bulk-request-to-elasticsearch/379398) | 6 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nkknkk/50/140707_2.png) | [Logstash not giving the expected output](https://discuss.elastic.co/t/logstash-not-giving-the-expected-output/374034) | 5 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nkknkk/50/140707_2.png) | [Logstash not giving the expected output](https://discuss.elastic.co/t/logstash-not-giving-the-expected-output/374034) | 37 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhanu_praveen/50/60395_2.png) | [Not able to parse prometheus metrics to json format](https://discuss.elastic.co/t/not-able-to-parse-prometheus-metrics-to-json-format/374447) | 34 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francesco_esposito/50/141865_2.png) | [Forwarding the http input data to http output data](https://discuss.elastic.co/t/forwarding-the-http-input-data-to-http-output-data/375567) | 32 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abbyode/50/119171_2.png) | [Experiencing Error trying to Launch Logstash](https://discuss.elastic.co/t/experiencing-error-trying-to-launch-logstash/375227) | 26 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francesco_esposito/50/141865_2.png) | [Forwarding my bulk records from Http Input Plugin to Elasticsearch Output Plugin - Discuss the Elastic Stack](https://discuss.elastic.co/t/forwarding-my-bulk-records-from-http-input-plugin-to-elasticsearch-output-plugin-discuss-the-elastic-stack/375866) | 23 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhanu_praveen/50/60395_2.png) | [Not able to parse prometheus metrics to json format](https://discuss.elastic.co/t/not-able-to-parse-prometheus-metrics-to-json-format/374447) | 17 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1abed8134db0f45d9d1dee995fa92585cd6aa6d7.png) | [Palo Alto Firewall Log Collection Issue with Elasticsearch](https://discuss.elastic.co/t/palo-alto-firewall-log-collection-issue-with-elasticsearch/377296) | 17 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/f/7/f76308f91cf1fe6274e5ab428e2886fc34e0918f.png) | [Logstash and pipelines](https://discuss.elastic.co/t/logstash-and-pipelines/374287) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francesco_esposito/50/141865_2.png) | [Forwarding the http input data to http output data](https://discuss.elastic.co/t/forwarding-the-http-input-data-to-http-output-data/375567) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vasek/50/136636_2.png) | [Logstash output traffic significantly higher than input (minimal transformations) + TCP RST](https://discuss.elastic.co/t/logstash-output-traffic-significantly-higher-than-input-minimal-transformations-tcp-rst/378868) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/5 "2026-01-01T21:52:20Z")
## [Top #Beats Topics](https://discuss.elastic.co/c/elastic-stack/beats/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/c/4/c4849ae68a39434ff8265bb7effa34795f416098.png) | [Filebeat clients unable to publish events to logstash](https://discuss.elastic.co/t/filebeat-clients-unable-to-publish-events-to-logstash/378592) | 6 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/c/4/c4849ae68a39434ff8265bb7effa34795f416098.png) | [Filebeat clients unable to publish events to logstash](https://discuss.elastic.co/t/filebeat-clients-unable-to-publish-events-to-logstash/378592) | 31 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/0/0/00c82db7a7f74d6b78d6d203261c741fc54b1f89.png) | [[indices:admin/create] is unauthorized for user Elastic Stack](https://discuss.elastic.co/t/indices-admin-create-is-unauthorized-for-user-elastic-stack/383767) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thirupathi/50/145431_2.png) | [Filebeat multiple outputs](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dimaz/50/140285_2.png) | [Memory leak on kubernetes nodes](https://discuss.elastic.co/t/memory-leak-on-kubernetes-nodes/372389) | 15 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davetayl/50/142168_2.png) | [Field remapping for backward compatibility](https://discuss.elastic.co/t/field-remapping-for-backward-compatibility/376209) | 15 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thirupathi/50/145431_2.png) | [Filebeat multiple outputs](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668) | 17 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/c/4/c4849ae68a39434ff8265bb7effa34795f416098.png) | [Filebeat clients unable to publish events to logstash](https://discuss.elastic.co/t/filebeat-clients-unable-to-publish-events-to-logstash/378592) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/50/110326_2.png) | [Fleet server configuration lost](https://discuss.elastic.co/t/fleet-server-configuration-lost/378663) | 16 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/e/7/e7b575852efab563094a647b0d6377a6a7d347c4.png) | [Filebeat sends no Logs to ELK](https://discuss.elastic.co/t/filebeat-sends-no-logs-to-elk/380725) | 15 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jannus_c/50/139984_2.png) | [Filebeat HTTPJSON - Dynamic query in body](https://discuss.elastic.co/t/filebeat-httpjson-dynamic-query-in-body/376707) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/6 "2026-01-01T21:52:21Z")
## [Top #Elastic Search Topics](https://discuss.elastic.co/c/search/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/1/b/1baad6ed299e858e56eb5fa6ddcf9960faa78a9d.png) | [Problems with enrichments](https://discuss.elastic.co/t/problems-with-enrichments/374215) | 6 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/1/b/1baad6ed299e858e56eb5fa6ddcf9960faa78a9d.png) | [Problems with enrichments](https://discuss.elastic.co/t/problems-with-enrichments/374215) | 35 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhaskar_reddy/50/146334_2.png) | [Billing Insane ECU for learning Elastic Serverless instance](https://discuss.elastic.co/t/billing-insane-ecu-for-learning-elastic-serverless-instance/383973) | 21 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d5a0f18b2b74805c929ad9d83c9cbdd68afcec3b.png) | [Enterprise search no longer works in v8.18.2 Cloud](https://discuss.elastic.co/t/enterprise-search-no-longer-works-in-v8-18-2-cloud/378918) | 18 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/padmavathi/50/134714_2.png) | [Issues when running curator 8.0.17](https://discuss.elastic.co/t/issues-when-running-curator-8-0-17/372996) | 17 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/1/b/1baad6ed299e858e56eb5fa6ddcf9960faa78a9d.png) | [Convert IP from integears](https://discuss.elastic.co/t/convert-ip-from-integears/374687) | 17 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richard_zhang/50/140473_2.png) | [Is it safe to set action.auto\_create\_index to false?](https://discuss.elastic.co/t/is-it-safe-to-set-action-auto-create-index-to-false/372809) | 17 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/1/b/1baad6ed299e858e56eb5fa6ddcf9960faa78a9d.png) | [Problems with enrichments](https://discuss.elastic.co/t/problems-with-enrichments/374215) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/oyuka/50/138959_2.png) | [Disable SSL and HTTP security](https://discuss.elastic.co/t/disable-ssl-and-http-security/373753) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/padmavathi/50/134714_2.png) | [Issues when running curator 8.0.17](https://discuss.elastic.co/t/issues-when-running-curator-8-0-17/372996) | 16 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/4/0/40a1aeb8acfedcfd06bf9208795474caa7535063.png) | [Problem with cluster after Windows Server patch](https://discuss.elastic.co/t/problem-with-cluster-after-windows-server-patch/376183) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/7 "2026-01-01T21:52:22Z")
## [Top #APM Topics](https://discuss.elastic.co/c/observability/apm/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kishorkumar/50/132930_2.png) | [Add Transaction.name in Spans / Merge Doucment of span and transaction](https://discuss.elastic.co/t/add-transaction-name-in-spans-merge-doucment-of-span-and-transaction/376172) | 20 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/a/1/a11c6505a333690227d98426f177523700931b8f.png) | [Enable APM for springboot running on windows](https://discuss.elastic.co/t/enable-apm-for-springboot-running-on-windows/383568) | 20 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nicolae_nicora/50/140532_2.png) | [Failed to handle event of type ERROR with this error: null](https://discuss.elastic.co/t/failed-to-handle-event-of-type-error-with-this-error-null/372908) | 14 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/serak_shiferaw/50/75697_2.png) | [Any Reason traces-apm@template is using Standard Index mode instead of timeseries or logsdb](https://discuss.elastic.co/t/any-reason-traces-apm-template-is-using-standard-index-mode-instead-of-timeseries-or-logsdb/383301) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/art1/50/137703_2.png) | [APM Server reported 400: decode error: data read error](https://discuss.elastic.co/t/apm-server-reported-400-decode-error-data-read-error/375767) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kishorkumar/50/132930_2.png) | [Add Transaction.name in Spans / Merge Doucment of span and transaction](https://discuss.elastic.co/t/add-transaction-name-in-spans-merge-doucment-of-span-and-transaction/376172) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nicolae_nicora/50/140532_2.png) | [Failed to handle event of type ERROR with this error: null](https://discuss.elastic.co/t/failed-to-handle-event-of-type-error-with-this-error-null/372908) | 16 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/2/b/2b001ebc9e340c5ecf58cc17a05e681f49367935.png) | [Problem with distributing tracing for Jakarta 10 and payara 6](https://discuss.elastic.co/t/problem-with-distributing-tracing-for-jakarta-10-and-payara-6/372920) | 15 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/f/d/fd2a07d58207f30d77256a812d3fe8ce01a4d481.png) | [Elastic APM shows 100% CPU usage but the cause is unclear – need help!](https://discuss.elastic.co/t/elastic-apm-shows-100-cpu-usage-but-the-cause-is-unclear-need-help/376173) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/8 "2026-01-01T21:52:22Z")
## [Top #Elastic Security Topics](https://discuss.elastic.co/c/security/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syk/50/141533_2.png) | [Orphaned agent is healthy in 9.0.1](https://discuss.elastic.co/t/orphaned-agent-is-healthy-in-9-0-1/378424) | 5 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hairless_mess/50/141984_2.png) | [MacOS agents are unhealthy due to Defend Endpoint](https://discuss.elastic.co/t/macos-agents-are-unhealthy-due-to-defend-endpoint/379616) | 12 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishag_learning/50/143132_2.png) | [Elastic SIEM & OpenCTI Integration](https://discuss.elastic.co/t/elastic-siem-opencti-integration/379082) | 12 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syk/50/141533_2.png) | [Orphaned agent is healthy in 9.0.1](https://discuss.elastic.co/t/orphaned-agent-is-healthy-in-9-0-1/378424) | 11 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/umang_pachaury/50/113523_2.png) | [Are the Self Signed Certs bound by IP / Hostname](https://discuss.elastic.co/t/are-the-self-signed-certs-bound-by-ip-hostname/377147) | 11 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishag_learning/50/143132_2.png) | [Elastic SIEM & OpenCTI Integration](https://discuss.elastic.co/t/elastic-siem-opencti-integration/379082) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syk/50/141533_2.png) | [Orphaned agent is healthy in 9.0.1](https://discuss.elastic.co/t/orphaned-agent-is-healthy-in-9-0-1/378424) | 17 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/d/2/d2e760ad02ebafcefbe4f371d9ebcd885410ac1b.png) | [Block USB(s) by default with Elastic Agent?](https://discuss.elastic.co/t/block-usb-s-by-default-with-elastic-agent/382809) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hairless_mess/50/141984_2.png) | [MacOS agents are unhealthy due to Defend Endpoint](https://discuss.elastic.co/t/macos-agents-are-unhealthy-due-to-defend-endpoint/379616) | 15 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/umang_pachaury/50/113523_2.png) | [Are the Self Signed Certs bound by IP / Hostname](https://discuss.elastic.co/t/are-the-self-signed-certs-bound-by-ip-hostname/377147) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/9 "2026-01-01T21:52:23Z")
## [Top #Elastic Observability Topics](https://discuss.elastic.co/c/observability/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d7ba44e9bb1ce910dea4857311ceaebd2fefbbb.png) | [Missing Logs on Elasticsearch Using OTEL Collector](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449) | 7 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d7ba44e9bb1ce910dea4857311ceaebd2fefbbb.png) | [Missing Logs on Elasticsearch Using OTEL Collector](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449) | 40 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amol_nagotkar/50/124188_2.png) | [Uptime heartbeat service is failing](https://discuss.elastic.co/t/uptime-heartbeat-service-is-failing/373558) | 13 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steve_foster/50/125583_2.png) | [OTEL - Prometheus receiver and missing metrics](https://discuss.elastic.co/t/otel-prometheus-receiver-and-missing-metrics/376563) | 11 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d7ba44e9bb1ce910dea4857311ceaebd2fefbbb.png) | [Missing Logs on Elasticsearch Using OTEL Collector](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steve_foster/50/125583_2.png) | [OTEL - Prometheus receiver and missing metrics](https://discuss.elastic.co/t/otel-prometheus-receiver-and-missing-metrics/376563) | 17 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amol_nagotkar/50/124188_2.png) | [Uptime heartbeat service is failing](https://discuss.elastic.co/t/uptime-heartbeat-service-is-failing/373558) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/10 "2026-01-01T21:52:23Z")
## [Top #SIEM Topics](https://discuss.elastic.co/c/security/siem/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/50/110326_2.png) | [Firewall logs to different Datastream by type](https://discuss.elastic.co/t/firewall-logs-to-different-datastream-by-type/377211) | 22 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/50/110326_2.png) | [Firewall logs to different Datastream by type](https://discuss.elastic.co/t/firewall-logs-to-different-datastream-by-type/377211) | 16 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a731aed6a4e2ac4e225f0d07d93edfd367eb4c8b.png) | [Error in detection rule: Remote Computer Account DnsHostName Update](https://discuss.elastic.co/t/error-in-detection-rule-remote-computer-account-dnshostname-update/377772) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/11 "2026-01-01T21:52:23Z")
## [Top #Synthetics Topics](https://discuss.elastic.co/c/observability/synthetics/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/a/1/a11c6505a333690227d98426f177523700931b8f.png) | [ClientTimeout while awaiting headers](https://discuss.elastic.co/t/clienttimeout-while-awaiting-headers/383330) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/niecore/50/125803_2.png) | [Already deleted monitor is reporting monitor status to elasticsearch](https://discuss.elastic.co/t/already-deleted-monitor-is-reporting-monitor-status-to-elasticsearch/377936) | 12 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/niecore/50/125803_2.png) | [Already deleted monitor is reporting monitor status to elasticsearch](https://discuss.elastic.co/t/already-deleted-monitor-is-reporting-monitor-status-to-elasticsearch/377936) | 15 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/a/1/a11c6505a333690227d98426f177523700931b8f.png) | [ClientTimeout while awaiting headers](https://discuss.elastic.co/t/clienttimeout-while-awaiting-headers/383330) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/12 "2026-01-01T21:52:24Z")
## [Top #Endpoint Security Topics](https://discuss.elastic.co/c/security/endpoint-security/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hoang_hoang/50/144467_2.png) | [How to protect elastic-agent service? (Anti-tampering protection)](https://discuss.elastic.co/t/how-to-protect-elastic-agent-service-anti-tampering-protection/380715) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hoang_hoang/50/144467_2.png) | [How to protect elastic-agent service? (Anti-tampering protection)](https://discuss.elastic.co/t/how-to-protect-elastic-agent-service-anti-tampering-protection/380715) | 16 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rajesh_raghav/50/143303_2.png) | [Open Source Vulnerabilities](https://discuss.elastic.co/t/open-source-vulnerabilities/378456) | 15 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/6/c/6c45965af9a8f47d4da146f9990fc0c785eb9be7.png) | [The audit log integration process.args log entry only contains the user.id field; it does not contain the user.name field. Please suggest!It's urgent!](https://discuss.elastic.co/t/the-audit-log-integration-process-args-log-entry-only-contains-the-user-id-field-it-does-not-contain-the-user-name-field-please-suggest-its-urgent/374400) | 15 | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yousefnein/50/145549_2.png) | [Elastic Defend Windows Defender question](https://discuss.elastic.co/t/elastic-defend-windows-defender-question/383157) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2026, 9:52pm UTC](https://discuss.elastic.co/t/2025-the-year-in-review/384333/13 "2026-01-01T21:52:24Z")
## [Top #Logs Topics](https://discuss.elastic.co/c/observability/logs/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohsin106/50/65203_2.png) | [Alerting on field value change](https://discuss.elastic.co/t/alerting-on-field-value-change/383451) | 12 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![avatar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohsin106/50/65203_2.png) | [Alerting on field value change](https://discuss.elastic.co/t/alerting-on-field-value-change/383451) | 15 | | ![avatar](https://us1.discourse-cdn.com/elastic/original/3X/4/c/4c764e6da3f4ef3469f0ff5a2975b6c708d58be4.png) | [.NET W3C format webserver access logs on Linux](https://discuss.elastic.co/t/net-w3c-format-webserver-access-logs-on-linux/382178) | 15 |