# Top **URL:** https://discuss.elastic.co/top.md?page=10 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 11 --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-120)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-120/389503)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-120/389503 "2026-08-13T10:47:13Z")
Memory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and… --- ## [Bulk Read-only indexes on Upgrade Assistant from 8.19 to 9.1](https://discuss.elastic.co/t/bulk-read-only-indexes-on-upgrade-assistant-from-8-19-to-9-1/384490)
**Author:** [@agustin](https://discuss.elastic.co/u/agustin)\ **Replies:** 1\ **Last updated:** [January 12, 2026, 9:44pm UTC](https://discuss.elastic.co/t/bulk-read-only-indexes-on-upgrade-assistant-from-8-19-to-9-1/384490 "2026-01-12T21:44:48Z")
I am upgrading an 8.19 cluster to 9.1 using the Upgrade Assistant after spinning it up from our current 7.17 snapshot. I unfortunately have over 2k indices that require action, most of them deprecated but in the process … --- ## [Problem with quotes in csv filter](https://discuss.elastic.co/t/problem-with-quotes-in-csv-filter/382802)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 6\ **Last updated:** [October 18, 2025, 3:39pm UTC](https://discuss.elastic.co/t/problem-with-quotes-in-csv-filter/382802 "2025-10-18T15:39:46Z")
Hello, I'm having a problem with the csv plugin (seems the same problem as in this old (2018) article) Quoted strings within fields that do not contain the field separator are interpreted as fields, and this provokes a… --- ## [Data from server is not flowing from elastic agent to elastic](https://discuss.elastic.co/t/data-from-server-is-not-flowing-from-elastic-agent-to-elastic/385333)
**Author:** [@sathish12](https://discuss.elastic.co/u/sathish12)\ **Replies:** 5\ **Last updated:** [April 28, 2026, 2:16pm UTC](https://discuss.elastic.co/t/data-from-server-is-not-flowing-from-elastic-agent-to-elastic/385333 "2026-04-28T14:16:46Z")
I have installed fleet server in one machine and server agent to collect logs and metrics in one web server. for the both the agents I have created respective default policies and integration. For web server, I have prov… --- ## [Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-81)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-81/389501)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-81/389501 "2026-08-13T10:47:06Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply n… --- ## [Elasticsearch 9.1.3 - Unable to Recover or Delete Protected System Indices .secrets-inference and .security-7 After Multiple Recovery Attempts](https://discuss.elastic.co/t/elasticsearch-9-1-3-unable-to-recover-or-delete-protected-system-indices-secrets-inference-and-security-7-after-multiple-recovery-attempts/386751)
**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\ **Replies:** 8\ **Last updated:** [June 10, 2026, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-9-1-3-unable-to-recover-or-delete-protected-system-indices-secrets-inference-and-security-7-after-multiple-recovery-attempts/386751 "2026-06-10T07:11:51Z")
Hello Team, I am seeking assistance with an issue involving two protected system indices in our Elasticsearch 9.1.3 cluster: .secrets-inference .security-7 Environment Elasticsearch Version: 9.1.3 Installation Type… --- ## [Rally 2.13.0 released](https://discuss.elastic.co/t/rally-2-13-0-released/386697)
**Author:** [@Evgenia\_Badiyanova](https://discuss.elastic.co/u/Evgenia_Badiyanova)\ **Replies:** 0\ **Last updated:** [June 3, 2026, 4:40pm UTC](https://discuss.elastic.co/t/rally-2-13-0-released/386697 "2026-06-03T16:40:19Z")
We have released Rally 2.13.0. This is a fairly big release with a few bug fixes and improvements. Some of the Highlights #2056: Add render-track command to render a track's Jinja2 templates to JSON #2047 / #2058: Add e… --- ## [Question about the implementation principle of post-filtering query for sparse vectors](https://discuss.elastic.co/t/question-about-the-implementation-principle-of-post-filtering-query-for-sparse-vectors/384540)
**Author:** [@Ningsir](https://discuss.elastic.co/u/Ningsir)\ **Replies:** 1\ **Last updated:** [January 14, 2026, 4:25pm UTC](https://discuss.elastic.co/t/question-about-the-implementation-principle-of-post-filtering-query-for-sparse-vectors/384540 "2026-01-14T16:25:21Z")
For the implementation of sparse vector post filtering, is it to query all results and then perform post filtering, or to query k results and then perform post filtering. { "query": { "bool": { "must": \[{"sp… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-79)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-79/389506)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-79/389506 "2026-08-13T10:47:23Z")
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque id… --- ## [Looking for a reliably stable Metricbeat version for Windows Server 2008 / 2008 R2](https://discuss.elastic.co/t/looking-for-a-reliably-stable-metricbeat-version-for-windows-server-2008-2008-r2/383457)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 4\ **Last updated:** [November 16, 2025, 6:33pm UTC](https://discuss.elastic.co/t/looking-for-a-reliably-stable-metricbeat-version-for-windows-server-2008-2008-r2/383457 "2025-11-16T18:33:19Z")
Hi everyone, I’m looking for advice on which Metricbeat version is known to run reliably on Windows Server 2003, Windows server 2008 and Windows Server 2008 R2. I’m fully aware that these operating systems are EOL and … --- ## [Kibana 8.19.19, 9.3.5 Security Update (ESA-2026-48)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-5-security-update-esa-2026-48/390085)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:43pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-5-security-update-esa-2026-48/390085 "2026-09-01T18:43:48Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocati… --- ## [Ubuntu 26.04 LTS Support Timeline — Open Source Elasticsearch 8.19.19](https://discuss.elastic.co/t/ubuntu-26-04-lts-support-timeline-open-source-elasticsearch-8-19-19/388964)
**Author:** [@Rex\_Rajat](https://discuss.elastic.co/u/Rex_Rajat)\ **Replies:** 2\ **Last updated:** [August 5, 2026, 7:25am UTC](https://discuss.elastic.co/t/ubuntu-26-04-lts-support-timeline-open-source-elasticsearch-8-19-19/388964 "2026-08-05T07:25:25Z")
Hi Elastic team, We run open-source Elasticsearch (self-managed) on Ubuntu 24.04 LTS and are evaluating a move to Ubuntu 26.04 LTS. The official Support Matrix doesn't yet list 26.04. Could you share: Expected timelin… --- ## [No response from Sales for Student License (Self-Managed )](https://discuss.elastic.co/t/no-response-from-sales-for-student-license-self-managed/386366)
**Author:** [@Borhen\_Alaya](https://discuss.elastic.co/u/Borhen_Alaya)\ **Replies:** 5\ **Last updated:** [May 19, 2026, 1:50am UTC](https://discuss.elastic.co/t/no-response-from-sales-for-student-license-self-managed/386366 "2026-05-19T01:50:12Z")
Hi everyone, I am a final-year student, working on my graduation project (Threat Detection with Elastic Security on local VMs). I need to test Email Connectors for detection rules (Platinum feature). I contacted Suppor… --- ## [Looking for Alert rule dataview and index](https://discuss.elastic.co/t/looking-for-alert-rule-dataview-and-index/385650)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 7\ **Last updated:** [March 30, 2026, 1:30pm UTC](https://discuss.elastic.co/t/looking-for-alert-rule-dataview-and-index/385650 "2026-03-30T13:30:39Z")
Using the API we can get the index of the alert that it is being used curl --request GET 'https://localhost:5601/api/alerting/rules/\_find' \\ If I want to use a query which default dataview or default index for all al… --- ## [Mulesoft integration with elastic search](https://discuss.elastic.co/t/mulesoft-integration-with-elastic-search/384155)
**Author:** [@nkknkk](https://discuss.elastic.co/u/nkknkk)\ **Replies:** 2\ **Last updated:** [December 18, 2025, 1:18pm UTC](https://discuss.elastic.co/t/mulesoft-integration-with-elastic-search/384155 "2025-12-18T13:18:19Z")
Can someone please point me to the documentation on how to ingest MuleSoft logs into Elasticsearch? My environment has only Elasticsearch and Kibana installed. --- ## [Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-168)](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-168/390082)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:41pm UTC](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-168/390082 "2026-09-01T18:41:59Z")
Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information dis… --- ## [How to add xpack.encryptedSavedObjects.encryptionKey for Kibana deployments in ECE without breaking Fleet](https://discuss.elastic.co/t/how-to-add-xpack-encryptedsavedobjects-encryptionkey-for-kibana-deployments-in-ece-without-breaking-fleet/385196)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [March 19, 2026, 7:47pm UTC](https://discuss.elastic.co/t/how-to-add-xpack-encryptedsavedobjects-encryptionkey-for-kibana-deployments-in-ece-without-breaking-fleet/385196 "2026-03-19T19:47:53Z")
Hello, So I tried setting xpack.encryptedSavedObjects.encryptionKey on an ECE Kibana deployment in User and settings and it appeared to have broken the builtin Fleet (message signing key error when opening Fleet) But h… --- ## [Ceph or LVM disk as ELK storage](https://discuss.elastic.co/t/ceph-or-lvm-disk-as-elk-storage/385279)
**Author:** [@marian.veverka](https://discuss.elastic.co/u/marian.veverka)\ **Replies:** 1\ **Last updated:** [February 28, 2026, 8:22am UTC](https://discuss.elastic.co/t/ceph-or-lvm-disk-as-elk-storage/385279 "2026-02-28T08:22:37Z")
Hello, I have ELK Stack: Nodes have 10G network. On disk for data is Ext4 filesystem and after several weeks have errors on filesystem on all disks. And my question is, is it possible due Ceph and LVM would be bette… --- ## [Elastic Defend Service Enhancement](https://discuss.elastic.co/t/elastic-defend-service-enhancement/389619)
**Author:** [@Shailesk](https://discuss.elastic.co/u/Shailesk)\ **Replies:** 1\ **Last updated:** [August 28, 2026, 8:52pm UTC](https://discuss.elastic.co/t/elastic-defend-service-enhancement/389619 "2026-08-28T20:52:54Z")
\*"Elastic Defend scan response action should include scan statistics in the response payload: files scanned count, threats detected count, and scan duration breakdown." \* Reference the field path where it should appear… --- ## [Metricbeat move to Ceph mgr/dashboard API](https://discuss.elastic.co/t/metricbeat-move-to-ceph-mgr-dashboard-api/385921)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 0\ **Last updated:** [April 16, 2026, 2:32pm UTC](https://discuss.elastic.co/t/metricbeat-move-to-ceph-mgr-dashboard-api/385921 "2026-04-16T14:32:09Z")
Is there any plans for metricbeat to transition from the deprecated CEPH mgr/restful API to the mgr/dashboard API ? --- ## [Visualizing Weekly Data Changes in Kibana](https://discuss.elastic.co/t/visualizing-weekly-data-changes-in-kibana/383038)
**Author:** [@MaximeBon](https://discuss.elastic.co/u/MaximeBon)\ **Replies:** 3\ **Last updated:** [November 12, 2025, 7:36am UTC](https://discuss.elastic.co/t/visualizing-weekly-data-changes-in-kibana/383038 "2025-11-12T07:36:38Z")
Hello everyone, I am a cybersecurity engineer utilizing Elasticsearch to analyze vulnerabilities detected within my systems. Every week, I import a list of newly detected vulnerabilities into my Elasticsearch index, inc… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-116)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-116/389502)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-116/389502 "2026-08-13T10:47:09Z")
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CA… --- ## [Need help with simple agregation](https://discuss.elastic.co/t/need-help-with-simple-agregation/383274)
**Author:** [@marjue](https://discuss.elastic.co/u/marjue)\ **Replies:** 4\ **Last updated:** [November 7, 2025, 4:21am UTC](https://discuss.elastic.co/t/need-help-with-simple-agregation/383274 "2025-11-07T04:21:41Z")
Hello I need help in a simple case but I’m too stupid. There is an index with simple monitoring data. The main fields are: service\_name (text) service\_status (text) service\_time (date) Every 5 minutes a new state f… --- ## [Logs sorting out in Kibana](https://discuss.elastic.co/t/logs-sorting-out-in-kibana/385544)
**Author:** [@Anitha](https://discuss.elastic.co/u/Anitha)\ **Replies:** 8\ **Last updated:** [March 24, 2026, 4:07am UTC](https://discuss.elastic.co/t/logs-sorting-out-in-kibana/385544 "2026-03-24T04:07:50Z")
Hello, I am currently working on log ingestion and visualization in Kibana and have successfully configured multiple outputs. At present, I have four separate indices corresponding to different log sources: \* Firewall … --- ## [Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-133)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-133/389499)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-133/389499 "2026-08-13T10:47:00Z")
Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service Description: Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Exc… --- ## [Elastic Architecture on Ex-Hypervisor servers](https://discuss.elastic.co/t/elastic-architecture-on-ex-hypervisor-servers/386605)
**Author:** [@othcher](https://discuss.elastic.co/u/othcher)\ **Replies:** 2\ **Last updated:** [June 2, 2026, 8:57am UTC](https://discuss.elastic.co/t/elastic-architecture-on-ex-hypervisor-servers/386605 "2026-06-02T08:57:59Z")
Hello ELK community, I'm currently implementing my first ELK infrastructure in production. The plan is to ingest S3 logs that are sent from 54 source servers where we installed filebeat. We have 3 physical servers ava… --- ## [Updating Node.js (Ubuntu) within the Kibana application](https://discuss.elastic.co/t/updating-node-js-ubuntu-within-the-kibana-application/387720)
**Author:** [@MandoStorm](https://discuss.elastic.co/u/MandoStorm)\ **Replies:** 4\ **Last updated:** [July 9, 2026, 5:12pm UTC](https://discuss.elastic.co/t/updating-node-js-ubuntu-within-the-kibana-application/387720 "2026-07-09T17:12:56Z")
Good morning/afternoon, I am currently running Ubuntu 24.04 and I want to upgrade the version of node.js to v26.3.1 within kibana application. Any guidance would be greatly appreciated. --- ## [java.io.IOException: Unable to parse response body for Response](https://discuss.elastic.co/t/java-io-ioexception-unable-to-parse-response-body-for-response/384353)
**Author:** [@GQ\_YAN](https://discuss.elastic.co/u/GQ_YAN)\ **Replies:** 6\ **Last updated:** [January 5, 2026, 8:54am UTC](https://discuss.elastic.co/t/java-io-ioexception-unable-to-parse-response-body-for-response/384353 "2026-01-05T08:54:44Z")
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~\[?:?\] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~\[?:?\] at java.lang.Thread.run(Thread.java:829)… --- ## [System integration does not report filesystem metrics for network-mounted filesystem](https://discuss.elastic.co/t/system-integration-does-not-report-filesystem-metrics-for-network-mounted-filesystem/389722)
**Author:** [@Barbarossa](https://discuss.elastic.co/u/Barbarossa)\ **Replies:** 2\ **Last updated:** [September 3, 2026, 9:07pm UTC](https://discuss.elastic.co/t/system-integration-does-not-report-filesystem-metrics-for-network-mounted-filesystem/389722 "2026-09-03T21:07:15Z")
Hi, I’m collecting host metrics from my Elasticsearch nodes using the System integration. Filesystem metrics are collected correctly for all of my local mount points under /mnt/\*, for example /mnt/es\_data, but I’m not … --- ## [Es9.4.x and jvm supportability matrix](https://discuss.elastic.co/t/es9-4-x-and-jvm-supportability-matrix/389716)
**Author:** [@manick02](https://discuss.elastic.co/u/manick02)\ **Replies:** 5\ **Last updated:** [August 17, 2026, 11:45am UTC](https://discuss.elastic.co/t/es9-4-x-and-jvm-supportability-matrix/389716 "2026-08-17T11:45:31Z")
I am trying to bring up es9.4.x in openjdk 25, where i would be bringing in the jdk. I dont see a :white\_check\_mark:in the row es9.4.x against openjdk25 in the supportability matrix link. Am i interpreting this matrix wr… --- ## [How could I change the "agent.name" in a Elastic Agent instance? 8.18](https://discuss.elastic.co/t/how-could-i-change-the-agent-name-in-a-elastic-agent-instance-8-18/383271)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 4\ **Last updated:** [November 11, 2025, 1:09pm UTC](https://discuss.elastic.co/t/how-could-i-change-the-agent-name-in-a-elastic-agent-instance-8-18/383271 "2025-11-11T13:09:57Z")
Once I’ve used the version 8.5 and we could overide the “agent.name” as well as add some tags in the documents generated by the service by editing the “mtricbeat.yaml” file. But as of now the document no longer exists an… --- ## [How to parse json from message field](https://discuss.elastic.co/t/how-to-parse-json-from-message-field/384560)
**Author:** [@k0i3n](https://discuss.elastic.co/u/k0i3n)\ **Replies:** 0\ **Last updated:** [January 15, 2026, 2:56pm UTC](https://discuss.elastic.co/t/how-to-parse-json-from-message-field/384560 "2026-01-15T14:56:01Z")
{ "headers": {}, "message": "�\\u0005Jan 15 15:54:00 10.104.65.41 date=2026-01-15 time=15:54:00 devname=\\"FW\_WAN\_01\\" devid=\\"FG201\\" eventtime=1768467240656260450 tz=\\"+0700\\" logid=\\"1059028704\\" type=\\"utm\\" subtyp… --- ## [Unhealthy EDOT/OTEL Collector in Agent 9.4.x](https://discuss.elastic.co/t/unhealthy-edot-otel-collector-in-agent-9-4-x/388928)
**Author:** [@DavidA](https://discuss.elastic.co/u/DavidA)\ **Replies:** 1\ **Last updated:** [September 15, 2026, 7:09pm UTC](https://discuss.elastic.co/t/unhealthy-edot-otel-collector-in-agent-9-4-x/388928 "2026-09-15T19:09:34Z")
Environment: Elastic Agent / EDOT: 9.4.4 (build baed89504b1a1c0a7642d60dc0b6c1b0eb34f100, elastic-otel-collector service.version 9.4.4) OS: Ubuntu 24.04 (HP thin client) Fleet-managed, policy "Thin Client" Agent runtim… --- ## [Disable auto create data view](https://discuss.elastic.co/t/disable-auto-create-data-view/385795)
**Author:** [@tmp13](https://discuss.elastic.co/u/tmp13)\ **Replies:** 7\ **Last updated:** [April 8, 2026, 7:37am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795 "2026-04-08T07:37:44Z")
Hi. I use Kibana 9.3 I cant find how to disable auto create dataview like: logs-\* metrics-\* All logs Thnx. --- ## [Ingesting logs from S3 bucket elastic-agent vs logstash](https://discuss.elastic.co/t/ingesting-logs-from-s3-bucket-elastic-agent-vs-logstash/384339)
**Author:** [@liquidkite](https://discuss.elastic.co/u/liquidkite)\ **Replies:** 2\ **Last updated:** [January 2, 2026, 4:46pm UTC](https://discuss.elastic.co/t/ingesting-logs-from-s3-bucket-elastic-agent-vs-logstash/384339 "2026-01-02T16:46:33Z")
Hello all, We are ingesting logs into an AWS S3 bucket and I’m exploring various ingestion mechanisms into elasticsearch. After some research, the options are elastic-agent using the S3/SQS and using Logstash S3 input.… --- ## [Use master/data or cordinating node for search?](https://discuss.elastic.co/t/use-master-data-or-cordinating-node-for-search/388127)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [July 11, 2026, 11:00pm UTC](https://discuss.elastic.co/t/use-master-data-or-cordinating-node-for-search/388127 "2026-07-11T23:00:52Z")
I have six data node, three master and two coordinating (which is also kibana) I am setting up proxy in front. for elk:5601 is easy as it is just kibana. for elk:9200 should I use coordinating nodes or master node or … --- ## [Lookup join and visualization on that join](https://discuss.elastic.co/t/lookup-join-and-visualization-on-that-join/385464)
**Author:** [@jai2](https://discuss.elastic.co/u/jai2)\ **Replies:** 5\ **Last updated:** [March 18, 2026, 10:36am UTC](https://discuss.elastic.co/t/lookup-join-and-visualization-on-that-join/385464 "2026-03-18T10:36:45Z")
Consider the following, I have populated 2 indices, both have a task\_id field and I want to join these 2 indices on task\_id to create a dashboard in Kibana. Firstly, I cannot create a data view out of a lookup join. I … --- ## [Does 31GB heap limit mean max 2TB disk per hot node with 1:30 ratio?](https://discuss.elastic.co/t/does-31gb-heap-limit-mean-max-2tb-disk-per-hot-node-with-1-30-ratio/384412)
**Author:** [@juan\_ma\_tejada](https://discuss.elastic.co/u/juan_ma_tejada)\ **Replies:** 5\ **Last updated:** [January 8, 2026, 2:47pm UTC](https://discuss.elastic.co/t/does-31gb-heap-limit-mean-max-2tb-disk-per-hot-node-with-1-30-ratio/384412 "2026-01-08T14:47:46Z")
Hi community,I'm confused about applying the 1:30 RAM:disk ratio for hot nodes with the JVM heap limit. My understanding:1:30 ratio means 1 GB RAM per 30 GB disk capacity for hot nodes For 2 TB (2000 GB) disk → need ~6… --- ## [Windows version for logstash 9.3.0](https://discuss.elastic.co/t/windows-version-for-logstash-9-3-0/385109)
**Author:** [@Bojie](https://discuss.elastic.co/u/Bojie)\ **Replies:** 6\ **Last updated:** [February 20, 2026, 1:35pm UTC](https://discuss.elastic.co/t/windows-version-for-logstash-9-3-0/385109 "2026-02-20T13:35:47Z")
Hi, I would like to ask if there will be a windows version of Logstash 9.3.0 available for download, and if so, when would it be released? I would need version 9.3.0 as it contains the latest version of log4j (2.25.3) wh… --- ## [Issues with ECK and pvc-autoresizer](https://discuss.elastic.co/t/issues-with-eck-and-pvc-autoresizer/386804)
**Author:** [@sahendrikse](https://discuss.elastic.co/u/sahendrikse)\ **Replies:** 0\ **Last updated:** [June 10, 2026, 4:32pm UTC](https://discuss.elastic.co/t/issues-with-eck-and-pvc-autoresizer/386804 "2026-06-10T16:32:35Z")
Hi all, We're currently working with both ECK and pvc-autoresizer in our deployment, where our pvc-resizer annotations are defined with the volumeClaimTemplate as: annotations = { "resize.topolvm.io/threshold" = … --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-108)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-108/389514)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-108/389514 "2026-08-13T10:47:49Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation… --- ## [External Inference using google vertex ai and gemini-3.6-flash error](https://discuss.elastic.co/t/external-inference-using-google-vertex-ai-and-gemini-3-6-flash-error/390296)
**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\ **Replies:** 2\ **Last updated:** [September 11, 2026, 7:13am UTC](https://discuss.elastic.co/t/external-inference-using-google-vertex-ai-and-gemini-3-6-flash-error/390296 "2026-09-11T07:13:06Z")
Hi! I'm trying to set up an external inference using our Google vertex ai account and the model gemini-3.6-flash. The inference creation works, but trying to use it as a chat-completion fails with an error: Error: Rec… --- ## [Node name APM](https://discuss.elastic.co/t/node-name-apm/384851)
**Author:** [@Karol\_Niema](https://discuss.elastic.co/u/Karol_Niema)\ **Replies:** 4\ **Last updated:** [February 25, 2026, 1:30pm UTC](https://discuss.elastic.co/t/node-name-apm/384851 "2026-02-25T13:30:25Z")
Hi, I have problem with empty node name in services APM Kibana version: 9.0.3 Elasticsearch version: 9.0.3 My stack TIBCO BW send otel data to local EDOT collector, collector directly send data to elasticsearch Is… --- ## [Compatibility of Elasticsearch 8.17.0 with Amazon Corretto 17 / 21](https://discuss.elastic.co/t/compatibility-of-elasticsearch-8-17-0-with-amazon-corretto-17-21/382858)
**Author:** [@babudurairaji](https://discuss.elastic.co/u/babudurairaji)\ **Replies:** 4\ **Last updated:** [October 23, 2025, 4:35am UTC](https://discuss.elastic.co/t/compatibility-of-elasticsearch-8-17-0-with-amazon-corretto-17-21/382858 "2025-10-23T04:35:28Z")
Hi, We are currently using Elasticsearch version 8.17.0 for data auditing purposes. We would like to know whether this version is compatible with Amazon Corretto 17 or 21, instead of using Oracle JDK 17. Could anyone p… --- ## [Elasticsearch Hardware Requirements](https://discuss.elastic.co/t/elasticsearch-hardware-requirements/387878)
**Author:** [@Sam11](https://discuss.elastic.co/u/Sam11)\ **Replies:** 5\ **Last updated:** [July 8, 2026, 2:45pm UTC](https://discuss.elastic.co/t/elasticsearch-hardware-requirements/387878 "2026-07-08T14:45:10Z")
Hi everyone, I am a bit confused about elasticsearch memory-to-storage ratio. And I would appreciate some clarifications. I know that for warm nodes the ratio is 1:160 and 1:30 for hot nodes. The offical Elasticsearch… --- ## [Peer Recovery does not respect indices.recovery.use\_snapshots=false or use\_for\_peer\_recovery=false - misleading documentation? (ES 8.13.4)](https://discuss.elastic.co/t/peer-recovery-does-not-respect-indices-recovery-use-snapshots-false-or-use-for-peer-recovery-false-misleading-documentation-es-8-13-4/382879)
**Author:** [@doitMLU](https://discuss.elastic.co/u/doitMLU)\ **Replies:** 5\ **Last updated:** [October 22, 2025, 4:18pm UTC](https://discuss.elastic.co/t/peer-recovery-does-not-respect-indices-recovery-use-snapshots-false-or-use-for-peer-recovery-false-misleading-documentation-es-8-13-4/382879 "2025-10-22T16:18:41Z")
Hi everyone, We recently had a big spike in S3 transfers and subsequently costs, which let me to troubleshoot the configuration of our elastic stack. I’ve found the cluster setting indices.recovery.use\_snapshots which d… --- ## [Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-119)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-119/389498)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-119/389498 "2026-08-13T10:46:56Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding… --- ## [What is the best indexing strategy in Elasticsearch for many small shards?](https://discuss.elastic.co/t/what-is-the-best-indexing-strategy-in-elasticsearch-for-many-small-shards/384010)
**Author:** [@cilasmarques](https://discuss.elastic.co/u/cilasmarques)\ **Replies:** 3\ **Last updated:** [December 12, 2025, 2:48pm UTC](https://discuss.elastic.co/t/what-is-the-best-indexing-strategy-in-elasticsearch-for-many-small-shards/384010 "2025-12-12T14:48:27Z")
I'm new to Elasticsearch and I'm trying to understand the best practices to improve performance in my scenario. I currently have 18 indices, one for each environment and location, each index has 1 shard and is \< 1 GB in … --- ## [Request for Elastic Security Free Trial Extension for SOC PoC Internship Project](https://discuss.elastic.co/t/request-for-elastic-security-free-trial-extension-for-soc-poc-internship-project/386259)
**Author:** [@Nabyl\_Ouchine](https://discuss.elastic.co/u/Nabyl_Ouchine)\ **Replies:** 5\ **Last updated:** [May 12, 2026, 4:35pm UTC](https://discuss.elastic.co/t/request-for-elastic-security-free-trial-extension-for-soc-poc-internship-project/386259 "2026-05-12T16:35:00Z")
Hello Elastic Security Team, I hope you are doing well. I would like to kindly follow up regarding my requests for an extension of the Elastic Security free trial. I have submitted multiple requests but unfortunately I… --- ## [DC-DR setup of elasticsearch](https://discuss.elastic.co/t/dc-dr-setup-of-elasticsearch/383633)
**Author:** [@Sahana15](https://discuss.elastic.co/u/Sahana15)\ **Replies:** 5\ **Last updated:** [November 25, 2025, 6:36pm UTC](https://discuss.elastic.co/t/dc-dr-setup-of-elasticsearch/383633 "2025-11-25T18:36:21Z")
Hi Community, I have a few questions regarding a DC–DR setup for Elasticsearch, Kibana, and Logstash. Your insights would be greatly appreciated. We plan to configure Hot and Warm nodes in the primary DC. Can the same … [Previous page](https://discuss.elastic.co/top.md?page=9&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=11&per_page=50)