# Top **URL:** https://discuss.elastic.co/top.md?page=13 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 14 --- ## [Filebeat registry not working for filestream input](https://discuss.elastic.co/t/filebeat-registry-not-working-for-filestream-input/383758)
**Author:** [@Ljapunov](https://discuss.elastic.co/u/Ljapunov)\ **Replies:** 1\ **Last updated:** [December 10, 2025, 8:35am UTC](https://discuss.elastic.co/t/filebeat-registry-not-working-for-filestream-input/383758 "2025-12-10T08:35:36Z")
I found some of the filebeat instances in our production environment resend logfiles and suspected the registry as the root cause. Trying to dig into it I got really confused about the registry, maybe someone can help m… --- ## [Best way to store document chunks for vector search as production standard](https://discuss.elastic.co/t/best-way-to-store-document-chunks-for-vector-search-as-production-standard/385414)
**Author:** [@grunggy](https://discuss.elastic.co/u/grunggy)\ **Replies:** 2\ **Last updated:** [March 12, 2026, 5:43pm UTC](https://discuss.elastic.co/t/best-way-to-store-document-chunks-for-vector-search-as-production-standard/385414 "2026-03-12T17:43:33Z")
Hi, working on a RAG setup and trying to land on a sensible production architecture for chunk storage and retrieval. Curious what others are running at scale. Large documents get split into chunks at ingestion, each chu… --- ## [ECK how to change filebeat and metricbeat image paths?](https://discuss.elastic.co/t/eck-how-to-change-filebeat-and-metricbeat-image-paths/383817)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 3\ **Last updated:** [December 3, 2025, 3:33pm UTC](https://discuss.elastic.co/t/eck-how-to-change-filebeat-and-metricbeat-image-paths/383817 "2025-12-03T15:33:52Z")
How can I specify a custom path in our private registry for filebeat and metricbeat images? Note, these are the images that are used when Elastic pod is deployed, it seems that filebeat and metricbeat containers are nee… --- ## [Action\_request\_validation\_exception: \[action\_request\_validation\_exception\] Reason: Validation Failed: 1: id is missing](https://discuss.elastic.co/t/action-request-validation-exception-action-request-validation-exception-reason-validation-failed-1-id-is-missing/383039)
**Author:** [@junqiang\_ma](https://discuss.elastic.co/u/junqiang_ma)\ **Replies:** 4\ **Last updated:** [October 30, 2025, 12:57am UTC](https://discuss.elastic.co/t/action-request-validation-exception-action-request-validation-exception-reason-validation-failed-1-id-is-missing/383039 "2025-10-30T00:57:00Z")
We are using Elasticsearch 7.5.10 and indexing data into this cluster via a Node.js application (client version: "@elastic/elasticsearch": "7.17"). My index mapping is as follows: { "platform.fund.notices.test\_a": { … --- ## [Facing Error while upgrading elasticsearch cluster to 8.19.8](https://discuss.elastic.co/t/facing-error-while-upgrading-elasticsearch-cluster-to-8-19-8/384017)
**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Replies:** 2\ **Last updated:** [December 12, 2025, 2:49pm UTC](https://discuss.elastic.co/t/facing-error-while-upgrading-elasticsearch-cluster-to-8-19-8/384017 "2025-12-12T14:49:24Z")
Hey everyone, I am currently upgrading my elasticsearch version from 8.11.3 to 8.19.8 and I am facing an error. I am using docker containers to deploy elasticsearch nodes. I was able to upgrade my coordinator and hot no… --- ## [Download Files of an API from Kibana Dashboard](https://discuss.elastic.co/t/download-files-of-an-api-from-kibana-dashboard/385646)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 7\ **Last updated:** [April 1, 2026, 3:18pm UTC](https://discuss.elastic.co/t/download-files-of-an-api-from-kibana-dashboard/385646 "2026-04-01T15:18:57Z")
Hello, we have a Kibana dashboard showing some metadata of files. Is it somehow possible to integrate a link or button to download the files from our API after filtering the dashboard using controls? The goal should b… --- ## [RUM APM sourcemaps not displaying in kibana](https://discuss.elastic.co/t/rum-apm-sourcemaps-not-displaying-in-kibana/385995)
**Author:** [@MathDP](https://discuss.elastic.co/u/MathDP)\ **Replies:** 3\ **Last updated:** [May 26, 2026, 6:20am UTC](https://discuss.elastic.co/t/rum-apm-sourcemaps-not-displaying-in-kibana/385995 "2026-05-26T06:20:59Z")
Hello everone, I am trying to setup frontend sourcemaps for better error reporting in kibana APM. I tried many things but nothing seems to work and the errors keep being reported with the production filenames instead of … --- ## [Need Help: Date-wise Index Creation with Application Using Built-in Elasticsearch and Static Index Name](https://discuss.elastic.co/t/need-help-date-wise-index-creation-with-application-using-built-in-elasticsearch-and-static-index-name/386007)
**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\ **Replies:** 6\ **Last updated:** [May 20, 2026, 1:24pm UTC](https://discuss.elastic.co/t/need-help-date-wise-index-creation-with-application-using-built-in-elasticsearch-and-static-index-name/386007 "2026-05-20T13:24:00Z")
\## Environment Details ### Elasticsearch (self-managed cluster on AWS) 4 Data Nodes (1 TB each) 2 Master Nodes Daily data ingestion around 300 GB (without replica) and approximately 600 GB with 1 replica Data source is… --- ## [Auditbeat Exclusion of Process](https://discuss.elastic.co/t/auditbeat-exclusion-of-process/384243)
**Author:** [@testtest](https://discuss.elastic.co/u/testtest)\ **Replies:** 2\ **Last updated:** [December 27, 2025, 1:31pm UTC](https://discuss.elastic.co/t/auditbeat-exclusion-of-process/384243 "2025-12-27T13:31:27Z")
Hi All, Could someone help me with exclude any process executable related to this path /usr/local/manageengine/uems\_agent/bin/\* (I can see a lot of incoming logs related to /usr/local/manageengine/uems\_agent/bin/dcpa… --- ## [Release Version Dates](https://discuss.elastic.co/t/release-version-dates/390130)
**Author:** [@jameswiggins](https://discuss.elastic.co/u/jameswiggins)\ **Replies:** 3\ **Last updated:** [September 2, 2026, 2:54pm UTC](https://discuss.elastic.co/t/release-version-dates/390130 "2026-09-02T14:54:37Z")
The documentation states You can upgrade to a higher version if the target version was released after your current version. Upgrades to versions released before your current version are not supported, even if the versi… --- ## [Dynamic template mapping overridden by automatic \`dense\_vector\` inference for float arrays](https://discuss.elastic.co/t/dynamic-template-mapping-overridden-by-automatic-dense-vector-inference-for-float-arrays/385359)
**Author:** [@giga811](https://discuss.elastic.co/u/giga811)\ **Replies:** 3\ **Last updated:** [March 7, 2026, 6:16am UTC](https://discuss.elastic.co/t/dynamic-template-mapping-overridden-by-automatic-dense-vector-inference-for-float-arrays/385359 "2026-03-07T06:16:54Z")
I encountered a situation where a dynamic template specifying a field as float is overridden by automatic dense\_vector mapping when indexing a long float array in Elasticsearch. My intention is to store embeddings as a … --- ## [Resizing visualization on an existing dashboard after upgrade to 9.2.0 causes page to freeze](https://discuss.elastic.co/t/resizing-visualization-on-an-existing-dashboard-after-upgrade-to-9-2-0-causes-page-to-freeze/383338)
**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Replies:** 4\ **Last updated:** [December 11, 2025, 3:56pm UTC](https://discuss.elastic.co/t/resizing-visualization-on-an-existing-dashboard-after-upgrade-to-9-2-0-causes-page-to-freeze/383338 "2025-12-11T15:56:01Z")
After moving to Kibana 9.2.0, anytime we try to resize a visualization on an existing dashboard the page freezes. The tab then has to be closed. This basically means we can’t edit any previously existing dashboards. Has … --- ## [% by breaking subgroup](https://discuss.elastic.co/t/by-breaking-subgroup/384865)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 8\ **Last updated:** [February 4, 2026, 6:12pm UTC](https://discuss.elastic.co/t/by-breaking-subgroup/384865 "2026-02-04T18:12:52Z")
I have following record month client minute 1/1/25 A 100 1/1/25 B 100 2/1/25 A 100 2/1/25 B 100 I want to setup table vz by month aggregation 1/1/25 A 100 25% … --- ## [Fatal error on Kibana startup - 8.19.5 - Windows Server 2025 - Error: Cannot find module '../series\_functions/undefined'](https://discuss.elastic.co/t/fatal-error-on-kibana-startup-8-19-5-windows-server-2025-error-cannot-find-module-series-functions-undefined/382920)
**Author:** [@markus](https://discuss.elastic.co/u/markus)\ **Replies:** 3\ **Last updated:** [October 23, 2025, 2:36pm UTC](https://discuss.elastic.co/t/fatal-error-on-kibana-startup-8-19-5-windows-server-2025-error-cannot-find-module-series-functions-undefined/382920 "2025-10-23T14:36:16Z")
I’m currently trying to upgrade my ELK Stack from 8.17.8 to 8.19.5. OS is Windows Server 2025 When starting Kibana it fails with the following error log: \[2025-10-23T15:19:48.349+02:00\]\[FATAL\]\[root\] Reason: Cannot fin… --- ## [Is second wave of Shai-Hulud attack impacting Elastic Stack?](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724)
**Author:** [@hkw2pg1](https://discuss.elastic.co/u/hkw2pg1)\ **Replies:** 1\ **Last updated:** [December 1, 2025, 5:00pm UTC](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724 "2025-12-01T17:00:18Z")
The Shai-Hulud attack came back again with approximately 800 npm packages impacted. To which extend is this article still stand? → Navigating the Shai-Hulud worm: Elastic's proactive defense against npm supply chain com… --- ## [No data/log from elastic agent on Security onion](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140)
**Author:** [@Mojamed\_Pika\_SANOGO](https://discuss.elastic.co/u/Mojamed_Pika_SANOGO)\ **Replies:** 4\ **Last updated:** [May 6, 2026, 7:58pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140 "2026-05-06T19:58:07Z")
Hi, I need help. I installed Elastic Agent on Windows machines for monitoring on Security Onion. I chose the distributed mode. Although the agents appear in Fleet and are in a healthy state, and I've integrated Elastic D… --- ## [Query DSL alert configuration](https://discuss.elastic.co/t/query-dsl-alert-configuration/385538)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 4\ **Last updated:** [March 26, 2026, 4:04am UTC](https://discuss.elastic.co/t/query-dsl-alert-configuration/385538 "2026-03-26T04:04:44Z")
I am trying to use the Elasticsearch Query DSL to create an alert The query consist of LIMIT 100 but the actual output is actually less than 10. When I did run the test query . Query matched 852597 documents in the las… --- ## [Fleet policy settings "Agent logging to files" & "Agent log level" does not work](https://discuss.elastic.co/t/fleet-policy-settings-agent-logging-to-files-agent-log-level-does-not-work/382982)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 2\ **Last updated:** [October 30, 2025, 7:26am UTC](https://discuss.elastic.co/t/fleet-policy-settings-agent-logging-to-files-agent-log-level-does-not-work/382982 "2025-10-30T07:26:51Z")
Hello, I’m replacing Metricbeats with Elastic-Agent on multiple servers so i can manage them through UI, but I noticed that some options are not working like "Agent logging to files" & "Agent log level", you have to di… --- ## [Using Case templates in Attack Discovery scheduling](https://discuss.elastic.co/t/using-case-templates-in-attack-discovery-scheduling/385398)
**Author:** [@wsouza](https://discuss.elastic.co/u/wsouza)\ **Replies:** 3\ **Last updated:** [March 12, 2026, 12:59pm UTC](https://discuss.elastic.co/t/using-case-templates-in-attack-discovery-scheduling/385398 "2026-03-12T12:59:58Z")
Hi folks. I'd like to know if there's a way to use a template for scheduled tasks in Attack Discovery. The information I've received is that Attack Discovery automatically fills in the fields, but is there any way to edi… --- ## [Kibana Dev Tools Console does not execute full \_bulk request](https://discuss.elastic.co/t/kibana-dev-tools-console-does-not-execute-full-bulk-request/390219)
**Author:** [@Abdullah\_Hamza](https://discuss.elastic.co/u/Abdullah_Hamza)\ **Replies:** 1\ **Last updated:** [September 7, 2026, 4:30am UTC](https://discuss.elastic.co/t/kibana-dev-tools-console-does-not-execute-full-bulk-request/390219 "2026-09-07T04:30:33Z")
Description: When running a valid Elasticsearch Bulk API request in Kibana Dev Tools Console, the console does not appear to process all NDJSON operations as a single request. Example: POST /logs/\_bulk {"create":{}} {"@t… --- ## [Kibana 9.4.3 high RAM consumption](https://discuss.elastic.co/t/kibana-9-4-3-high-ram-consumption/388326)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 2\ **Last updated:** [July 15, 2026, 5:31pm UTC](https://discuss.elastic.co/t/kibana-9-4-3-high-ram-consumption/388326 "2026-07-15T17:31:44Z")
Hello, I have a problem that Kibana is taking too much RAM after upgrading to version 9.4.3 consumption in previous versions (from stack monitoring) 8.17.0 & 8.19.0 : consumption doubled after upgrade (9.4.3): A… --- ## [How to change my username used in this forum?](https://discuss.elastic.co/t/how-to-change-my-username-used-in-this-forum/386419)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 4\ **Last updated:** [May 22, 2026, 11:02am UTC](https://discuss.elastic.co/t/how-to-change-my-username-used-in-this-forum/386419 "2026-05-22T11:02:04Z")
How do I change my username? There is no option to do that in account settings. --- ## [Maximum Scroll Context](https://discuss.elastic.co/t/maximum-scroll-context/384754)
**Author:** [@Lakshya\_Gupta](https://discuss.elastic.co/u/Lakshya_Gupta)\ **Replies:** 5\ **Last updated:** [January 29, 2026, 1:07pm UTC](https://discuss.elastic.co/t/maximum-scroll-context/384754 "2026-01-29T13:07:35Z")
Hi guys, I was wondering that the maximum scroll context is a node level property across all the indices right? If that’s true, then does it mean that any elastic cluster wherein let’s assume number of primary shards = n… --- ## [Elastic stack \> Monitoring \> Indices Not Showing the indices](https://discuss.elastic.co/t/elastic-stack-monitoring-indices-not-showing-the-indices/387608)
**Author:** [@kkumar123](https://discuss.elastic.co/u/kkumar123)\ **Replies:** 3\ **Last updated:** [July 15, 2026, 8:39pm UTC](https://discuss.elastic.co/t/elastic-stack-monitoring-indices-not-showing-the-indices/387608 "2026-07-15T20:39:37Z")
Kibana Stack monitoring \> Indices not showing indices i have monitoring enabled via elastic agent and currently i see other monitoring stats but this one tab is not showing any indices stats Elastic Stack \> Kibana ela… --- ## [Search\_after for pagination](https://discuss.elastic.co/t/search-after-for-pagination/384309)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 4\ **Last updated:** [December 30, 2025, 4:38pm UTC](https://discuss.elastic.co/t/search-after-for-pagination/384309 "2025-12-30T16:38:37Z")
I want to implement pagination using search\_after instead of from, size. There are different sortings in our website like sort by relevancy or a-z or z-a or lowest to highest… How will the sort values for search\_after co… --- ## [Unable to configure precision\_threshold for Unique Count in Kibana Lens (v9.3.3)](https://discuss.elastic.co/t/unable-to-configure-precision-threshold-for-unique-count-in-kibana-lens-v9-3-3/386505)
**Author:** [@Vignesh2](https://discuss.elastic.co/u/Vignesh2)\ **Replies:** 3\ **Last updated:** [May 27, 2026, 10:10am UTC](https://discuss.elastic.co/t/unable-to-configure-precision-threshold-for-unique-count-in-kibana-lens-v9-3-3/386505 "2026-05-27T10:10:34Z")
Hi team, I'm facing an accuracy issue with the Unique Count aggregation in Kibana Lens and could not find a way to configure precision\_threshold through the UI. Environment Kibana version: 9.3.3 Visualization: Lens (… --- ## [Elastic/kibana webserver .p12/.crt issues](https://discuss.elastic.co/t/elastic-kibana-webserver-p12-crt-issues/383903)
**Author:** [@HaydenB0101](https://discuss.elastic.co/u/HaydenB0101)\ **Replies:** 6\ **Last updated:** [December 12, 2025, 1:37am UTC](https://discuss.elastic.co/t/elastic-kibana-webserver-p12-crt-issues/383903 "2025-12-12T01:37:56Z")
My elastic setup is running into issues after I generated new certs for http encryption using elasticsearch-certutil for http and ca. I followed this documentation as well as documentation from other people Kibana is run… --- ## [Synthetics Private Location Policies](https://discuss.elastic.co/t/synthetics-private-location-policies/382857)
**Author:** [@Nekstar](https://discuss.elastic.co/u/Nekstar)\ **Replies:** 2\ **Last updated:** [October 24, 2025, 7:24am UTC](https://discuss.elastic.co/t/synthetics-private-location-policies/382857 "2025-10-24T07:24:41Z")
I’m currently facing a small issue when creating a Private Location. When trying to create a Private Location for a Space other than “Default” it can only find Agent Policies in the “Default” Space. I expected it to find… --- ## [Logstash pod failing to create pipeline due to error loading a ruby script](https://discuss.elastic.co/t/logstash-pod-failing-to-create-pipeline-due-to-error-loading-a-ruby-script/382757)
**Author:** [@lester\_slee](https://discuss.elastic.co/u/lester_slee)\ **Replies:** 7\ **Last updated:** [October 17, 2025, 1:47am UTC](https://discuss.elastic.co/t/logstash-pod-failing-to-create-pipeline-due-to-error-loading-a-ruby-script/382757 "2025-10-17T01:47:48Z")
I am seeing the below error in the logstash log when deploying an eck-logstash pod using Helm. The ruby script is added via a configMap and I have checked that the script has been mounted in the correct directory and has… --- ## [Doing simple Lucene-ish things](https://discuss.elastic.co/t/doing-simple-lucene-ish-things/386250)
**Author:** [@rik](https://discuss.elastic.co/u/rik)\ **Replies:** 3\ **Last updated:** [May 22, 2026, 12:52am UTC](https://discuss.elastic.co/t/doing-simple-lucene-ish-things/386250 "2026-05-22T00:52:25Z")
hi all, first time using ES discuss. (And I posted the same question to ES slack as I don't know where this community mostly hangs?) At the moment I'm using trial ES serverless resources, and the python API. I used to … --- ## [Elasticsearch 7.17.28 Critical Bugs](https://discuss.elastic.co/t/elasticsearch-7-17-28-critical-bugs/387493)
**Author:** [@Abdullah\_Shah](https://discuss.elastic.co/u/Abdullah_Shah)\ **Replies:** 4\ **Last updated:** [July 9, 2026, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-28-critical-bugs/387493 "2026-07-09T08:40:31Z")
Anyone still using Elasticsearch 7.17.28 I'm facing some issues and would like to see if it's a elasticsearch issue or something else Issues like Snapshot repo permission issue Desc: Elasticsearch loses repo access… --- ## [Elasticsearch API request](https://discuss.elastic.co/t/elasticsearch-api-request/385892)
**Author:** [@Cdotisp\_Delhi](https://discuss.elastic.co/u/Cdotisp_Delhi)\ **Replies:** 5\ **Last updated:** [April 22, 2026, 10:22am UTC](https://discuss.elastic.co/t/elasticsearch-api-request/385892 "2026-04-22T10:22:47Z")
GET /lb-2026.04/\_search { "size": 10000, "aggs": { "last\_entry": { "max": { "field": "@timestamp" } } } } I want to retrieve all latest timestamp documents from Index lb-2026.04 but number of documents are exc… --- ## [How do you verify that an eland-imported tree model matches the original?](https://discuss.elastic.co/t/how-do-you-verify-that-an-eland-imported-tree-model-matches-the-original/390787)
**Author:** [@Milivoje\_Simonovic](https://discuss.elastic.co/u/Milivoje_Simonovic)\ **Replies:** 1\ **Last updated:** [October 1, 2026, 1:34am UTC](https://discuss.elastic.co/t/how-do-you-verify-that-an-eland-imported-tree-model-matches-the-original/390787 "2026-10-01T01:34:37Z")
Hi, Laura Trotta at Elastic suggested I post this here. When eland imports an XGBoost, LightGBM or scikit-learn model into Elasticsearch, what Elasticsearch runs is a converted copy of the trained model. I am curious h… --- ## [Kibana shows 500-Internal Server Error after upgrade from 9.3.1 to 9.4.1 when security is turend off](https://discuss.elastic.co/t/kibana-shows-500-internal-server-error-after-upgrade-from-9-3-1-to-9-4-1-when-security-is-turend-off/386504)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 1\ **Last updated:** [May 26, 2026, 2:53pm UTC](https://discuss.elastic.co/t/kibana-shows-500-internal-server-error-after-upgrade-from-9-3-1-to-9-4-1-when-security-is-turend-off/386504 "2026-05-26T14:53:46Z")
We have deployed Elasticsearch and Kibana on an internal network. The elasticsearch cluster has security and ML disabled xpack.security.enabled: false xpack.security.transport.ssl.enabled: false xpack.security.http.ssl.… --- ## [How can I create an alert for one-time events?](https://discuss.elastic.co/t/how-can-i-create-an-alert-for-one-time-events/383781)
**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\ **Replies:** 2\ **Last updated:** [January 9, 2026, 8:48am UTC](https://discuss.elastic.co/t/how-can-i-create-an-alert-for-one-time-events/383781 "2026-01-09T08:48:41Z")
I want to set up an alert that triggers whenever one of my APIs returns a 500 error. This doesn’t really fit into the usual active/recovered/flapping model since it’s more of a single event rather than something that sta… --- ## [Minecraft 1.21.124 Bedrock Edition Android Problemas de ingesta de logs S3 en Elasticsearch](https://discuss.elastic.co/t/minecraft-1-21-124-bedrock-edition-android-problemas-de-ingesta-de-logs-s3-en-elasticsearch/383786)
**Author:** [@padmakrishnadev](https://discuss.elastic.co/u/padmakrishnadev)\ **Replies:** 0\ **Last updated:** [December 1, 2025, 2:32pm UTC](https://discuss.elastic.co/t/minecraft-1-21-124-bedrock-edition-android-problemas-de-ingesta-de-logs-s3-en-elasticsearch/383786 "2025-12-01T14:32:40Z")
Hola comunidad, estoy trabajando en un proyecto de análisis de datos para una aplicación móvil específica y me he encontrado con un problema de latencia y permisos al intentar indexar los logs de acceso desde AWS CloudFr… --- ## [Active Directory Entity Analytics integration](https://discuss.elastic.co/t/active-directory-entity-analytics-integration/382910)
**Author:** [@Marek\_Galbavy](https://discuss.elastic.co/u/Marek_Galbavy)\ **Replies:** 1\ **Last updated:** [November 26, 2025, 11:47am UTC](https://discuss.elastic.co/t/active-directory-entity-analytics-integration/382910 "2025-11-26T11:47:53Z")
Hi everyone, I’m having a problem with the Active Directory Entity Analytics integration. Everything used to work perfectly — and it still works fine on another cluster where I’m still running version 0.15. However, on… --- ## [Oracle DB integration with Unified logs](https://discuss.elastic.co/t/oracle-db-integration-with-unified-logs/383160)
**Author:** [@Alaeddine\_khadraoui](https://discuss.elastic.co/u/Alaeddine_khadraoui)\ **Replies:** 1\ **Last updated:** [November 2, 2025, 1:49pm UTC](https://discuss.elastic.co/t/oracle-db-integration-with-unified-logs/383160 "2025-11-02T13:49:48Z")
We Have Oracle DB configured with Unified Auditing, under unified auditing all DB audit records stored in a single file, we dont have \*.aud files generated which is used and expected by the Oracle Integration What the o… --- ## [How to properly detect and handle transport errors in Elasticsearch logging (latest versions)](https://discuss.elastic.co/t/how-to-properly-detect-and-handle-transport-errors-in-elasticsearch-logging-latest-versions/382790)
**Author:** [@Guido\_hernan\_Gagliar](https://discuss.elastic.co/u/Guido_hernan_Gagliar)\ **Replies:** 2\ **Last updated:** [October 20, 2025, 11:28am UTC](https://discuss.elastic.co/t/how-to-properly-detect-and-handle-transport-errors-in-elasticsearch-logging-latest-versions/382790 "2025-10-20T11:28:49Z")
Hi everyone! :waving\_hand: I'm new to Elasticsearch and still learning, so I’d really appreciate some guidance. I’m trying to understand the best way to detect and handle transport errors when sending logs to Elasticse… --- ## [Unable to completely restore the URL, be sure to use the share functionality](https://discuss.elastic.co/t/unable-to-completely-restore-the-url-be-sure-to-use-the-share-functionality/383960)
**Author:** [@Haris\_Ahmed](https://discuss.elastic.co/u/Haris_Ahmed)\ **Replies:** 5\ **Last updated:** [December 21, 2025, 11:39am UTC](https://discuss.elastic.co/t/unable-to-completely-restore-the-url-be-sure-to-use-the-share-functionality/383960 "2025-12-21T11:39:45Z")
Hi Team, We are currently using Elasticsearch and Kibana version 9.2.0 and have configured a drilldown with the "Go to dashboard" action. The drilldown has been created with the relevant options enabled. We are curr… --- ## [Lots of shards relocating post restore](https://discuss.elastic.co/t/lots-of-shards-relocating-post-restore/385356)
**Author:** [@ch4zzych4zz](https://discuss.elastic.co/u/ch4zzych4zz)\ **Replies:** 6\ **Last updated:** [March 6, 2026, 2:00pm UTC](https://discuss.elastic.co/t/lots-of-shards-relocating-post-restore/385356 "2026-03-06T14:00:37Z")
Hi, I’m struggling to repetitively backup and restore efficiently indices between two independent ES clusters as this is causing a lot of shards rebalancing. The setup is as follows: ES 8.19 cluster composed of 11 no… --- ## [New release of elastic-apm gem](https://discuss.elastic.co/t/new-release-of-elastic-apm-gem/390553)
**Author:** [@opiotrek](https://discuss.elastic.co/u/opiotrek)\ **Replies:** 2\ **Last updated:** [September 23, 2026, 5:56am UTC](https://discuss.elastic.co/t/new-release-of-elastic-apm-gem/390553 "2026-09-23T05:56:31Z")
Hello! The master branch contains an important fix that will unblock our upgrade to Ruby 4.0+. Can you release a new gem version? --- ## [How to Access Data About Dashboard Activity](https://discuss.elastic.co/t/how-to-access-data-about-dashboard-activity/385308)
**Author:** [@ArielC](https://discuss.elastic.co/u/ArielC)\ **Replies:** 4\ **Last updated:** [March 3, 2026, 5:05pm UTC](https://discuss.elastic.co/t/how-to-access-data-about-dashboard-activity/385308 "2026-03-03T17:05:33Z")
The dashboard menu now displays dashboard activity, under actions: How can I access this data to make other visualizations? For example, I would like to make a table showing how many views each dashboard has had in … --- ## [Indexing of large nested object failed in ES 9.1.4](https://discuss.elastic.co/t/indexing-of-large-nested-object-failed-in-es-9-1-4/384239)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 4\ **Last updated:** [December 24, 2025, 9:21am UTC](https://discuss.elastic.co/t/indexing-of-large-nested-object-failed-in-es-9-1-4/384239 "2025-12-24T09:21:16Z")
Hello All, When we perform indexing in ES 9.1.4 we have encounter issue. Indexing error occurred: method \[POST\], host \[ip:9200\], URI \[/\_bulk?timeout=4m\], status line \[HTTP/1.1 413 Request Entity Too Large\] errors = or… --- ## [Sythetics icmp down alert received but host and agent had been unenrolled!](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 6\ **Last updated:** [April 13, 2026, 9:20am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866 "2026-04-13T09:20:44Z")
host had been decommissioned. agent had been unrolled weeks back BUT still getting sythetics icmp down alert today. Kindly assist! --- ## [I would like to join the elasticsearch community](https://discuss.elastic.co/t/i-would-like-to-join-the-elasticsearch-community/385085)
**Author:** [@vmm](https://discuss.elastic.co/u/vmm)\ **Replies:** 4\ **Last updated:** [February 25, 2026, 12:10am UTC](https://discuss.elastic.co/t/i-would-like-to-join-the-elasticsearch-community/385085 "2026-02-25T00:10:27Z")
Hello, nice to meet you. I am a young software engineer and IT engineering student, and I would like to contribute to this opensource project. I have been writing code for projects sold to the national Public Administra… --- ## [Agent (Winlogbeat) stop sending data](https://discuss.elastic.co/t/agent-winlogbeat-stop-sending-data/384988)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 5\ **Last updated:** [February 23, 2026, 8:21pm UTC](https://discuss.elastic.co/t/agent-winlogbeat-stop-sending-data/384988 "2026-02-23T20:21:41Z")
Hi, i’m facing with a problem for some winlogbeat agents. Randomly the agent stop sending data to the cluster. When i restart the service It starts writing data from where it stopped and then after a few hours it stops a… --- ## [Filebeat is not able to read the message event if the attachment is more than 2 GBin the log file](https://discuss.elastic.co/t/filebeat-is-not-able-to-read-the-message-event-if-the-attachment-is-more-than-2-gbin-the-log-file/383765)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 4\ **Last updated:** [November 30, 2025, 5:27pm UTC](https://discuss.elastic.co/t/filebeat-is-not-able-to-read-the-message-event-if-the-attachment-is-more-than-2-gbin-the-log-file/383765 "2025-11-30T17:27:51Z")
Filebeat is not able to read the message event if the attachment is more than 2 GB in in request contact the log file. --- ## [Optimal JVM Heap size?](https://discuss.elastic.co/t/optimal-jvm-heap-size/384106)
**Author:** [@Aditya\_M](https://discuss.elastic.co/u/Aditya_M)\ **Replies:** 1\ **Last updated:** [December 16, 2025, 11:26am UTC](https://discuss.elastic.co/t/optimal-jvm-heap-size/384106 "2025-12-16T11:26:59Z")
Hi All, I am looking for verification on the optimal JVM Heap size configuration for our production cluster. We are running on physical nodes with 500 GB of RAM each. I have read two conflicting pieces of advice regar… --- ## [Logstash pipeline shutting off/starting order](https://discuss.elastic.co/t/logstash-pipeline-shutting-off-starting-order/385423)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 3\ **Last updated:** [March 12, 2026, 10:09pm UTC](https://discuss.elastic.co/t/logstash-pipeline-shutting-off-starting-order/385423 "2026-03-12T22:09:16Z")
How to force logstash to switch off pipelines in given order? In my setup, I’m often receiving data via http input and distributing those messages among various pipelines based on content, however if I turn the logstash… [Previous page](https://discuss.elastic.co/top.md?page=12&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=14&per_page=50)