# Top **URL:** https://discuss.elastic.co/top.md?page=2 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 3 --- ## [Dec 1st, 2025: \[EN\] Dear Santa, Here’s a little --help for christmas](https://discuss.elastic.co/t/dec-1st-2025-en-dear-santa-here-s-a-little-help-for-christmas/383561)
**Author:** [@Laurent\_Saint-Felix](https://discuss.elastic.co/u/Laurent_Saint-Felix)\ **Replies:** 0\ **Last updated:** [December 1, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2025-en-dear-santa-here-s-a-little-help-for-christmas/383561 "2025-12-01T08:00:44Z")
Cet article est également disponible en Français. Every year, Santa Claus faces the same scaling problem: billions of children, one magical delivery window, zero margin for error. For centuries, he ran everything o… --- ## [Dec 10th, 2025: \[EN\] A new color palette for data visualisation in Kibana - how and why we created it](https://discuss.elastic.co/t/dec-10th-2025-en-a-new-color-palette-for-data-visualisation-in-kibana-how-and-why-we-created-it/383837)
**Author:** [@Giovanni\_Magni](https://discuss.elastic.co/u/Giovanni_Magni)\ **Replies:** 0\ **Last updated:** [December 10, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2025-en-a-new-color-palette-for-data-visualisation-in-kibana-how-and-why-we-created-it/383837 "2025-12-10T08:00:34Z")
A new color palette for data visualisation was tested in advance in Serverless in November 2024 and introduced as the default settings in Kibana 9.0 in April 2025. This is part of a larger effort to visually refresh … --- ## [🎉 What’s new in Elastic 9.5](https://discuss.elastic.co/t/what-s-new-in-elastic-9-5/388970)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [August 4, 2026, 3:53pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-9-5/388970 "2026-08-04T15:53:13Z")
:tada: What’s new in Elastic 9.5 Elastic 9.5 promotes native PromQL, Dashboards API, Cases as Data, and natural language authoring to general availability. 9.5 also introduces Columnar Mode, VectorDB index mode, a new… --- ## [OSI approved Docker image for ES 8+](https://discuss.elastic.co/t/osi-approved-docker-image-for-es-8/386055)
**Author:** [@stitchart](https://discuss.elastic.co/u/stitchart)\ **Replies:** 0\ **Last updated:** [April 27, 2026, 7:24pm UTC](https://discuss.elastic.co/t/osi-approved-docker-image-for-es-8/386055 "2026-04-27T19:24:39Z")
Hi, we're looking to build our own OSS Docker image since Elasticsearch v8+ onward, Elastic has discontinued the elasticsearch-oss Docker images that were previously available for those of us who needed to use an Apache … --- ## [Elastic Defend 8.19.6, 9.1.6, and 9.2.0 Security Update (ESA-2025-23)](https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [November 6, 2025, 2:25pm UTC](https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272 "2025-11-06T14:25:08Z")
Elastic Defend Improper Preservation of Permissions (ESA-2025-23) Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service run… --- ## [Dec 7th, 2025: \[EN\] Elastic as Code: Automating More Than Just Infrastructure](https://discuss.elastic.co/t/dec-7th-2025-en-elastic-as-code-automating-more-than-just-infrastructure/383587)
**Author:** [@kylerozanitis](https://discuss.elastic.co/u/kylerozanitis)\ **Replies:** 0\ **Last updated:** [December 7, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2025-en-elastic-as-code-automating-more-than-just-infrastructure/383587 "2025-12-07T08:00:15Z")
Elastic as Code: Automating More Than Just Infrastructure Terraform is a tool frequently used by engineers to create, modify, and delete infrastructure using a pattern called Infrastructure as Code (IaC). Although com… --- ## [Upgrading elasticsearch 8.19.11 to 9+ cluster managed by ECK Operator](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361)
**Author:** [@coezdemir](https://discuss.elastic.co/u/coezdemir)\ **Replies:** 0\ **Last updated:** [March 6, 2026, 10:43am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-8-19-11-to-9-cluster-managed-by-eck-operator/385361 "2026-03-06T10:43:10Z")
Hello, I wanted to share some insight that we came accross on an upgrade we recently did. Upgrade ECK operator version from 2.16+ to 3+ since only 3+ supports 9+ elastic Upgrade path was from 8.19.11 → 9.1.9 at first … --- ## [Customizable Form - Make Dashboards DO Things](https://discuss.elastic.co/t/customizable-form-make-dashboards-do-things/384124)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 0\ **Last updated:** [December 16, 2025, 3:54pm UTC](https://discuss.elastic.co/t/customizable-form-make-dashboards-do-things/384124 "2025-12-16T15:54:30Z")
Hi everyone, I’ve published an open-source Kibana plugin that allows you to build custom, configurable forms as Kibana Visualizations and use them inside your Dashboards so you can basically trigger actions directly fro… --- ## [Dec 4th, 2025: \[EN\] Let's migrate this expense tool from n8n to Elastic One Workflow](https://discuss.elastic.co/t/dec-4th-2025-en-lets-migrate-this-expense-tool-from-n8n-to-elastic-one-workflow/383586)
**Author:** [@Vladimir\_Filonov](https://discuss.elastic.co/u/Vladimir_Filonov)\ **Replies:** 0\ **Last updated:** [December 4, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-4th-2025-en-lets-migrate-this-expense-tool-from-n8n-to-elastic-one-workflow/383586 "2025-12-04T08:00:40Z")
Building a Conversational Expense Assistant with Elastic One Workflow, Gemini, and Telegram A little while back I stumbled on an excellent walkthrough by Som (published yesterday): "Build a Conversational Expense Ass… --- ## [Dec 14th, 2025: \[EN\] Build a map to compare metrics by country or region with ES|QL](https://discuss.elastic.co/t/dec-14th-2025-en-build-a-map-to-compare-metrics-by-country-or-region-with-es-ql/383243)
**Author:** [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Replies:** 0\ **Last updated:** [December 14, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-14th-2025-en-build-a-map-to-compare-metrics-by-country-or-region-with-es-ql/383243 "2025-12-14T08:00:14Z")
Kibana map tutorial "Build a map to compare metrics by country or region" creates a map using Elasticsearch’s DSL querying. Recent ES|QL functions LOOKUP JOIN (8.18) and ST\_GEOTILE (9.2) allow the map in this tutorial… --- ## [Dec 24th, 2025: \[EN\] BBQ for Christmas Dinner](https://discuss.elastic.co/t/dec-24th-2025-en-bbq-for-christmas-dinner/384022)
**Author:** [@Ugo\_Sangiorgi](https://discuss.elastic.co/u/Ugo_Sangiorgi)\ **Replies:** 0\ **Last updated:** [December 24, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2025-en-bbq-for-christmas-dinner/384022 "2025-12-24T08:00:14Z")
What is VectorFaces? Since today is December 24th, how about some BBQ for Christmas Dinner? VectorFaces is a face recognition demo I developed to showcase Elasticsearch vector capabilities at conferences. It searches th… --- ## [Release Notes page for v9.x is too heavy — please bring back per-version pages](https://discuss.elastic.co/t/release-notes-page-for-v9-x-is-too-heavy-please-bring-back-per-version-pages/386313)
**Author:** [@True](https://discuss.elastic.co/u/True)\ **Replies:** 3\ **Last updated:** [May 13, 2026, 9:14pm UTC](https://discuss.elastic.co/t/release-notes-page-for-v9-x-is-too-heavy-please-bring-back-per-version-pages/386313 "2026-05-13T21:14:51Z")
Hi, I wanted to share some feedback about the release notes documentation structure that changed in v9.x. What changed: In v8.x, each version had its own dedicated page (e.g., 8.15, 8.16, 8.17), which made it easy to … --- ## [Dec 2nd, 2025: \[EN\] Normalizing numbers during analysis](https://discuss.elastic.co/t/dec-2nd-2025-en-normalizing-numbers-during-analysis/383512)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 0\ **Last updated:** [December 2, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-2025-en-normalizing-numbers-during-analysis/383512 "2025-12-02T08:00:29Z")
Normalizing numbers in the analysis chain A common question in full text search is how to deal with numbers. In the base case you could fully extract them and query them as real numbers within a range, but in many cas… --- ## [Elasticsearch 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-07)](https://discuss.elastic.co/t/elasticsearch-8-19-10-9-1-10-9-2-4-security-update-esa-2026-07/384525)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:55pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-10-9-1-10-9-2-4-security-update-esa-2026-07/384525 "2026-01-13T20:55:33Z")
Elasticsearch yawkat LZ4 Java - CVE-2025-66566 (ESA-2026-07) An Information Disclosure vulnerability (CVE-2025-66566) exists in the yawkat LZ4 Java library used by Elasticsearch that allows an attacker to read previous … --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-05)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:54pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524 "2026-01-13T20:54:48Z")
External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector (ESA-2026-05) External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-9… --- ## [Logstash 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-29)](https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2026, 4:32pm UTC](https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816 "2026-04-08T16:32:14Z")
Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write a… --- ## [Spring Boot 4.0 / Spring Framework 7.0 Incompatibility with Elastic APM Java Agent](https://discuss.elastic.co/t/spring-boot-4-0-spring-framework-7-0-incompatibility-with-elastic-apm-java-agent/384087)
**Author:** [@cthurston-clgx](https://discuss.elastic.co/u/cthurston-clgx)\ **Replies:** 4\ **Last updated:** [January 5, 2026, 9:26am UTC](https://discuss.elastic.co/t/spring-boot-4-0-spring-framework-7-0-incompatibility-with-elastic-apm-java-agent/384087 "2026-01-05T09:26:42Z")
\*\*Kibana version:\*\* N/A (issue occurs during instrumentation) \*\*Elasticsearch version:\*\* N/A (issue occurs during instrumentation) \*\*APM Server version:\*\* N/A (issue occurs during instrumentation) \*\*APM Agent language… --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-08)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:47pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523 "2026-01-13T20:47:35Z")
Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation (ESA-2026-08) Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (C… --- ## [Kibana 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-21)](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-21/385811)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2026, 4:01pm UTC](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-21/385811 "2026-04-08T16:01:33Z")
Execution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope Execution with Unnecessary Privileges (CWE-250) in Kibana’s Fleet plugin debug route handlers ca… --- ## [Kibana 9.3.3 Security Update (ESA-2026-28)](https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-28/385815)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2026, 4:29pm UTC](https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-28/385815 "2026-04-08T16:29:23Z")
Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with wor… --- ## [Elasticsearch 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-42)](https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-42/387439)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:50pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-42/387439 "2026-07-01T13:50:07Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can subm… --- ## [Kibana 8.19.11, 9.2.5 Security Update (ESA-2026-15)](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:54pm UTC](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251 "2026-02-26T16:54:16Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153) … --- ## [Elasticsearch Log4j vulnerability resolution for 8.19.X version](https://discuss.elastic.co/t/elasticsearch-log4j-vulnerability-resolution-for-8-19-x-version/385022)
**Author:** [@shubhammugale](https://discuss.elastic.co/u/shubhammugale)\ **Replies:** 7\ **Last updated:** [February 20, 2026, 5:58pm UTC](https://discuss.elastic.co/t/elasticsearch-log4j-vulnerability-resolution-for-8-19-x-version/385022 "2026-02-20T17:58:31Z")
We are currently running Elasticsearch version 8.19.8 in our environment and are receiving a Log4j vulnerability alert. To address this issue, we verified and upgraded to Elasticsearch version 8.19.11, but the vulnerabi… --- ## [Feedback on the Security Solution Dashboard Experience](https://discuss.elastic.co/t/feedback-on-the-security-solution-dashboard-experience/386721)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [June 15, 2026, 8:25am UTC](https://discuss.elastic.co/t/feedback-on-the-security-solution-dashboard-experience/386721 "2026-06-15T08:25:50Z")
Hello, I would like to share some feedback regarding the Security Solution dashboard experience in Kibana. While I appreciate the effort to provide a dedicated Security-focused dashboard experience, many users in our en… --- ## [Custom Elastic Defend endpoint protection rules？](https://discuss.elastic.co/t/custom-elastic-defend-endpoint-protection-rules/383149)
**Author:** [@GeShanDaKongQi233](https://discuss.elastic.co/u/GeShanDaKongQi233)\ **Replies:** 3\ **Last updated:** [November 6, 2025, 1:57pm UTC](https://discuss.elastic.co/t/custom-elastic-defend-endpoint-protection-rules/383149 "2025-11-06T13:57:40Z")
The YARA rules and behavioral rules of Elastic Defend are shared with the community, allowing blue teams and defenders to learn from them and improve their defenses. However, we have also observed that many red team memb… --- ## [Elastic Agent vs Logstash with Filebeat](https://discuss.elastic.co/t/elastic-agent-vs-logstash-with-filebeat/384556)
**Author:** [@marian.veverka](https://discuss.elastic.co/u/marian.veverka)\ **Replies:** 5\ **Last updated:** [January 17, 2026, 5:10pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-logstash-with-filebeat/384556 "2026-01-17T17:10:53Z")
Hello, I have a server running several Docker containers (including, for example, Keycloak). I want to send logs from these Docker containers to Elasticsearch. Currently, for one Docker container I'm using a separate D… --- ## [Dec 15th, 2025: \[EN\] AI Agent Observability with OpenLit, OpenTelemetry and Elastic](https://discuss.elastic.co/t/dec-15th-2025-en-ai-agent-observability-with-openlit-opentelemetry-and-elastic/383341)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [December 15, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-15th-2025-en-ai-agent-observability-with-openlit-opentelemetry-and-elastic/383341 "2025-12-15T08:00:25Z")
Traditionally, we have relied on Observability diagnostic information to understand what our applications are doing. Particularly over the festive season where we live in fear of a ping if we drew the on-call short st… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-72)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-72/388575)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:55pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-72/388575 "2026-07-21T22:55:05Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authent… --- ## [Dec 5th, 2025: \[EN\] You know, for hybrid search](https://discuss.elastic.co/t/dec-5th-2025-en-you-know-for-hybrid-search/383218)
**Author:** [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\ **Replies:** 0\ **Last updated:** [December 5, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2025-en-you-know-for-hybrid-search/383218 "2025-12-05T08:00:16Z")
If you’ve tried setting up a hybrid search experience, then you know there can be a steep learning curve. This is especially true when combining text search with semantic search results, because the scores returned fr… --- ## [Dec 18th, 2025: \[EN\] Using ES|QL with dense\_vector fields](https://discuss.elastic.co/t/dec-18th-2025-en-using-es-ql-with-dense-vector-fields/384024)
**Author:** [@Carlos\_D](https://discuss.elastic.co/u/Carlos_D)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2025-en-using-es-ql-with-dense-vector-fields/384024 "2025-12-18T08:00:18Z")
Este artículo está disponible en Español. Vector Search with ES|QL Today we're unwrapping one of the most exciting additions to ES|QL: native support for dense vector fields, and the functions to search them: The KNN … --- ## [CVE-2025-66516](https://discuss.elastic.co/t/cve-2025-66516/384111)
**Author:** [@satyam\_mishra](https://discuss.elastic.co/u/satyam_mishra)\ **Replies:** 2\ **Last updated:** [December 17, 2025, 4:09pm UTC](https://discuss.elastic.co/t/cve-2025-66516/384111 "2025-12-17T16:09:40Z")
Is elasticsearch impacted by CVE-2025-66516 any version ? --- ## [Dec 25th, 2025: \[EN\] Eat something healthier at X-mas](https://discuss.elastic.co/t/dec-25th-2025-en-eat-something-healthier-at-x-mas/384137)
**Author:** [@piotrprz](https://discuss.elastic.co/u/piotrprz)\ **Replies:** 0\ **Last updated:** [December 25, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-25th-2025-en-eat-something-healthier-at-x-mas/384137 "2025-12-25T08:00:19Z")
I hope during the holidays you folks are also eating healthy stuff, not just sweet cakes :wink: Let’s say you wanted to buy some fruit in advance, you may not know all the names, you may not know what kind of fruit y… --- ## [Elasticsearch 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-27)](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-27/384063)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [December 15, 2025, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-27/384063 "2025-12-15T10:14:49Z")
Elasticsearch Improper Authentication (ESA-2025-27) Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a… --- ## [Elastic Agent (Defender) – Public + On-Prem Deployment Question](https://discuss.elastic.co/t/elastic-agent-defender-public-on-prem-deployment-question/383515)
**Author:** [@Animate4498](https://discuss.elastic.co/u/Animate4498)\ **Replies:** 8\ **Last updated:** [January 5, 2026, 1:08pm UTC](https://discuss.elastic.co/t/elastic-agent-defender-public-on-prem-deployment-question/383515 "2026-01-05T13:08:11Z")
My goal is to deploy the Elastic Agent with the Defender integration as an XDR solution on our clients and forward all security alerts to our on-prem SIEM. Fleet and the rest of the Elastic components are reachable from … --- ## [Fleet Server 8.19.15, 9.3.4, 9.4.0 Security Update (ESA-2026-41)](https://discuss.elastic.co/t/fleet-server-8-19-15-9-3-4-9-4-0-security-update-esa-2026-41/387438)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:48pm UTC](https://discuss.elastic.co/t/fleet-server-8-19-15-9-3-4-9-4-0-security-update-esa-2026-41/387438 "2026-07-01T13:48:04Z")
Dependency on Vulnerable Third-Party Component in Fleet Server Leading to Denial of Service Dependency on Vulnerable Third-Party Component (CWE-1395) exists in the Go standard library used by Fleet Server that could all… --- ## [How often does Elastic Defend integration auto update signatures](https://discuss.elastic.co/t/how-often-does-elastic-defend-integration-auto-update-signatures/384370)
**Author:** [@etrevino-lumificyber](https://discuss.elastic.co/u/etrevino-lumificyber)\ **Replies:** 1\ **Last updated:** [January 5, 2026, 4:29pm UTC](https://discuss.elastic.co/t/how-often-does-elastic-defend-integration-auto-update-signatures/384370 "2026-01-05T16:29:34Z")
Regarding elastic defend integration auto updates. How frequently do these auto updates occur? How frequently are new threat detections updated? --- ## [Refer to value lists in ES|QL?](https://discuss.elastic.co/t/refer-to-value-lists-in-es-ql/384135)
**Author:** [@alyx](https://discuss.elastic.co/u/alyx)\ **Replies:** 1\ **Last updated:** [April 17, 2026, 6:37pm UTC](https://discuss.elastic.co/t/refer-to-value-lists-in-es-ql/384135 "2026-04-17T18:37:21Z")
Hi everyone! Trying to migrate from other SIEM platforms. One question is, is it possible to define some lists and refer to them across different rules? Like WHERE source.ip IN ${some\_defined\_list}? I tried to use valu… --- ## [Dec 13th, 2025: \[EN\] Tailoring entity risk scoring to suit your data](https://discuss.elastic.co/t/dec-13th-2025-en-tailoring-entity-risk-scoring-to-suit-your-data/383862)
**Author:** [@Mark\_Hopkin](https://discuss.elastic.co/u/Mark_Hopkin)\ **Replies:** 0\ **Last updated:** [December 13, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2025-en-tailoring-entity-risk-scoring-to-suit-your-data/383862 "2025-12-13T08:00:55Z")
Entity Risk Scoring now offers even more control! We've extended customization options, so you can easily tailor risk calculations based on alerts and the asset criticality of your users, hosts, and services. It's now… --- ## [Elasticsearch upgrade from 7 to 8](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-to-8/384901)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 5\ **Last updated:** [February 6, 2026, 9:27pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-to-8/384901 "2026-02-06T21:27:27Z")
Hi All, Our current cluster is running on elasticsearch version 7.17.3 and we are planning to upgrade to version 8.15.2 (hopefully an allowed version) We want to adopt a "rolling upgrade" doing one instance at a time. … --- ## [Dec 12th, 2025: \[EN\] Unlock the power of the OpenTelemetry Collector by using it as a framework](https://discuss.elastic.co/t/dec-12th-2025-en-unlock-the-power-of-the-opentelemetry-collector-by-using-it-as-a-framework/383860)
**Author:** [@dmathieu](https://discuss.elastic.co/u/dmathieu)\ **Replies:** 0\ **Last updated:** [December 12, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-12th-2025-en-unlock-the-power-of-the-opentelemetry-collector-by-using-it-as-a-framework/383860 "2025-12-12T08:00:28Z")
Most people use the OpenTelemetry Collector as a glorified telemetry router. But because sometimes need to go further that just built-in components, behind that façade, it is actually a pluggable, extensible framewor… --- ## [After upgrade to 9.3.4 problem with version\_conflict\_engine\_exception](https://discuss.elastic.co/t/after-upgrade-to-9-3-4-problem-with-version-conflict-engine-exception/386162)
**Author:** [@Mario\_22](https://discuss.elastic.co/u/Mario_22)\ **Replies:** 4\ **Last updated:** [May 6, 2026, 7:53pm UTC](https://discuss.elastic.co/t/after-upgrade-to-9-3-4-problem-with-version-conflict-engine-exception/386162 "2026-05-06T19:53:38Z")
After upgrading the Elastic Stack, Fleet Server, and Elastic Agents to 9.3.4, and after re-enabling / upgrading integrations, we started seeing a very large number of errors in logs-elastic\_agent-\*. The errors look like… --- ## [Elasticsearch/Kibana Service Startup Failure Due to Unsupported CPU Instruction Set](https://discuss.elastic.co/t/elasticsearch-kibana-service-startup-failure-due-to-unsupported-cpu-instruction-set/386231)
**Author:** [@yogesh119905](https://discuss.elastic.co/u/yogesh119905)\ **Replies:** 8\ **Last updated:** [June 2, 2026, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-service-startup-failure-due-to-unsupported-cpu-instruction-set/386231 "2026-06-02T16:33:42Z")
Description: We are facing an issue while starting the Elasticsearch/Kibana service on the current virtual machine. The application fails during startup because the host CPU does not support the instruction sets require… --- ## [Potential impact of Apache Log4j issue #4255 on Elastic products](https://discuss.elastic.co/t/potential-impact-of-apache-log4j-issue-4255-on-elastic-products/389937)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [August 26, 2026, 6:33pm UTC](https://discuss.elastic.co/t/potential-impact-of-apache-log4j-issue-4255-on-elastic-products/389937 "2026-08-26T18:33:20Z")
Hello, A new Apache Log4j security issue was reported on August 24, 2026: There is also a public PoC/reproduction here: According to the report, the issue affects Log4j's handling of serialized LogEvent objects an… --- ## [APT will consider Elastic repositories invalid soon](https://discuss.elastic.co/t/apt-will-consider-elastic-repositories-invalid-soon/384448)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 4\ **Last updated:** [February 12, 2026, 8:57am UTC](https://discuss.elastic.co/t/apt-will-consider-elastic-repositories-invalid-soon/384448 "2026-02-12T08:57:44Z")
Hi, On Debian 13+, apt will soon consider Elastic repository invalid Warning: https://artifacts.elastic.co/packages/8.x/apt/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details … --- ## [Failed to check if maintenance windows are active](https://discuss.elastic.co/t/failed-to-check-if-maintenance-windows-are-active/384984)
**Author:** [@GiorgioS13](https://discuss.elastic.co/u/GiorgioS13)\ **Replies:** 6\ **Last updated:** [February 11, 2026, 12:15pm UTC](https://discuss.elastic.co/t/failed-to-check-if-maintenance-windows-are-active/384984 "2026-02-11T12:15:26Z")
After the update of the on-premises deployment, this error appears. What could be the root cause? --- ## [Feedback on bug bounty triage and reward processing timeline](https://discuss.elastic.co/t/feedback-on-bug-bounty-triage-and-reward-processing-timeline/385433)
**Author:** [@Attacker\_Tester](https://discuss.elastic.co/u/Attacker_Tester)\ **Replies:** 1\ **Last updated:** [March 12, 2026, 11:05pm UTC](https://discuss.elastic.co/t/feedback-on-bug-bounty-triage-and-reward-processing-timeline/385433 "2026-03-12T23:05:21Z")
Hello Elastic team, First of all, thank you for running a security program and for the work your team does to keep the ecosystem secure. I really appreciate the opportunity to contribute by reporting vulnerabilities aff… --- ## [Kibana 8.19.7, 9.1.7, and 9.2.1 Security Update (ESA-2025-24)](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-24/383381)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [November 12, 2025, 9:41am UTC](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-24/383381 "2025-11-12T09:41:39Z")
Kibana Origin Validation Error (ESA-2025-24) Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant. Affected Versions: 8… --- ## [Remove corrupted shard](https://discuss.elastic.co/t/remove-corrupted-shard/383026)
**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\ **Replies:** 3\ **Last updated:** [October 28, 2025, 2:04pm UTC](https://discuss.elastic.co/t/remove-corrupted-shard/383026 "2025-10-28T14:04:05Z")
Hi, we are using ES 8.19.2 on 30 data nodes with ~100TB data. We don’t have any snapshots. Shards per index is 30. Someone accidentally deleted some indices from filesystem of some of the nodes. (/data/indices/XYZ). Ye… --- ## [Kibana 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-34)](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-34/384182)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:24pm UTC](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-34/384182 "2025-12-18T21:24:54Z")
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (ESA-2025-34) Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authentic… --- ## [Filebeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-32)](https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:16pm UTC](https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180 "2025-12-18T21:16:47Z")
Filebeat Improper Validation of Specified Index, Position, or Offset in Input (ESA-2025-32) Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Disse… [Previous page](https://discuss.elastic.co/top.md?page=1&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=3&per_page=50)