# Top **URL:** https://discuss.elastic.co/top.md?page=18 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 19 --- ## [Gmail oauth disabled](https://discuss.elastic.co/t/gmail-oauth-disabled/384565)
**Author:** [@Jaydeep\_Rathore1](https://discuss.elastic.co/u/Jaydeep_Rathore1)\ **Replies:** 0\ **Last updated:** [January 15, 2026, 6:29pm UTC](https://discuss.elastic.co/t/gmail-oauth-disabled/384565 "2026-01-15T18:29:37Z")
my gmail account was disabled by google, and i used to login using oauth only. now i dont have access to my gmail, and i am not able to login to elastic cloud console. any idea what i should do? there is not chance of ge… --- ## [Defend for containers integration failed on OpenShift environment](https://discuss.elastic.co/t/defend-for-containers-integration-failed-on-openshift-environment/387356)
**Author:** [@Mohamed\_Nada](https://discuss.elastic.co/u/Mohamed_Nada)\ **Replies:** 1\ **Last updated:** [June 27, 2026, 2:08am UTC](https://discuss.elastic.co/t/defend-for-containers-integration-failed-on-openshift-environment/387356 "2026-06-27T02:08:21Z")
kernel verifier rejection we are hitting with the Defend for Containers (D4C) integration. We are deploying Elastic Agent (9.4.2) via Fleet on an OpenShift cluster to utilize eBPF-based container runtime security and ac… --- ## [Duplicate messages observed in Kafka when using Filebeat with disk queue](https://discuss.elastic.co/t/duplicate-messages-observed-in-kafka-when-using-filebeat-with-disk-queue/385693)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 1\ **Last updated:** [March 30, 2026, 1:38pm UTC](https://discuss.elastic.co/t/duplicate-messages-observed-in-kafka-when-using-filebeat-with-disk-queue/385693 "2026-03-30T13:38:46Z")
We are observing duplicate messages being published to Kafka from Filebeat, even when the Kafka broker is up and stable. The issue occurs while using the disk queue (queue.disk ) configuration Kafka Output Configuration… --- ## [Choppy graphs with APM 8.x](https://discuss.elastic.co/t/choppy-graphs-with-apm-8-x/384590)
**Author:** [@Alex-T](https://discuss.elastic.co/u/Alex-T)\ **Replies:** 1\ **Last updated:** [January 19, 2026, 4:23pm UTC](https://discuss.elastic.co/t/choppy-graphs-with-apm-8-x/384590 "2026-01-19T16:23:56Z")
Not sure if this is just a very delayed duplicate of Dropped unsampled transactions in \>= 8.x poses a problem - but I’ve only just upgraded to version 8 of the various stack components. The thoughput/latency graphs show… --- ## [.../config/certs/ca/ca.crt : file does not exist](https://discuss.elastic.co/t/config-certs-ca-ca-crt-file-does-not-exist/389678)
**Author:** [@rik](https://discuss.elastic.co/u/rik)\ **Replies:** 2\ **Last updated:** [August 16, 2026, 5:37pm UTC](https://discuss.elastic.co/t/config-certs-ca-ca-crt-file-does-not-exist/389678 "2026-08-16T17:37:39Z")
I think I've followed the instructions here Install Elasticsearch with Docker | Elastic Docs and produced a docker-compose.yml file (attached below) that's right. But when I try docker compose up i get these errors: {"… --- ## [Advanced Tab is missing in Streams Page in 9.5.0](https://discuss.elastic.co/t/advanced-tab-is-missing-in-streams-page-in-9-5-0/389476)
**Author:** [@Suren\_R](https://discuss.elastic.co/u/Suren_R)\ **Replies:** 2\ **Last updated:** [August 13, 2026, 3:10pm UTC](https://discuss.elastic.co/t/advanced-tab-is-missing-in-streams-page-in-9-5-0/389476 "2026-08-13T15:10:16Z")
After upgrading to 9.5.1, I can no longer see Advanced Tab in Streams page. This section allowed to easily configure the number of shards and refresh interval of backing indices without having to edit JSON settings in in… --- ## [Best Practice for Keeping Separate DC and DR Elasticsearch Open-Source Clusters in Sync](https://discuss.elastic.co/t/best-practice-for-keeping-separate-dc-and-dr-elasticsearch-open-source-clusters-in-sync/386887)
**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\ **Replies:** 2\ **Last updated:** [June 17, 2026, 2:26pm UTC](https://discuss.elastic.co/t/best-practice-for-keeping-separate-dc-and-dr-elasticsearch-open-source-clusters-in-sync/386887 "2026-06-17T14:26:15Z")
Hi Team, We have two separate Elasticsearch Open-Source clusters running on Linux servers: DC Cluster 6 nodes 3 Dedicated Master nodes 3 Data nodes Active production cluster DR Cluster 6 nodes 3 Dedicated Master… --- ## [VMware Vsphere Integration - Tags](https://discuss.elastic.co/t/vmware-vsphere-integration-tags/385193)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [February 24, 2026, 9:17pm UTC](https://discuss.elastic.co/t/vmware-vsphere-integration-tags/385193 "2026-02-24T21:17:05Z")
Hello, has anyone using VMware vSphere integration gotten tags from VMs? It seems like NewRelic can grab custom tags from vSphere: https://docs.newrelic.com/install/vsphere/ Background: Many admins use custom tags on V… --- ## [Pinning and sorting in Kibana - volatile?](https://discuss.elastic.co/t/pinning-and-sorting-in-kibana-volatile/384051)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 4\ **Last updated:** [December 17, 2025, 11:19am UTC](https://discuss.elastic.co/t/pinning-and-sorting-in-kibana-volatile/384051 "2025-12-17T11:19:07Z")
Dear community, my colleagues use in Kibana the feature to ping fields and sort columns. They tell me, it works well for a few days, but then the sorting and pinning gets lost. The wish is to do it once (it is quite so… --- ## [HELP: Disable "Help Us Improve Elastic" Pop-Up on Kibana Visualizations](https://discuss.elastic.co/t/help-disable-help-us-improve-elastic-pop-up-on-kibana-visualizations/388990)
**Author:** [@dan\_walker](https://discuss.elastic.co/u/dan_walker)\ **Replies:** 1\ **Last updated:** [August 4, 2026, 5:58pm UTC](https://discuss.elastic.co/t/help-disable-help-us-improve-elastic-pop-up-on-kibana-visualizations/388990 "2026-08-04T17:58:41Z")
Is there a way to disable these "Help Us Improve Elastic" pop-ups in Kibana? We embed these views in reports which makes the pop-up un-clickable by end-users. They block vital information in the chart. --- ## [EDOT otel collector not working on read-only filesystem](https://discuss.elastic.co/t/edot-otel-collector-not-working-on-read-only-filesystem/385897)
**Author:** [@Jaybee18](https://discuss.elastic.co/u/Jaybee18)\ **Replies:** 1\ **Last updated:** [May 5, 2026, 11:10am UTC](https://discuss.elastic.co/t/edot-otel-collector-not-working-on-read-only-filesystem/385897 "2026-05-05T11:10:54Z")
Hello, we want to deploy the elastic agent (or rather the EDOT collector) in otel mode in our cluster but with a read-only root filesystem. It seems that this is currently not possible. We get the following error: fail… --- ## [Recoverability from node replacement on a 2-node cluster](https://discuss.elastic.co/t/recoverability-from-node-replacement-on-a-2-node-cluster/384685)
**Author:** [@crazyzhou](https://discuss.elastic.co/u/crazyzhou)\ **Replies:** 3\ **Last updated:** [January 26, 2026, 10:32am UTC](https://discuss.elastic.co/t/recoverability-from-node-replacement-on-a-2-node-cluster/384685 "2026-01-26T10:32:57Z")
We are using eck-operator and running Elasticsearch cluster on Kubernetes. We have a 3 master-eligible nodes and several worker nodes in the cluster. In the case for running the cluster on 2 physical nodes, if a node go… --- ## [Kibana pod won't start with fleet enabled in hyphenated namespace](https://discuss.elastic.co/t/kibana-pod-wont-start-with-fleet-enabled-in-hyphenated-namespace/382863)
**Author:** [@smashley](https://discuss.elastic.co/u/smashley)\ **Replies:** 3\ **Last updated:** [October 25, 2025, 2:02am UTC](https://discuss.elastic.co/t/kibana-pod-wont-start-with-fleet-enabled-in-hyphenated-namespace/382863 "2025-10-25T02:02:12Z")
I have an existing ES cluster for logging/SIEM and wish to enable fleet/agent. The cluster is deployed via ECK on kubernetes in namespace ‘elasticsearch-enterprise’ to differentiate it from our basic licensed clusters. T… --- ## [Elatic fleet custom fields to Elastic Defend](https://discuss.elastic.co/t/elatic-fleet-custom-fields-to-elastic-defend/384794)
**Author:** [@GyciakasGh0st](https://discuss.elastic.co/u/GyciakasGh0st)\ **Replies:** 1\ **Last updated:** [January 29, 2026, 1:26pm UTC](https://discuss.elastic.co/t/elatic-fleet-custom-fields-to-elastic-defend/384794 "2026-01-29T13:26:57Z")
Hi, I have the issue. For my elastic fleet policy in settings i seted two custom fields. For all other integrations documents these fields appearing during ingest. But only for elastic defend these two custom fields … --- ## [Elastic self manage / architecture](https://discuss.elastic.co/t/elastic-self-manage-architecture/384856)
**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\ **Replies:** 2\ **Last updated:** [February 3, 2026, 11:27am UTC](https://discuss.elastic.co/t/elastic-self-manage-architecture/384856 "2026-02-03T11:27:46Z")
Hello everyone ! i am very new to elastic and while going through the documentation i was not able to find somethings ,so if possible help me understand these and also provide the documentation link so i can verify (in … --- ## [Issues with mapping conflicts at scale](https://discuss.elastic.co/t/issues-with-mapping-conflicts-at-scale/384780)
**Author:** [@logalicious](https://discuss.elastic.co/u/logalicious)\ **Replies:** 2\ **Last updated:** [January 29, 2026, 4:59pm UTC](https://discuss.elastic.co/t/issues-with-mapping-conflicts-at-scale/384780 "2026-01-29T16:59:28Z")
We ingest data with Elastic’s integrations. What we have found over the years is that Elastic will release an integration and make changes to the field mappings over time. This is understandable, but we eventually run in… --- ## [AbuseCH integration issue](https://discuss.elastic.co/t/abusech-integration-issue/385076)
**Author:** [@maryam\_naeem](https://discuss.elastic.co/u/maryam_naeem)\ **Replies:** 3\ **Last updated:** [February 17, 2026, 4:29pm UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076 "2026-02-17T16:29:52Z")
I am using elastic basic plan , but i have a problem being encountered whenever i integrate abusech integration v1.25.0 , i cant see any datastream or data indices , which means the data is not flowing , when i researc… --- ## [Cant close alerts using the api](https://discuss.elastic.co/t/cant-close-alerts-using-the-api/388605)
**Author:** [@Shahar\_Argov](https://discuss.elastic.co/u/Shahar_Argov)\ **Replies:** 1\ **Last updated:** [July 26, 2026, 4:22am UTC](https://discuss.elastic.co/t/cant-close-alerts-using-the-api/388605 "2026-07-26T04:22:09Z")
hi there, we are using kibana security alerts and came by an error. we were trying to use the kibana api to close security alerts using workflow automation. about 10 seconds after the run is started, we get the follow… --- ## [TLS SANs not applied to Logstash custom service certificate in ECK](https://discuss.elastic.co/t/tls-sans-not-applied-to-logstash-custom-service-certificate-in-eck/384148)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 1\ **Last updated:** [December 31, 2025, 3:12pm UTC](https://discuss.elastic.co/t/tls-sans-not-applied-to-logstash-custom-service-certificate-in-eck/384148 "2025-12-31T15:12:49Z")
Context I have filebeat installed on a VM and I’m trying to send logs to a logstash instance deployed on a K3S cluster. Description of the issue When configuring a custom Logstash service with selfSignedCertificate and s… --- ## [Issue Enable SASL Authentication for Kafka Output in Filebeat Configuration](https://discuss.elastic.co/t/issue-enable-sasl-authentication-for-kafka-output-in-filebeat-configuration/382827)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 1\ **Last updated:** [October 20, 2025, 7:00am UTC](https://discuss.elastic.co/t/issue-enable-sasl-authentication-for-kafka-output-in-filebeat-configuration/382827 "2025-10-20T07:00:06Z")
output.kafka: hosts: \["10.42.41.55:19094"\] topic: 'npc-raw-msg' key: '%{\[UUID\]}' codec.format: string: '%{\[message\]}' partition.round\_robin: reachable\_only: false required\_acks: 1 compression: gzip max\_message\_… --- ## [Configuring Elastic Agent to trust Fleet Server's certificate (eck-stack Helm Chart)](https://discuss.elastic.co/t/configuring-elastic-agent-to-trust-fleet-servers-certificate-eck-stack-helm-chart/382893)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 0\ **Last updated:** [October 22, 2025, 2:55pm UTC](https://discuss.elastic.co/t/configuring-elastic-agent-to-trust-fleet-servers-certificate-eck-stack-helm-chart/382893 "2025-10-22T14:55:44Z")
I deployed eck-operator and I’m deploying eck-stack via the helm chart eck-stack-0.16.0 I’m getting an error in Elastic Agent logs : {"log.level":"error","@timestamp":"2025-10-22T13:11:03.233Z","log.origin":{"function"… --- ## [Truncate a Mustache variable in an Alerting rule action (e.g. limit a long text field to N words)?](https://discuss.elastic.co/t/truncate-a-mustache-variable-in-an-alerting-rule-action-e-g-limit-a-long-text-field-to-n-words/389290)
**Author:** [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Replies:** 2\ **Last updated:** [August 13, 2026, 5:23am UTC](https://discuss.elastic.co/t/truncate-a-mustache-variable-in-an-alerting-rule-action-e-g-limit-a-long-text-field-to-n-words/389290 "2026-08-13T05:23:43Z")
Hello Team, Kibana version: 9.x We have a rule (Elasticsearch query rule type) that runs every few minutes against an index of banking transaction logs. When it matches, the action is an Index connector that writes a s… --- ## [Application Reads on which Cluster](https://discuss.elastic.co/t/application-reads-on-which-cluster/383368)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 2\ **Last updated:** [November 13, 2025, 1:55pm UTC](https://discuss.elastic.co/t/application-reads-on-which-cluster/383368 "2025-11-13T13:55:30Z")
Team, Looking for a right metric to determine which cluster is taking read traffic. We have 2 clusters for redundancy at anytime only one cluster will take read traffic anc both takes write traffic. I have been playing… --- ## [PagerDuty connector action breaks on \\n present in any data inserted with Mustache in custom\_details section](https://discuss.elastic.co/t/pagerduty-connector-action-breaks-on-n-present-in-any-data-inserted-with-mustache-in-custom-details-section/382806)
**Author:** [@tofijak](https://discuss.elastic.co/u/tofijak)\ **Replies:** 2\ **Last updated:** [October 21, 2025, 1:27pm UTC](https://discuss.elastic.co/t/pagerduty-connector-action-breaks-on-n-present-in-any-data-inserted-with-mustache-in-custom-details-section/382806 "2025-10-21T13:27:06Z")
Hi, We are using the PagerDuty connector and have a rule that triggers on any error logs. We want to be able to pass the errors messages in the custom\_details attribute, which is required to valid JSON. This is what we… --- ## [Elastic certificate password](https://discuss.elastic.co/t/elastic-certificate-password/386883)
**Author:** [@Hamda\_A](https://discuss.elastic.co/u/Hamda_A)\ **Replies:** 3\ **Last updated:** [July 1, 2026, 1:29pm UTC](https://discuss.elastic.co/t/elastic-certificate-password/386883 "2026-07-01T13:29:07Z")
Hello, Our Elasticsearch cluster certificates have expired, and we generated a new certificate authority and elastic certificate without a password. After uploading the new certificate to the different nodes and trying … --- ## [Logstash elastic integration](https://discuss.elastic.co/t/logstash-elastic-integration/383926)
**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Replies:** 3\ **Last updated:** [December 9, 2025, 4:29pm UTC](https://discuss.elastic.co/t/logstash-elastic-integration/383926 "2025-12-09T16:29:54Z")
Hello, I make use of Elastic Fleet. I configured a logstash output for several integrations. The logstash pipeline contains the elastic\_integration filter, so elastic ingest pipelines are also executed by logstash. I a… --- ## [Traceparent with Spring-ai from Github Copilot](https://discuss.elastic.co/t/traceparent-with-spring-ai-from-github-copilot/389953)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 1\ **Last updated:** [September 1, 2026, 1:19pm UTC](https://discuss.elastic.co/t/traceparent-with-spring-ai-from-github-copilot/389953 "2026-09-01T13:19:36Z")
Kibana version: 8.19.17 Elasticsearch version: 8.19.17 APM Server version: 8.19.17 APM Agent language and version: Java, 1.56.0 Browser version: Chrome Original install method (e.g. download page, yum, deb, from so… --- ## [Warm and cold requirements](https://discuss.elastic.co/t/warm-and-cold-requirements/385912)
**Author:** [@Ivan\_Hhero](https://discuss.elastic.co/u/Ivan_Hhero)\ **Replies:** 1\ **Last updated:** [May 2, 2026, 12:50am UTC](https://discuss.elastic.co/t/warm-and-cold-requirements/385912 "2026-05-02T00:50:54Z")
Hello, I am thinking about using ECE. In the past, the Warm and Cold tiers required a 64x multiplier (1GB RAM to 64GB Storage). However, if I want to use 25TB or 50TB for an instance, I would need 384GB or 768GB of RAM,… --- ## [Elasticsearch Sometimes Returns Incomplete Search Results From My Website Even Though the Documents Are Indexed](https://discuss.elastic.co/t/elasticsearch-sometimes-returns-incomplete-search-results-from-my-website-even-though-the-documents-are-indexed/390803)
**Author:** [@joeroot](https://discuss.elastic.co/u/joeroot)\ **Replies:** 3\ **Last updated:** [October 5, 2026, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-sometimes-returns-incomplete-search-results-from-my-website-even-though-the-documents-are-indexed/390803 "2026-10-05T08:16:53Z")
Hi All, I am having an issue with Elasticsearch on my website where search requests sometimes return incomplete results even though the relevant documents are already present in the Elasticsearch index. The website uses… --- ## [Lens color by value issue when using formula metrics](https://discuss.elastic.co/t/lens-color-by-value-issue-when-using-formula-metrics/384284)
**Author:** [@cgchamb](https://discuss.elastic.co/u/cgchamb)\ **Replies:** 3\ **Last updated:** [December 29, 2025, 12:17am UTC](https://discuss.elastic.co/t/lens-color-by-value-issue-when-using-formula-metrics/384284 "2025-12-29T00:17:07Z")
Elasticsearch: 8.19.5, Kibana: 8.19.5. I’m using the Sample Flight data set and I’ve created a Lens Table with “Rows: Top 5 values of Carrier” and Metric “Count of DestAirportID”. I set the metric to color by value (Cel… --- ## [Error fetching data for metricset system.service](https://discuss.elastic.co/t/error-fetching-data-for-metricset-system-service/389951)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 5:12am UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-system-service/389951 "2026-08-31T05:12:50Z")
Hello everyone, I’m using Elastic Agent version 8.19.14, managed by Fleet, with the Linux Metrics integration to collect the status of Systemd units. Sometimes I notice that the agent becomes “Unhealthy” due to the fol… --- ## [ES query operation’s impact on cluster CPU consumption](https://discuss.elastic.co/t/es-query-operation-s-impact-on-cluster-cpu-consumption/385280)
**Author:** [@mloine](https://discuss.elastic.co/u/mloine)\ **Replies:** 1\ **Last updated:** [February 28, 2026, 8:27am UTC](https://discuss.elastic.co/t/es-query-operation-s-impact-on-cluster-cpu-consumption/385280 "2026-02-28T08:27:23Z")
Hello, I have a practical question: Background: Query operations on ES in stress testing scenarios Question: The CPU usage of a specific node is much higher than that of other nodes. How to evenly distribute query oper… --- ## [Elastic Defend - Enterprise Subscription (Replace Client AntiVirus)](https://discuss.elastic.co/t/elastic-defend-enterprise-subscription-replace-client-antivirus/385915)
**Author:** [@GreysMatter](https://discuss.elastic.co/u/GreysMatter)\ **Replies:** 2\ **Last updated:** [April 17, 2026, 2:14pm UTC](https://discuss.elastic.co/t/elastic-defend-enterprise-subscription-replace-client-antivirus/385915 "2026-04-17T14:14:24Z")
Hi Guys, Looking for some advice. I currently have a Serverless Elastic Security Enterprise subscription and have the agent running on all my clients. My ES profiles are configured to "Detect only". I also use Eset P… --- ## [Azure Cloud collect k8s logs](https://discuss.elastic.co/t/azure-cloud-collect-k8s-logs/385512)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 2\ **Last updated:** [March 19, 2026, 10:23pm UTC](https://discuss.elastic.co/t/azure-cloud-collect-k8s-logs/385512 "2026-03-19T22:23:47Z")
Hey guys! What is the recommended way to collect logs from Azure Cloud AKS and deliver them to the desired Elastic instance deployed outside Azure Cloud? I have already checked this page: and corresponding integrati… --- ## [Kibana Visualization date\_histogram weekly start day: Sunday (Start of Week) in Dashboard](https://discuss.elastic.co/t/kibana-visualization-date-histogram-weekly-start-day-sunday-start-of-week-in-dashboard/382877)
**Author:** [@josh\_tran](https://discuss.elastic.co/u/josh_tran)\ **Replies:** 2\ **Last updated:** [October 24, 2025, 10:15am UTC](https://discuss.elastic.co/t/kibana-visualization-date-histogram-weekly-start-day-sunday-start-of-week-in-dashboard/382877 "2025-10-24T10:15:01Z")
I want weekly date\_histogram function to start on Sunday in Kibana dashboards, but they currently start on Monday (ISO week). I’m using Kibana Lens with Elasticsearch 9.0.4. I’ve tried adjusting dateFormat:dow settings t… --- ## [Restrict fleet view to only specific namespace](https://discuss.elastic.co/t/restrict-fleet-view-to-only-specific-namespace/384579)
**Author:** [@TheJ](https://discuss.elastic.co/u/TheJ)\ **Replies:** 3\ **Last updated:** [January 21, 2026, 2:12pm UTC](https://discuss.elastic.co/t/restrict-fleet-view-to-only-specific-namespace/384579 "2026-01-21T14:12:21Z")
Hi, I have installed 10 elastic agents in 2 different agent policies: admins personel Also i created role for our helpdesk team (the name of role is helpdesk). Now I want that helpdesk role can see only agents … --- ## [AWS Integration - Logs from CloudWatch error STS: AssumeRole, exceeded maximum number of attempts](https://discuss.elastic.co/t/aws-integration-logs-from-cloudwatch-error-sts-assumerole-exceeded-maximum-number-of-attempts/383936)
**Author:** [@carellevbt](https://discuss.elastic.co/u/carellevbt)\ **Replies:** 1\ **Last updated:** [December 12, 2025, 1:35am UTC](https://discuss.elastic.co/t/aws-integration-logs-from-cloudwatch-error-sts-assumerole-exceeded-maximum-number-of-attempts/383936 "2025-12-12T01:35:36Z")
Hello, We started seeing the below error on the AWS integrations, precisely for the “Collect Logs from CloudWatch”. getLogEventsFromCloudWatch failed: error FilterLogEvents with Paginator: operation error CloudWatch Lo… --- ## [Not able to access Lab in Strigo](https://discuss.elastic.co/t/not-able-to-access-lab-in-strigo/382835)
**Author:** [@Deepthi.KS](https://discuss.elastic.co/u/Deepthi.KS)\ **Replies:** 1\ **Last updated:** [October 21, 2025, 4:04am UTC](https://discuss.elastic.co/t/not-able-to-access-lab-in-strigo/382835 "2025-10-21T04:04:50Z")
I am not able to access lab in Elastic learning portal as the Strigo says I am logged in but not able to access. I need access as soon as possible as I dont have much time. HELP --- ## [Time picker in ES|QL query - esql](https://discuss.elastic.co/t/time-picker-in-es-ql-query-esql/390631)
**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\ **Replies:** 2\ **Last updated:** [September 25, 2026, 1:55pm UTC](https://discuss.elastic.co/t/time-picker-in-es-ql-query-esql/390631 "2026-09-25T13:55:30Z")
Hi community, I was wondering about a weird behaviour that might catch some people off-guard. How does the time picker affect ES|QL searches? For example the following query implies a 24-hour search, but yet the data d… --- ## [Ingest openinference spans with chars more than 1024](https://discuss.elastic.co/t/ingest-openinference-spans-with-chars-more-than-1024/388650)
**Author:** [@nikhil\_digde](https://discuss.elastic.co/u/nikhil_digde)\ **Replies:** 2\ **Last updated:** [July 26, 2026, 11:11am UTC](https://discuss.elastic.co/t/ingest-openinference-spans-with-chars-more-than-1024/388650 "2026-07-26T11:11:22Z")
Is anyone storing open inference / otel Genai spans in elastic APM? I am having issues with the char limit of 1024 , due to which I have issues using the data to run online evals later. Is it not the correct fit for the … --- ## [Logstash monitoring is not enabled despite Helm values](https://discuss.elastic.co/t/logstash-monitoring-is-not-enabled-despite-helm-values/385998)
**Author:** [@CitizenSteak](https://discuss.elastic.co/u/CitizenSteak)\ **Replies:** 2\ **Last updated:** [April 23, 2026, 10:09am UTC](https://discuss.elastic.co/t/logstash-monitoring-is-not-enabled-despite-helm-values/385998 "2026-04-23T10:09:51Z")
Hello, In my current ECK deployment (using the eck-stack chart), Logstash monitoring is not enabled, while Elasticsearch and Kibana monitoring are working as expected. Current Logstash Configuration (Excerpt) eck-logst… --- ## [Logstash GROK](https://discuss.elastic.co/t/logstash-grok/384394)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 2\ **Last updated:** [January 7, 2026, 12:00pm UTC](https://discuss.elastic.co/t/logstash-grok/384394 "2026-01-07T12:00:00Z")
"\<190\>606524: 876342: Jan 6 2026 17:27:24.835 UTC: %SEC-6-IPACCESSLOGP: list BLOCK-Wifi denied udp 11.12.2.75(51811) -\> 111.22.13.60(5246), 2 packets " Grok Parser succeeds but i am getting grok error in Elastics… --- ## [Delete saved object of type url via Kibana 7 API](https://discuss.elastic.co/t/delete-saved-object-of-type-url-via-kibana-7-api/385805)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 5\ **Last updated:** [April 9, 2026, 1:53pm UTC](https://discuss.elastic.co/t/delete-saved-object-of-type-url-via-kibana-7-api/385805 "2026-04-09T13:53:34Z")
Ahead of upgrading Kibana from 7 (yes I know) to 8, I'm looking at ~1500 short URLs which it has been decided are no longer needed. (N.B. Some short URLs are still wanted.) Deleting them using the Kibana GUI would be exc… --- ## [Synthetics monitor status rule — context.monitorName and context.locationName empty in recovery notifications after long-duration alert](https://discuss.elastic.co/t/synthetics-monitor-status-rule-context-monitorname-and-context-locationname-empty-in-recovery-notifications-after-long-duration-alert/385868)
**Author:** [@Marc\_Hidalgo\_raya](https://discuss.elastic.co/u/Marc_Hidalgo_raya)\ **Replies:** 1\ **Last updated:** [April 13, 2026, 10:14am UTC](https://discuss.elastic.co/t/synthetics-monitor-status-rule-context-monitorname-and-context-locationname-empty-in-recovery-notifications-after-long-duration-alert/385868 "2026-04-13T10:14:51Z")
Elastic Stack version: 8.19.4 Rule type: Synthetics monitor status We have a Synthetics monitor status rule configured to alert when a monitor is down 3 times within the last 3 checks. The rule covers all monitors in t… --- ## [Unable to extract the elasticsearch install tar file](https://discuss.elastic.co/t/unable-to-extract-the-elasticsearch-install-tar-file/383376)
**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\ **Replies:** 3\ **Last updated:** [November 12, 2025, 6:14am UTC](https://discuss.elastic.co/t/unable-to-extract-the-elasticsearch-install-tar-file/383376 "2025-11-12T06:14:45Z")
Hello I downloaded the elasticsearch installer file from the location : wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-9.2.1-linux-x86\_64.tar.gz When I try to extract this on my unix machine, I… --- ## [Elastic Partition Problem](https://discuss.elastic.co/t/elastic-partition-problem/388924)
**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\ **Replies:** 2\ **Last updated:** [July 31, 2026, 4:32pm UTC](https://discuss.elastic.co/t/elastic-partition-problem/388924 "2026-07-31T16:32:03Z")
Just came across a prolem from the start i was installing elastic(Elasticsearch-kibana-logstash) via packge mangers either apt or deb packages (DPKG) so the storage is handled by them only but in splunk we used to make… --- ## [Extraction rules for meta tag without "elastic" using a XPath selector](https://discuss.elastic.co/t/extraction-rules-for-meta-tag-without-elastic-using-a-xpath-selector/386450)
**Author:** [@creekinouryard](https://discuss.elastic.co/u/creekinouryard)\ **Replies:** 1\ **Last updated:** [May 29, 2026, 5:42pm UTC](https://discuss.elastic.co/t/extraction-rules-for-meta-tag-without-elastic-using-a-xpath-selector/386450 "2026-05-29T17:42:50Z")
Using the latest version of Open Crawler and having trouble extracting meta tag values We have a HTML page as follows: \ \ \