# Top

**URL:** https://discuss.elastic.co/top.md?page=16

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 17

---

## [Elasticsearch data node instability and indexing failures when using NAS (shared storage) with separate folders per node](https://discuss.elastic.co/t/elasticsearch-data-node-instability-and-indexing-failures-when-using-nas-shared-storage-with-separate-folders-per-node/385952)

<div class="topic-metadata">

**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\
**Replies:** 3\
**Last updated:** [April 20, 2026, 12:41pm UTC](https://discuss.elastic.co/t/elasticsearch-data-node-instability-and-indexing-failures-when-using-nas-shared-storage-with-separate-folders-per-node/385952 "2026-04-20T12:41:48Z")

</div>

I am facing stability and performance issues in my Elasticsearch cluster and would like to understand if the storage architecture is the root cause. We have multiple Elasticsearch data nodes running on Windows servers. …

---

## [Reducing PVC size on single-node ECK cluster](https://discuss.elastic.co/t/reducing-pvc-size-on-single-node-eck-cluster/384405)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 1\
**Last updated:** [January 7, 2026, 12:22pm UTC](https://discuss.elastic.co/t/reducing-pvc-size-on-single-node-eck-cluster/384405 "2026-01-07T12:22:23Z")

</div>

Hi everyone, I deployed an ECK cluster in a sandbox environment with a single node and a PersistentVolumeClaim of X Gi. I would like to reduce the size of the disk allocated to this node. From my understanding, Kubern…

---

## [Highlighting not working correctly with greek analyzer](https://discuss.elastic.co/t/highlighting-not-working-correctly-with-greek-analyzer/382873)

<div class="topic-metadata">

**Author:** [@epistola](https://discuss.elastic.co/u/epistola)\
**Replies:** 5\
**Last updated:** [November 5, 2025, 8:10am UTC](https://discuss.elastic.co/t/highlighting-not-working-correctly-with-greek-analyzer/382873 "2025-11-05T08:10:31Z")

</div>

Hello everyone, I have a problem with the highlighting in Elasticsearch. I have a field in an index like the following: "skepseis": { "type": "nested", "properties": { "text": { "type": "text", "analyzer": "g…

---

## [The selected trace cannot be found](https://discuss.elastic.co/t/the-selected-trace-cannot-be-found/387491)

<div class="topic-metadata">

**Author:** [@hailinux](https://discuss.elastic.co/u/hailinux)\
**Replies:** 4\
**Last updated:** [July 8, 2026, 9:52am UTC](https://discuss.elastic.co/t/the-selected-trace-cannot-be-found/387491 "2026-07-08T09:52:17Z")

</div>

Help me solve the APM problem The selected trace cannot be found . Now I access the Kibana UI: Observability -\> APM-\>Services -\> name service . so this I see Transactions and error as pictured. Please help me quickl…

---

## [Elasticsearch coordinating node OOM/crash under sustained ingest (60k docs/min) with high shard count (~800)](https://discuss.elastic.co/t/elasticsearch-coordinating-node-oom-crash-under-sustained-ingest-60k-docs-min-with-high-shard-count-800/386708)

<div class="topic-metadata">

**Author:** [@Osmel\_Pillot\_Leyva](https://discuss.elastic.co/u/Osmel_Pillot_Leyva)\
**Replies:** 4\
**Last updated:** [June 9, 2026, 1:32pm UTC](https://discuss.elastic.co/t/elasticsearch-coordinating-node-oom-crash-under-sustained-ingest-60k-docs-min-with-high-shard-count-800/386708 "2026-06-09T13:32:50Z")

</div>

I have an Elasticsearch cluster with 3 master nodes, 1 data node, 1 ingest node, and 1 coordinating node. I also have 1 Kibana instance and 1 Fleet Server. Data ingestion is performed through approximately 12 Elastic Age…

---

## [Edit Distance \> 2 - Is It Really Unconfigurable?](https://discuss.elastic.co/t/edit-distance-2-is-it-really-unconfigurable/383458)

<div class="topic-metadata">

**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\
**Replies:** 3\
**Last updated:** [November 16, 2025, 9:11am UTC](https://discuss.elastic.co/t/edit-distance-2-is-it-really-unconfigurable/383458 "2025-11-16T09:11:08Z")

</div>

I'm facing the same problem mentioned in this thread - I need to use an edit distance greater than 2 for fuzzy searches, but Elasticsearch doesn't seem to support this. I understand the performance concerns with higher …

---

## [Relationship missing between dashboard and visualization](https://discuss.elastic.co/t/relationship-missing-between-dashboard-and-visualization/388389)

<div class="topic-metadata">

**Author:** [@PeterDK](https://discuss.elastic.co/u/PeterDK)\
**Replies:** 1\
**Last updated:** [July 20, 2026, 5:39am UTC](https://discuss.elastic.co/t/relationship-missing-between-dashboard-and-visualization/388389 "2026-07-20T05:39:44Z")

</div>

Hello, I discovered something what seems to be a bug when creating a new dashboard from a visualization. Steps to reproduce: Start from a Saved Discovery Session and click on the "Edit Visualization" on the chart abo…

---

## [Upgrade 8.19.13 and errors starting regarding entitlement](https://discuss.elastic.co/t/upgrade-8-19-13-and-errors-starting-regarding-entitlement/385923)

<div class="topic-metadata">

**Author:** [@Juan\_Carlos\_Sanchez](https://discuss.elastic.co/u/Juan_Carlos_Sanchez)\
**Replies:** 2\
**Last updated:** [April 17, 2026, 7:37pm UTC](https://discuss.elastic.co/t/upgrade-8-19-13-and-errors-starting-regarding-entitlement/385923 "2026-04-17T19:37:07Z")

</div>

Hi, We are facing issue starting the elasticsearch with version 8.19.13 showing this error message: \[2026-04-16T15:15:34,195\]\[INFO \]\[o.e.n.NativeAccess \] Using native vector library; to disable start with -Dorg.…

---

## [Spring WebFlux 7 (Spring Boot 4): NoSuchMethodError in DispatcherHandlerInstrumentation](https://discuss.elastic.co/t/spring-webflux-7-spring-boot-4-nosuchmethoderror-in-dispatcherhandlerinstrumentation/386817)

<div class="topic-metadata">

**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\
**Replies:** 1\
**Last updated:** [June 16, 2026, 5:09am UTC](https://discuss.elastic.co/t/spring-webflux-7-spring-boot-4-nosuchmethoderror-in-dispatcherhandlerinstrumentation/386817 "2026-06-16T05:09:49Z")

</div>

Hi there, When the fix will be released? Looking eagerly for above fix. Current latest build 1.55.6 has been released in April 2nd week. Regards

---

## [Ad-hoc antivirus scan](https://discuss.elastic.co/t/ad-hoc-antivirus-scan/384575)

<div class="topic-metadata">

**Author:** [@i.raisr](https://discuss.elastic.co/u/i.raisr)\
**Replies:** 1\
**Last updated:** [January 16, 2026, 2:24pm UTC](https://discuss.elastic.co/t/ad-hoc-antivirus-scan/384575 "2026-01-16T14:24:30Z")

</div>

Dear, Please could you suggest an efficient approach of using Elastic EDR for ad-hoc file antivirus/malware scanning. We would like to integrate our existing Elastic Security platform with the Document Management System…

---

## [Unable to search data in fields](https://discuss.elastic.co/t/unable-to-search-data-in-fields/385824)

<div class="topic-metadata">

**Author:** [@s1ackspace](https://discuss.elastic.co/u/s1ackspace)\
**Replies:** 4\
**Last updated:** [April 9, 2026, 11:19am UTC](https://discuss.elastic.co/t/unable-to-search-data-in-fields/385824 "2026-04-09T11:19:08Z")

</div>

Hi, I have data in indice parsed with custom pipeline. After reindex that indice i can’t make aggregations (in discover module i see only empty fields) and visualizations from that data however data are still searchable…

---

## [Elasticsearch query timeouts on data stream (50M–170M docs, facets + NOT queries)](https://discuss.elastic.co/t/elasticsearch-query-timeouts-on-data-stream-50m-170m-docs-facets-not-queries/384646)

<div class="topic-metadata">

**Author:** [@Anup\_Kumar](https://discuss.elastic.co/u/Anup_Kumar)\
**Replies:** 4\
**Last updated:** [April 2, 2026, 10:04am UTC](https://discuss.elastic.co/t/elasticsearch-query-timeouts-on-data-stream-50m-170m-docs-facets-not-queries/384646 "2026-04-02T10:04:40Z")

</div>

Hi all, I’m facing Elasticsearch query timeouts for a search workload stored in a data stream (immutable data, bulk indexed historical data). We are using Point-in-Time (PIT) searches for query consistency/pagination. B…

---

## [Creating observability rules - cases](https://discuss.elastic.co/t/creating-observability-rules-cases/387478)

<div class="topic-metadata">

**Author:** [@reports](https://discuss.elastic.co/u/reports)\
**Replies:** 2\
**Last updated:** [July 6, 2026, 8:53am UTC](https://discuss.elastic.co/t/creating-observability-rules-cases/387478 "2026-07-06T08:53:17Z")

</div>

I have created Observability rules in Kibana and integrated the Cases action to enable auto-generated cases. Initially, I faced a limitation where I couldn't customize the case payload to extract critical alert details. …

---

## [Windows - LS 9.4.0 - Unable to update plugins](https://discuss.elastic.co/t/windows-ls-9-4-0-unable-to-update-plugins/386405)

<div class="topic-metadata">

**Author:** [@novaksam](https://discuss.elastic.co/u/novaksam)\
**Replies:** 2\
**Last updated:** [May 21, 2026, 1:41pm UTC](https://discuss.elastic.co/t/windows-ls-9-4-0-unable-to-update-plugins/386405 "2026-05-21T13:41:04Z")

</div>

Is anyone else having issues updating plugins on windows with fresh downloads of logstash? I'm getting the following error: Error Bundler::InstallError, retrying 1/10 Bundler::GenericSystemCallError: There was an error…

---

## [How to get kafka metadata from a confluent kafka topic](https://discuss.elastic.co/t/how-to-get-kafka-metadata-from-a-confluent-kafka-topic/383844)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 2\
**Last updated:** [December 4, 2025, 5:35am UTC](https://discuss.elastic.co/t/how-to-get-kafka-metadata-from-a-confluent-kafka-topic/383844 "2025-12-04T05:35:20Z")

</div>

Hi, I am reading the data using logstash from a confluent kafka topic and I am trying to get the complete kafka metadata including header etc into my data. I have tried the below config but still i am unable to see the …

---

## [Data Extraction Service (tika/openresty) crashes on second container start](https://discuss.elastic.co/t/data-extraction-service-tika-openresty-crashes-on-second-container-start/383519)

<div class="topic-metadata">

**Author:** [@SPRINGPEACHVINH](https://discuss.elastic.co/u/SPRINGPEACHVINH)\
**Replies:** 2\
**Last updated:** [November 28, 2025, 8:50am UTC](https://discuss.elastic.co/t/data-extraction-service-tika-openresty-crashes-on-second-container-start/383519 "2025-11-28T08:50:38Z")

</div>

Hi guys I’m encountering a repeatable issue with the data-extraction-service (0.3.5) when running it via Docker Compose. The service (tika + openresty inside the container) starts fine the first time I bring the stack …

---

## [Kibana Options List Controls](https://discuss.elastic.co/t/kibana-options-list-controls/385080)

<div class="topic-metadata">

**Author:** [@Vignesh2](https://discuss.elastic.co/u/Vignesh2)\
**Replies:** 3\
**Last updated:** [February 22, 2026, 6:17am UTC](https://discuss.elastic.co/t/kibana-options-list-controls/385080 "2026-02-22T06:17:09Z")

</div>

Hi Team, I’m facing an issue with Options List Controls in Kibana dashboards. When the field used in the control has less than 100 unique values, the behavior works as expected. If I type a value in the control search …

---

## ['No operations allowed after connection closed' errors during Filter phase](https://discuss.elastic.co/t/no-operations-allowed-after-connection-closed-errors-during-filter-phase/384139)

<div class="topic-metadata">

**Author:** [@maldoror](https://discuss.elastic.co/u/maldoror)\
**Replies:** 4\
**Last updated:** [December 18, 2025, 11:44am UTC](https://discuss.elastic.co/t/no-operations-allowed-after-connection-closed-errors-during-filter-phase/384139 "2025-12-18T11:44:36Z")

</div>

Hello friends, We are facing a critical issue with our Logstash indexing pipeline during the filtering phase, which executes some very heavy queries on our application DB. Our business application is executing constant…

---

## [Basic license site is broken - register.elastic.co/registration](https://discuss.elastic.co/t/basic-license-site-is-broken-register-elastic-co-registration/387710)

<div class="topic-metadata">

**Author:** [@Adrian\_Beloqui](https://discuss.elastic.co/u/Adrian_Beloqui)\
**Replies:** 2\
**Last updated:** [July 11, 2026, 5:11am UTC](https://discuss.elastic.co/t/basic-license-site-is-broken-register-elastic-co-registration/387710 "2026-07-11T05:11:59Z")

</div>

I am trying to get a new Basic license for our hosted ELK stack with elastic version 6.2.4 but the website Register | Elastic seems to have an issue with the reCAPTHA and doesn't allow me to submit the form. Can you ple…

---

## [Migrate unmanaged index to data stream](https://discuss.elastic.co/t/migrate-unmanaged-index-to-data-stream/387725)

<div class="topic-metadata">

**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\
**Replies:** 2\
**Last updated:** [July 10, 2026, 8:24am UTC](https://discuss.elastic.co/t/migrate-unmanaged-index-to-data-stream/387725 "2026-07-10T08:24:58Z")

</div>

Hi, I have an index that receives a large amount of data. It is currently 250 GB in size (Elasticsearch 9.4.2), and data is continuously being ingested into it. I want to migrate it to a data stream. I also want to ap…

---

## [Kibana Alerts - Is there a way to schedule rule execution at a specific time daily?](https://discuss.elastic.co/t/kibana-alerts-is-there-a-way-to-schedule-rule-execution-at-a-specific-time-daily/386822)

<div class="topic-metadata">

**Author:** [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Replies:** 2\
**Last updated:** [June 12, 2026, 1:27pm UTC](https://discuss.elastic.co/t/kibana-alerts-is-there-a-way-to-schedule-rule-execution-at-a-specific-time-daily/386822 "2026-06-12T13:27:51Z")

</div>

Hello Community, I am working with Kibana Alerting rules and have a use case where I need an alert to execute at a fixed time every day (e.g., every day at 03:00 UTC), rather than on a recurring interval like "every 1 h…

---

## [Fleet isn't loading](https://discuss.elastic.co/t/fleet-isnt-loading/384946)

<div class="topic-metadata">

**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\
**Replies:** 2\
**Last updated:** [February 19, 2026, 2:59pm UTC](https://discuss.elastic.co/t/fleet-isnt-loading/384946 "2026-02-19T14:59:34Z")

</div>

Fleet takes too much time to load It worked when we opened the internet access to the machine, so we have made a firewall rule to go to elastic.co However, the problem still resides What should I look for or how…

---

## [Best practice for re-routed datastream and index template mappings](https://discuss.elastic.co/t/best-practice-for-re-routed-datastream-and-index-template-mappings/385729)

<div class="topic-metadata">

**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\
**Replies:** 2\
**Last updated:** [April 1, 2026, 5:26pm UTC](https://discuss.elastic.co/t/best-practice-for-re-routed-datastream-and-index-template-mappings/385729 "2026-04-01T17:26:03Z")

</div>

Hi community, I'm wondering what is the best practice when it comes to rerouted datastreams from log integrations using fleet. For example default datastream is logs-docker.container\_logs-default and it's rerouted to lo…

---

## [EDOT running in Gateway mode - "sending queue is full"](https://discuss.elastic.co/t/edot-running-in-gateway-mode-sending-queue-is-full/384639)

<div class="topic-metadata">

**Author:** [@kazagz](https://discuss.elastic.co/u/kazagz)\
**Replies:** 1\
**Last updated:** [January 27, 2026, 7:32am UTC](https://discuss.elastic.co/t/edot-running-in-gateway-mode-sending-queue-is-full/384639 "2026-01-27T07:32:43Z")

</div>

When using recommended elastic/elastic-agent image running in OTEL Gateway mode it shows errors when ingesting 10m and 60m aggregated data. Example setup Start Elastic server using elasticsearch/elasticsearch:9.2.3 D…

---

## [Investigate high cpu/rogue task on certain shard/node](https://discuss.elastic.co/t/investigate-high-cpu-rogue-task-on-certain-shard-node/390956)

<div class="topic-metadata">

**Author:** [@dna01](https://discuss.elastic.co/u/dna01)\
**Replies:** 5\
**Last updated:** [October 15, 2026, 1:23pm UTC](https://discuss.elastic.co/t/investigate-high-cpu-rogue-task-on-certain-shard-node/390956 "2026-10-15T13:23:58Z")

</div>

for some reason, some nodes/shards doing more "stuff" than others and thus consuming more cpu. here is setup ES deployed in kubernetes with 40+ data nodes (with different specs) ES version 8.10.4 the nodes are partiti…

---

## [Cluster name is logged as ${sys:es.logs.cluster\_name}](https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225)

<div class="topic-metadata">

**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\
**Replies:** 2\
**Last updated:** [May 14, 2026, 1:45pm UTC](https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225 "2026-05-14T13:45:35Z")

</div>

Hello we are upgrading our Elastic clusters to 9.2.5. I upgraded my monitoring cluster from 8.19.4 to 8.19.11, since this upgrade the cluster\_name in the elasticsearch server logs is logged as ${sys:es.logs.cluster\_nam…

---

## [Kibana dashboard elements initially not rendering the contents](https://discuss.elastic.co/t/kibana-dashboard-elements-initially-not-rendering-the-contents/389415)

<div class="topic-metadata">

**Author:** [@TheNewGuy123](https://discuss.elastic.co/u/TheNewGuy123)\
**Replies:** 3\
**Last updated:** [August 12, 2026, 1:40pm UTC](https://discuss.elastic.co/t/kibana-dashboard-elements-initially-not-rendering-the-contents/389415 "2026-08-12T13:40:29Z")

</div>

I have cloud hosted Elasticsearch solution. After updating from 9.2.8 to 9.4.3 I have issues when loading the data into Kibana dashboard. Before updating all dashboards loaded the data and rendered the visualisation with…

---

## [Polar encircling geo\_shape geometry](https://discuss.elastic.co/t/polar-encircling-geo-shape-geometry/384919)

<div class="topic-metadata">

**Author:** [@jpolchlo](https://discuss.elastic.co/u/jpolchlo)\
**Replies:** 1\
**Last updated:** [February 5, 2026, 11:25am UTC](https://discuss.elastic.co/t/polar-encircling-geo-shape-geometry/384919 "2026-02-05T11:25:23Z")

</div>

I’ve been looking for an answer to this around the internet, but I want to get some clarity before sinking time into it. The question is whether geo\_shape geometry properly handles polar-encircling geometries. I haven’…

---

## [Elasticsearch Integration Dashboard Data not Loading](https://discuss.elastic.co/t/elasticsearch-integration-dashboard-data-not-loading/383747)

<div class="topic-metadata">

**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\
**Replies:** 4\
**Last updated:** [December 4, 2025, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-dashboard-data-not-loading/383747 "2025-12-04T12:57:42Z")

</div>

I have the Elasticsearch integration in Fleet enabled with metrics and logs; however, the dashboard isn’t loading due to several errors related to some fields not being present

---

## [Migrating from Elastic NEST v7 to .NET Elastic Client v8: Index alias search](https://discuss.elastic.co/t/migrating-from-elastic-nest-v7-to-net-elastic-client-v8-index-alias-search/383574)

<div class="topic-metadata">

**Author:** [@zoey\_L](https://discuss.elastic.co/u/zoey_L)\
**Replies:** 4\
**Last updated:** [November 21, 2025, 4:28pm UTC](https://discuss.elastic.co/t/migrating-from-elastic-nest-v7-to-net-elastic-client-v8-index-alias-search/383574 "2025-11-21T16:28:42Z")

</div>

while migrating .net package from NEST to Elastic.Clients.Elasticsearch. Observed one issue of double search indexes if they have the same alias. We have a time rollover index created once a week. every week, there wil…

---

## [Security update ESA-2026-08](https://discuss.elastic.co/t/security-update-esa-2026-08/388361)

<div class="topic-metadata">

**Author:** [@Peter\_Misovic](https://discuss.elastic.co/u/Peter_Misovic)\
**Replies:** 1\
**Last updated:** [July 15, 2026, 12:36pm UTC](https://discuss.elastic.co/t/security-update-esa-2026-08/388361 "2026-07-15T12:36:46Z")

</div>

Hello, please, I currently have ELK v 9.2.2, Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-08) says "The issue is resolved in version 8.19.10, 9.1.10, 9.2.4.", please, what about 9.4.2 or 9.4.3? Shall I upgra…

---

## [Some prebuilt security rules have missing fields](https://discuss.elastic.co/t/some-prebuilt-security-rules-have-missing-fields/386132)

<div class="topic-metadata">

**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\
**Replies:** 1\
**Last updated:** [May 3, 2026, 1:54pm UTC](https://discuss.elastic.co/t/some-prebuilt-security-rules-have-missing-fields/386132 "2026-05-03T13:54:18Z")

</div>

As the title suggests, some prebuilt security rules are failing due to some fields not being present in the Elastic Defend telemetry. From this example, the rule logic has process.command\_line , However, the file teleme…

---

## [Self-managed and air-gapped cluster: How to bypass self-signed certificate validation or configure custom endpoints in kibana.yml?](https://discuss.elastic.co/t/self-managed-and-air-gapped-cluster-how-to-bypass-self-signed-certificate-validation-or-configure-custom-endpoints-in-kibana-yml/389266)

<div class="topic-metadata">

**Author:** [@Osmel\_Pillot\_Leyva](https://discuss.elastic.co/u/Osmel_Pillot_Leyva)\
**Replies:** 2\
**Last updated:** [August 12, 2026, 7:55pm UTC](https://discuss.elastic.co/t/self-managed-and-air-gapped-cluster-how-to-bypass-self-signed-certificate-validation-or-configure-custom-endpoints-in-kibana-yml/389266 "2026-08-12T19:55:01Z")

</div>

Hi everyone, I manage a self-managed, completely air-gapped Elastic cluster in an isolated network environment with no internet access. In our corporate infrastructure, we have an internal ERP and EMS running with self…

---

## [Filebeat Dynamic Output File Path Configuration Issue](https://discuss.elastic.co/t/filebeat-dynamic-output-file-path-configuration-issue/382871)

<div class="topic-metadata">

**Author:** [@jiwanging](https://discuss.elastic.co/u/jiwanging)\
**Replies:** 2\
**Last updated:** [November 4, 2025, 8:57pm UTC](https://discuss.elastic.co/t/filebeat-dynamic-output-file-path-configuration-issue/382871 "2025-11-04T20:57:09Z")

</div>

I'm trying to configure Filebeat to dynamically output files to paths and filenames that map to the original source paths and filenames. For example: Source path to collect: /root/filebeat/log/source\_log/\*.log Desired …

---

## [Multi ES Clusters vs single Fleet Service](https://discuss.elastic.co/t/multi-es-clusters-vs-single-fleet-service/385455)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 5\
**Last updated:** [March 15, 2026, 3:40pm UTC](https://discuss.elastic.co/t/multi-es-clusters-vs-single-fleet-service/385455 "2026-03-15T15:40:21Z")

</div>

Hi, Currently in progress of migrating from standalone beats to Fleet Agent Policies. Currently got a Custom Application Observability production ES cluster and a remote monitoring ES cluster, both Air Gapped v.8.19 cl…

---

## [Autodiscover with synthetics](https://discuss.elastic.co/t/autodiscover-with-synthetics/387229)

<div class="topic-metadata">

**Author:** [@Cristian\_Pereyra](https://discuss.elastic.co/u/Cristian_Pereyra)\
**Replies:** 1\
**Last updated:** [June 24, 2026, 1:38am UTC](https://discuss.elastic.co/t/autodiscover-with-synthetics/387229 "2026-06-24T01:38:05Z")

</div>

Hello everyone. The topic that brings us here is Heartbeat autodiscover. We have many deployments that are going to be modified and we need to automate the detection and creation of monitors. The problem that is added …

---

## [Define proxy for AI connector](https://discuss.elastic.co/t/define-proxy-for-ai-connector/386278)

<div class="topic-metadata">

**Author:** [@hairless\_mess](https://discuss.elastic.co/u/hairless_mess)\
**Replies:** 1\
**Last updated:** [May 11, 2026, 1:44pm UTC](https://discuss.elastic.co/t/define-proxy-for-ai-connector/386278 "2026-05-11T13:44:05Z")

</div>

Hi everyone! I'm trying to add an AI connector and I'm running into a connection problem because the connector can't reach the AI solution as it needs to pass through our proxy. Is there a way to add a proxy configuratio…

---

## [Confused by --fleet-server-es-cert\* flags](https://discuss.elastic.co/t/confused-by-fleet-server-es-cert-flags/383546)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 3\
**Last updated:** [November 20, 2025, 3:48pm UTC](https://discuss.elastic.co/t/confused-by-fleet-server-es-cert-flags/383546 "2025-11-20T15:48:10Z")

</div>

So can someone clarify for me how these flags are used: --fleet-server-es-cert\*, --fleet-server-es-ca, --fleet-server-client-auth ? For example, let’s say I ran this command on my linux server 192.168.0.2 to turn it int…

---

## [Backup deployment during upgrade](https://discuss.elastic.co/t/backup-deployment-during-upgrade/385591)

<div class="topic-metadata">

**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\
**Replies:** 0\
**Last updated:** [March 24, 2026, 10:33am UTC](https://discuss.elastic.co/t/backup-deployment-during-upgrade/385591 "2026-03-24T10:33:29Z")

</div>

We are using ech for ecommerce search application. We are planning to upgrade from 8.9.0 to 8.19.x. Before upgrading, should we already create the backup deployment with latest snapshot, or is it possible to create a ne…

---

## [Optimizing index template for logs from Kubernetes workloads](https://discuss.elastic.co/t/optimizing-index-template-for-logs-from-kubernetes-workloads/386421)

<div class="topic-metadata">

**Author:** [@Shammi\_ST](https://discuss.elastic.co/u/Shammi_ST)\
**Replies:** 2\
**Last updated:** [May 25, 2026, 2:13pm UTC](https://discuss.elastic.co/t/optimizing-index-template-for-logs-from-kubernetes-workloads/386421 "2026-05-25T14:13:29Z")

</div>

Hi all, Im having the following setup for receiving logs to my Kibana from GKE hosted workloads: Fluentbit \> Elasticsearch \> Kibana My Elasticsearch and Kibana are running on one single server so I have a single node s…

---

## [Elastic Agent Logstash data streams not working](https://discuss.elastic.co/t/elastic-agent-logstash-data-streams-not-working/385925)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 2\
**Last updated:** [April 17, 2026, 11:05am UTC](https://discuss.elastic.co/t/elastic-agent-logstash-data-streams-not-working/385925 "2026-04-17T11:05:28Z")

</div>

This is my logstash.yml else if "apps" in \[tags\] { mutate { # replace =\> { "\[@metadata\]\[index\_prefix\]" =\> "applications-%{+YYYY.MM}" } add\_field =\> { "\[data\_stream\]\[type\]" =\> "logs" "\[d…

---

## [Sizing Guide](https://discuss.elastic.co/t/sizing-guide/388811)

<div class="topic-metadata">

**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\
**Replies:** 1\
**Last updated:** [July 27, 2026, 12:07pm UTC](https://discuss.elastic.co/t/sizing-guide/388811 "2026-07-27T12:07:42Z")

</div>

I need an official documentation or any official way suggesting a rough log consumption estimate Gb/day for list of data sources --like i have list which include firewall - count 10 - eps?-byte size? switch - count 5 -…

---

## [Method not found java.util.Set org.springframework.http.HttpHeaders.entrySet()](https://discuss.elastic.co/t/method-not-found-java-util-set-org-springframework-http-httpheaders-entryset/387412)

<div class="topic-metadata">

**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\
**Replies:** 1\
**Last updated:** [July 1, 2026, 7:27am UTC](https://discuss.elastic.co/t/method-not-found-java-util-set-org-springframework-http-httpheaders-entryset/387412 "2026-07-01T07:27:14Z")

</div>

This message comes here because while creating issue, it is recommended to discuss here before creating an issue in github. I am using 1.56.0 java apm agent which is supporting springboot 4.0 and spring webflux on expe…

---

## [Kubernetes CRDs for index templates / datastreams with ECK?](https://discuss.elastic.co/t/kubernetes-crds-for-index-templates-datastreams-with-eck/384085)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 1\
**Last updated:** [December 31, 2025, 3:19pm UTC](https://discuss.elastic.co/t/kubernetes-crds-for-index-templates-datastreams-with-eck/384085 "2025-12-31T15:19:59Z")

</div>

Hi all, I’m deploying Elastic via ECK and want to manage index templates / datastreams as code in Kubernetes manifests (Helm / GitOps). I checked the ECK API docs but didn’t see any CRDs for this (or I missed it). Que…

---

## [Moving index using custom attribute](https://discuss.elastic.co/t/moving-index-using-custom-attribute/386492)

<div class="topic-metadata">

**Author:** [@doniyey](https://discuss.elastic.co/u/doniyey)\
**Replies:** 3\
**Last updated:** [May 26, 2026, 7:59am UTC](https://discuss.elastic.co/t/moving-index-using-custom-attribute/386492 "2026-05-26T07:59:27Z")

</div>

Hello everyone, I am working on a project with elasticsearch 9.4.1, where the goal is to move a specific data stream (ds) to a dedicated cold node for that data stream. Here are the nodes I have prepared: ip …

---

## [ELK final output](https://discuss.elastic.co/t/elk-final-output/384962)

<div class="topic-metadata">

**Author:** [@scorpoin82](https://discuss.elastic.co/u/scorpoin82)\
**Replies:** 3\
**Last updated:** [February 16, 2026, 2:59am UTC](https://discuss.elastic.co/t/elk-final-output/384962 "2026-02-16T02:59:34Z")

</div>

Hello community, I have setup a small ELK cluster with 3 Master nodes , 3 Data Nodes , 3 Logstash Nodes and 1 Kibana Node. 3 Logstash nodes are behind F5 load balancer and those logstash connected with data nodes. Now…

---

## [User access privilege on specific dashboard](https://discuss.elastic.co/t/user-access-privilege-on-specific-dashboard/383007)

<div class="topic-metadata">

**Author:** [@Kumar\_6](https://discuss.elastic.co/u/Kumar_6)\
**Replies:** 3\
**Last updated:** [October 27, 2025, 10:04am UTC](https://discuss.elastic.co/t/user-access-privilege-on-specific-dashboard/383007 "2025-10-27T10:04:38Z")

</div>

Hi Team, I would like to know if this feature is available in Elastic Kibana. I have four dashboards within a single space and want to provide access to different users. For example, one user should have access only to …

---

## [Fleet Server - disable certificate verification](https://discuss.elastic.co/t/fleet-server-disable-certificate-verification/389825)

<div class="topic-metadata">

**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\
**Replies:** 1\
**Last updated:** [August 20, 2026, 3:07pm UTC](https://discuss.elastic.co/t/fleet-server-disable-certificate-verification/389825 "2026-08-20T15:07:59Z")

</div>

Hi How can I disable cert verification on integrations running on Fleet Server? The agent (fleet server) is Fleet Managed, running as a service on Linux. All agents are running well, sending logs and metrics, however, …

---

## [UX improvements (Security app)](https://discuss.elastic.co/t/ux-improvements-security-app/385898)

<div class="topic-metadata">

**Author:** [@proclick](https://discuss.elastic.co/u/proclick)\
**Replies:** 1\
**Last updated:** [April 16, 2026, 2:58am UTC](https://discuss.elastic.co/t/ux-improvements-security-app/385898 "2026-04-16T02:58:50Z")

</div>

Hey Team, are there planned any updates regarding security alerts managing? Will it be possible to add a Note as a bulk action for the few similar cases as it is possible to change alerts' status and closure reason now…

---

## [Website search not returning consistent results](https://discuss.elastic.co/t/website-search-not-returning-consistent-results/383256)

<div class="topic-metadata">

**Author:** [@joeroot](https://discuss.elastic.co/u/joeroot)\
**Replies:** 2\
**Last updated:** [November 6, 2025, 9:47am UTC](https://discuss.elastic.co/t/website-search-not-returning-consistent-results/383256 "2025-11-06T09:47:50Z")

</div>

Hi everyone, I’m running a restaurant-based website that focuses on Texas Roadhouse menu updates, reviews, and nearby location listings. I’ve implemented Elasticsearch to power the internal search function on my site so…

[Previous page](https://discuss.elastic.co/top.md?page=15&per_page=50)

[Next page](https://discuss.elastic.co/top.md?page=17&per_page=50)
