# Top **URL:** https://discuss.elastic.co/top.md?page=21 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 22 --- ## [Error creating runner from config: can not convert 'object' into 'string' accessing 'diskio.include\_devices.0'](https://discuss.elastic.co/t/error-creating-runner-from-config-can-not-convert-object-into-string-accessing-diskio-include-devices-0/383533)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [November 21, 2025, 1:17pm UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-can-not-convert-object-into-string-accessing-diskio-include-devices-0/383533 "2025-11-21T13:17:35Z")
Hello, As I noticed a lot of ”Could not return any performance counter values for \\.\\Y: .Error: Incorrect function.” For the diskio dataset, I tried setting: But this results in: Error creating runner from config… --- ## [Node thread\_pools choked](https://discuss.elastic.co/t/node-thread-pools-choked/387466)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 2\ **Last updated:** [July 3, 2026, 7:15am UTC](https://discuss.elastic.co/t/node-thread-pools-choked/387466 "2026-07-03T07:15:44Z")
We are using elasticsearch 7.17.6 in one our cluster. Recently we saw that two of the hot nodes had their thread\_pools choked. Increased Queue and rejections. From jstack it seems that the node's CPU is occupied doi… --- ## [AI assistant data access restrictions](https://discuss.elastic.co/t/ai-assistant-data-access-restrictions/386002)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 2\ **Last updated:** [May 6, 2026, 5:47am UTC](https://discuss.elastic.co/t/ai-assistant-data-access-restrictions/386002 "2026-05-06T05:47:33Z")
We are seeking clarification regarding data access restrictions when using the Elastic AI Assistant. We are planning to enable the Elastic AI Assistant feature for our users. Before proceeding, we would like to understa… --- ## [Kibana TSVB shows keyword string "/" as "(empty)"](https://discuss.elastic.co/t/kibana-tsvb-shows-keyword-string-as-empty/384577)
**Author:** [@hylowaker](https://discuss.elastic.co/u/hylowaker)\ **Replies:** 2\ **Last updated:** [January 19, 2026, 8:34am UTC](https://discuss.elastic.co/t/kibana-tsvb-shows-keyword-string-as-empty/384577 "2026-01-19T08:34:24Z")
I loaded Metricbeat dashboards into Kibana. The Disk Usage \[Metricbeat System\] ECS library shows Top 10 mount points with high disk usages. I see an (empty) mount point, but the actual value of system.filesystem.mount\_… --- ## [Auditbeat javascript processor error with v9.2.3](https://discuss.elastic.co/t/auditbeat-javascript-processor-error-with-v9-2-3/384188)
**Author:** [@grants](https://discuss.elastic.co/u/grants)\ **Replies:** 2\ **Last updated:** [December 19, 2025, 12:48am UTC](https://discuss.elastic.co/t/auditbeat-javascript-processor-error-with-v9-2-3/384188 "2025-12-19T00:48:04Z")
Any idea what could be wrong with my processor? Version: 9.2.3 Operating System: ubuntu 22.04 LTS Steps to Reproduce: Processor listed below Setting up auditbeat on a new host encountered an error with a config I know… --- ## [How can I generate the full list of dependencies required to build a Kibana plugin in airgapped env?](https://discuss.elastic.co/t/how-can-i-generate-the-full-list-of-dependencies-required-to-build-a-kibana-plugin-in-airgapped-env/386297)
**Author:** [@Rishav](https://discuss.elastic.co/u/Rishav)\ **Replies:** 1\ **Last updated:** [July 6, 2026, 9:34am UTC](https://discuss.elastic.co/t/how-can-i-generate-the-full-list-of-dependencies-required-to-build-a-kibana-plugin-in-airgapped-env/386297 "2026-07-06T09:34:18Z")
We currently build our Kibana plugins in a CI/CD pipeline on a VM with full internet access. As part of a security hardening effort, we are moving this build to an airgapped environment where all dependencies must be res… --- ## [Can we send a report generated by AI assistance from AI chat](https://discuss.elastic.co/t/can-we-send-a-report-generated-by-ai-assistance-from-ai-chat/386896)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [June 18, 2026, 7:42pm UTC](https://discuss.elastic.co/t/can-we-send-a-report-generated-by-ai-assistance-from-ai-chat/386896 "2026-06-18T19:42:24Z")
Hi Team, We are evaluating the Elastic AI Assistant capabilities and would like to understand its support for automated reporting. Could you please confirm whether the Elastic AI Assistant can: Automatically generat… --- ## [How to filter traces by a custom label in a span](https://discuss.elastic.co/t/how-to-filter-traces-by-a-custom-label-in-a-span/384013)
**Author:** [@xyz1111](https://discuss.elastic.co/u/xyz1111)\ **Replies:** 1\ **Last updated:** [December 12, 2025, 12:18pm UTC](https://discuss.elastic.co/t/how-to-filter-traces-by-a-custom-label-in-a-span/384013 "2025-12-12T12:18:39Z")
Hey! I’m trying to find a way to only see the spans with a particular label value. Similar to opening the traces on Grafana and typing something like {span.mycustomfield=”value”} and seeing all the spans underneath. Trie… --- ## [Kibana audit events for dashboard (It is possible?)](https://discuss.elastic.co/t/kibana-audit-events-for-dashboard-it-is-possible/385823)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 2\ **Last updated:** [May 28, 2026, 11:52am UTC](https://discuss.elastic.co/t/kibana-audit-events-for-dashboard-it-is-possible/385823 "2026-05-28T11:52:49Z")
We are able to create query to query kibana audit events for changes regarding alerting rules and ml jobs. However it doesnt seems like there is any option for us to do the same for dashboard. For example. we want to kno… --- ## [Unable to install Syslog Output Plugin](https://discuss.elastic.co/t/unable-to-install-syslog-output-plugin/383679)
**Author:** [@swarali\_vartak](https://discuss.elastic.co/u/swarali_vartak)\ **Replies:** 2\ **Last updated:** [November 27, 2025, 5:24am UTC](https://discuss.elastic.co/t/unable-to-install-syslog-output-plugin/383679 "2025-11-27T05:24:19Z")
Hi Team, Could you please guide me on installing the Syslog output plugin on our Logstash server? We tried installing it using the method mentioned on ruby.org, but it didn't work. Kindly share the correct steps or pro… --- ## [CISA KEV integration upgrade to 1.10](https://discuss.elastic.co/t/cisa-kev-integration-upgrade-to-1-10/388850)
**Author:** [@rklee](https://discuss.elastic.co/u/rklee)\ **Replies:** 1\ **Last updated:** [September 29, 2026, 7:59pm UTC](https://discuss.elastic.co/t/cisa-kev-integration-upgrade-to-1-10/388850 "2026-09-29T19:59:16Z")
So I was on a CISA KEV integration before version 1.7. I upgraded it to 1.10 and vulnerability reports are not coming in anymore. The integration says to re-enter configuration details and re-enable the package. However … --- ## [Knowledge Base loading indefinitely](https://discuss.elastic.co/t/knowledge-base-loading-indefinitely/385224)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [February 25, 2026, 3:18pm UTC](https://discuss.elastic.co/t/knowledge-base-loading-indefinitely/385224 "2026-02-25T15:18:44Z")
I was using the AI assistant and after finding that I could feed it information about my business, I started creating items in the “Knowledge Base” ITEM. Then I realized that I could give the assistant a role in this ca… --- ## [Android APM (EDOT auto-instrumentation) not tracking full app activity](https://discuss.elastic.co/t/android-apm-edot-auto-instrumentation-not-tracking-full-app-activity/383422)
**Author:** [@Faisal\_siddiqui](https://discuss.elastic.co/u/Faisal_siddiqui)\ **Replies:** 1\ **Last updated:** [November 13, 2025, 2:49pm UTC](https://discuss.elastic.co/t/android-apm-edot-auto-instrumentation-not-tracking-full-app-activity/383422 "2025-11-13T14:49:47Z")
Hello, team! I integrated Elastic APM in my Android app using EDOT (Elastic Distribution of OpenTelemetry) for auto-instrumentation, but it’s only tracking a few API calls — not the complete app activity. Most screens, … --- ## [Filebeat postgresql log module produces timestamp fields that are not indexable when using ECS](https://discuss.elastic.co/t/filebeat-postgresql-log-module-produces-timestamp-fields-that-are-not-indexable-when-using-ecs/390640)
**Author:** [@kriller](https://discuss.elastic.co/u/kriller)\ **Replies:** 3\ **Last updated:** [September 29, 2026, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-postgresql-log-module-produces-timestamp-fields-that-are-not-indexable-when-using-ecs/390640 "2026-09-29T13:41:32Z")
When using the ingest-pipeline that filebeat creates for postgresql logs, the resulting event contains the field postgresql.log.timestamp which conflicts with the ecs@mappings component template. The filebeat-9.5.4-post… --- ## [How to Avoid Stack Mangement Menu](https://discuss.elastic.co/t/how-to-avoid-stack-mangement-menu/385687)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [March 31, 2026, 10:23pm UTC](https://discuss.elastic.co/t/how-to-avoid-stack-mangement-menu/385687 "2026-03-31T22:23:45Z")
Seems in Our Kibana v.8.19 that is hard to avoid having the Stack Management Application showing up in various Spaces for selected Users having multiple Roles Assigned. They seems to always get Index Management and Tran… --- ## ["Explore in Discover" produces very long URLs](https://discuss.elastic.co/t/explore-in-discover-produces-very-long-urls/385236)
**Author:** [@xcq1](https://discuss.elastic.co/u/xcq1)\ **Replies:** 2\ **Last updated:** [February 27, 2026, 1:15pm UTC](https://discuss.elastic.co/t/explore-in-discover-produces-very-long-urls/385236 "2026-02-27T13:15:54Z")
Hello there, I have a Lens Visualization using a table where I now want to look at the matching records in Discover in detail. So I try to click “Explore in Discover”, but that forwards me to a link with 11,000+ charact… --- ## [How to hash sensitive fields in Elasticsearch and show hash vs original based on user permissions?](https://discuss.elastic.co/t/how-to-hash-sensitive-fields-in-elasticsearch-and-show-hash-vs-original-based-on-user-permissions/384905)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 2\ **Last updated:** [February 4, 2026, 1:09pm UTC](https://discuss.elastic.co/t/how-to-hash-sensitive-fields-in-elasticsearch-and-show-hash-vs-original-based-on-user-permissions/384905 "2026-02-04T13:09:04Z")
We have some fields containing sensitive information, and we do not want all users to see the original values. We want to store these fields in a hashed form while indexing and control what different users can see. I h… --- ## [Version 8.17.3 is unable to record the operation log of '\_settings'](https://discuss.elastic.co/t/version-8-17-3-is-unable-to-record-the-operation-log-of-settings/384226)
**Author:** [@luxiaodui](https://discuss.elastic.co/u/luxiaodui)\ **Replies:** 1\ **Last updated:** [December 26, 2025, 10:01pm UTC](https://discuss.elastic.co/t/version-8-17-3-is-unable-to-record-the-operation-log-of-settings/384226 "2025-12-26T22:01:48Z")
Hi, We are currently using version 8.17.3, but we noticed that when calling the /\_settings API to set the refresh interval, no relevant operations are recorded in the ES logs. In previous versions, the ES logs would nor… --- ## [Convert UTC timestamp to local timezone](https://discuss.elastic.co/t/convert-utc-timestamp-to-local-timezone/383049)
**Author:** [@s.buksa](https://discuss.elastic.co/u/s.buksa)\ **Replies:** 1\ **Last updated:** [November 1, 2025, 5:30am UTC](https://discuss.elastic.co/t/convert-utc-timestamp-to-local-timezone/383049 "2025-11-01T05:30:16Z")
Hello, can someone help me to figure out how to convert UTC based timestamp in Kibana watcher to local timezone timestamp? When the watcher is executed, it has execution timestamp. It is very confusing as the timestamp… --- ## [Need to ingest a smaller logs using Custom Logs (Filestream) integration](https://discuss.elastic.co/t/need-to-ingest-a-smaller-logs-using-custom-logs-filestream-integration/384975)
**Author:** [@M311ow](https://discuss.elastic.co/u/M311ow)\ **Replies:** 0\ **Last updated:** [February 9, 2026, 10:15am UTC](https://discuss.elastic.co/t/need-to-ingest-a-smaller-logs-using-custom-logs-filestream-integration/384975 "2026-02-09T10:15:39Z")
Hi, I encounter the issue about the log ingestion. Currently, I have a cluster with the less of microservices and logs and I need to ingest all of that logs to the Kibana. I have use the Elastic Agent with the Custom … --- ## [Alternative to CAT shards API](https://discuss.elastic.co/t/alternative-to-cat-shards-api/383600)
**Author:** [@pingo](https://discuss.elastic.co/u/pingo)\ **Replies:** 3\ **Last updated:** [November 25, 2025, 12:13pm UTC](https://discuss.elastic.co/t/alternative-to-cat-shards-api/383600 "2025-11-25T12:13:21Z")
Hey! All of the CAT APIs come with this disclaimer: IMPORTANT: cat APIs are only intended for human consumption using the command line or Kibana console. They are not intended for use by applications. Is there an alt… --- ## [Capture Elasticsearch diagnostics](https://discuss.elastic.co/t/capture-elasticsearch-diagnostics/390628)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [September 28, 2026, 7:19am UTC](https://discuss.elastic.co/t/capture-elasticsearch-diagnostics/390628 "2026-09-28T07:19:28Z")
Hi there, very soon I am going to purchase elastic licence. In a prior company I had also elastic licences and was used to use the Elasticsearch diagnostics script by the support to collect cluster health parameters. M… --- ## [Using multiple path.data (local + NAS/SAN per node folders) to separate hot and old data – is this supported?](https://discuss.elastic.co/t/using-multiple-path-data-local-nas-san-per-node-folders-to-separate-hot-and-old-data-is-this-supported/385992)
**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\ **Replies:** 2\ **Last updated:** [April 22, 2026, 9:01am UTC](https://discuss.elastic.co/t/using-multiple-path-data-local-nas-san-per-node-folders-to-separate-hot-and-old-data-is-this-supported/385992 "2026-04-22T09:01:56Z")
Hi Team, I am working on a Elasticsearch cluster and need clarification on a storage architecture I am planning. My Architecture I have the following setup: 4 Elasticsearch data nodes Node1 → 1 TB Node2 → 1 TB Nod… --- ## [Is it possible to make a template that aggregates by one field and sorts by another?](https://discuss.elastic.co/t/is-it-possible-to-make-a-template-that-aggregates-by-one-field-and-sorts-by-another/384526)
**Author:** [@Phil\_McLachlan](https://discuss.elastic.co/u/Phil_McLachlan)\ **Replies:** 4\ **Last updated:** [January 20, 2026, 8:12pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-a-template-that-aggregates-by-one-field-and-sorts-by-another/384526 "2026-01-20T20:12:46Z")
Hi, We have a elasticsearch index with a lot of data in it. For this question, I am interested in two fields primarily: brand.brands\_pk and brand.name\_loc.content\_default. I want to create a template to return a uniqu… --- ## [Configuring verification\_mode for Elastic Agent & Fleet Server](https://discuss.elastic.co/t/configuring-verification-mode-for-elastic-agent-fleet-server/386764)
**Author:** [@Reviving9721](https://discuss.elastic.co/u/Reviving9721)\ **Replies:** 0\ **Last updated:** [June 8, 2026, 8:45pm UTC](https://discuss.elastic.co/t/configuring-verification-mode-for-elastic-agent-fleet-server/386764 "2026-06-08T20:45:18Z")
Take the following configuration as an example reference: fleet: ... server: host: 0.0.0.0 internal\_port: 8221 output: elasticsearch: hosts: - 192.168.122.196:9200 protocol:… --- ## [Canvas - Saved Visualizations Not Loading](https://discuss.elastic.co/t/canvas-saved-visualizations-not-loading/386696)
**Author:** [@ArielC](https://discuss.elastic.co/u/ArielC)\ **Replies:** 1\ **Last updated:** [June 5, 2026, 9:14am UTC](https://discuss.elastic.co/t/canvas-saved-visualizations-not-loading/386696 "2026-06-05T09:14:02Z")
My saved visualizations are not loading in canvas. The method used involved using the expression editor to allow for saved lens visualizations to be loaded into Canvas, and respond to global filters. The script used… --- ## [APM Errors showing as "N/A" when using Java agent log\_sending=true (errors coming from logs)](https://discuss.elastic.co/t/apm-errors-showing-as-n-a-when-using-java-agent-log-sending-true-errors-coming-from-logs/384232)
**Author:** [@nicolasbalao](https://discuss.elastic.co/u/nicolasbalao)\ **Replies:** 1\ **Last updated:** [January 5, 2026, 12:07pm UTC](https://discuss.elastic.co/t/apm-errors-showing-as-n-a-when-using-java-agent-log-sending-true-errors-coming-from-logs/384232 "2026-01-05T12:07:16Z")
Versions Kibana version: 9.2.2 Elasticsearch version: 9.2.2 APM Server version: 9.2.2 (via Fleet integration) APM Agent language and version: Java agent 1.55.2 Browser version: Chrome (latest) Installation Original i… --- ## [Observability Alerting](https://discuss.elastic.co/t/observability-alerting/383344)
**Author:** [@MuchoRiceGobler](https://discuss.elastic.co/u/MuchoRiceGobler)\ **Replies:** 1\ **Last updated:** [November 11, 2025, 4:14pm UTC](https://discuss.elastic.co/t/observability-alerting/383344 "2025-11-11T16:14:35Z")
I've made a couple hundred Observability rules to detect when 0 logs are received from specific hosts (monitors logs are being forwarded to Elastic). However, my rules run every 60 seconds (to minimise time to detection … --- ## [Get unique words (tokens ?) from all text fields from all documents in an Index](https://discuss.elastic.co/t/get-unique-words-tokens-from-all-text-fields-from-all-documents-in-an-index/385424)
**Author:** [@sivakumarp11](https://discuss.elastic.co/u/sivakumarp11)\ **Replies:** 3\ **Last updated:** [March 15, 2026, 5:26am UTC](https://discuss.elastic.co/t/get-unique-words-tokens-from-all-text-fields-from-all-documents-in-an-index/385424 "2026-03-15T05:26:40Z")
Is there a way to get list of ‘unique’ words Or terms used in a large text field in ALL the documents ? for ex. if the text field has content like ‘It is the most confidential because confidential or transcendental knowl… --- ## [Who has access to which dashboard with what permission?](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 3\ **Last updated:** [March 1, 2026, 3:05am UTC](https://discuss.elastic.co/t/who-has-access-to-which-dashboard-with-what-permission/385260 "2026-03-01T03:05:58Z")
Along our design and build phase. We have created many users and grant many permission to many dashboard. We would like to clean up our environment to know who have what access or roles? Anyone can advice where to start … --- ## [Trained model deployment is not allocated to any nodes](https://discuss.elastic.co/t/trained-model-deployment-is-not-allocated-to-any-nodes/383133)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 0\ **Last updated:** [October 31, 2025, 7:16pm UTC](https://discuss.elastic.co/t/trained-model-deployment-is-not-allocated-to-any-nodes/383133 "2025-10-31T19:16:31Z")
Hello everyone! I am part of a project in which we are moving to elastic cloud. We also leverage some of the models for semantic search. When testing we have found several instances of the following error: co.elastic.cl… --- ## [SAN required in cert?](https://discuss.elastic.co/t/san-required-in-cert/390541)
**Author:** [@rik](https://discuss.elastic.co/u/rik)\ **Replies:** 2\ **Last updated:** [September 20, 2026, 7:06pm UTC](https://discuss.elastic.co/t/san-required-in-cert/390541 "2026-09-20T19:06:49Z")
I am trying to use an ES service from a remote machine, using the cert copied from the container: podman cp app:/usr/share/elasticsearch/config/certs But simply doing a client.info() I am getting a elastic\_transport.Co… --- ## [Elastic Serverless Forwarder - Millions of API calls causing excess costs](https://discuss.elastic.co/t/elastic-serverless-forwarder-millions-of-api-calls-causing-excess-costs/388327)
**Author:** [@Watsong](https://discuss.elastic.co/u/Watsong)\ **Replies:** 2\ **Last updated:** [July 30, 2026, 10:17am UTC](https://discuss.elastic.co/t/elastic-serverless-forwarder-millions-of-api-calls-causing-excess-costs/388327 "2026-07-30T10:17:37Z")
The Elastic Serverless Forwarder AWS Lambda function accesses two credential values: ESF-CLOUD-ID, ESF-API-KEY The Lambda function does not cache the credentials. It retrieves them on every invocation of the Lambda func… --- ## [Parse syslog with filepath backslashes](https://discuss.elastic.co/t/parse-syslog-with-filepath-backslashes/385919)
**Author:** [@Adrian\_Wallis](https://discuss.elastic.co/u/Adrian_Wallis)\ **Replies:** 2\ **Last updated:** [April 28, 2026, 2:28pm UTC](https://discuss.elastic.co/t/parse-syslog-with-filepath-backslashes/385919 "2026-04-28T14:28:55Z")
Hello, I have some syslogs to parse which are in a very basic comma delimited format. Everything looks and works fine apart from a file path with backslashes. I've seen several suggestions on the forum around mutate an… --- ## [Watcher chain results not in the ctx.payload for a condition](https://discuss.elastic.co/t/watcher-chain-results-not-in-the-ctx-payload-for-a-condition/384574)
**Author:** [@Joey\_Visbeen](https://discuss.elastic.co/u/Joey_Visbeen)\ **Replies:** 2\ **Last updated:** [January 19, 2026, 9:50am UTC](https://discuss.elastic.co/t/watcher-chain-results-not-in-the-ctx-payload-for-a-condition/384574 "2026-01-19T09:50:01Z")
Lately I ran into an issue I am trying to make a watcher. The main purpose is to see if the elastic agents we are running are still producing logs. The agents run on different hosts, therefore the query on the host names… --- ## [Space-aware fleet settings (server, proxy, output)](https://discuss.elastic.co/t/space-aware-fleet-settings-server-proxy-output/390899)
**Author:** [@jameswiggins](https://discuss.elastic.co/u/jameswiggins)\ **Replies:** 1\ **Last updated:** [October 8, 2026, 3:26pm UTC](https://discuss.elastic.co/t/space-aware-fleet-settings-server-proxy-output/390899 "2026-10-08T15:26:43Z")
In the UI and in the API you can create settings for fleet (proxy, server, outputs) in a specific space in the UI by navigating to a specific space with the API by using /s/{sapce\_id}/api/fleet/{resource} But that res… --- ## [Elasticesearch java client How to initiate a snapshot creation request?](https://discuss.elastic.co/t/elasticesearch-java-client-how-to-initiate-a-snapshot-creation-request/383198)
**Author:** [@lq\_dq](https://discuss.elastic.co/u/lq_dq)\ **Replies:** 1\ **Last updated:** [November 4, 2025, 10:15am UTC](https://discuss.elastic.co/t/elasticesearch-java-client-how-to-initiate-a-snapshot-creation-request/383198 "2025-11-04T10:15:17Z")
I couldn't find any examples of creating snapshots using the Elasticsearch Java client. --- ## [Kibana 9 - Detail pane is a bad replacement for Expandable row for my use cases](https://discuss.elastic.co/t/kibana-9-detail-pane-is-a-bad-replacement-for-expandable-row-for-my-use-cases/390555)
**Author:** [@poifir](https://discuss.elastic.co/u/poifir)\ **Replies:** 3\ **Last updated:** [October 5, 2026, 8:57am UTC](https://discuss.elastic.co/t/kibana-9-detail-pane-is-a-bad-replacement-for-expandable-row-for-my-use-cases/390555 "2026-10-05T08:57:00Z")
In Kibana 8 we continued to use the "old" UI that offered to expand each row individually to show it's detail values. This works good as the full width of the windows is also available to the detailed attributes and so … --- ## [How to remove/hide top elastic logo from kibana dashboard for embedding kibana dashboard in angular application iframe without top elastic logo header](https://discuss.elastic.co/t/how-to-remove-hide-top-elastic-logo-from-kibana-dashboard-for-embedding-kibana-dashboard-in-angular-application-iframe-without-top-elastic-logo-header/385649)
**Author:** [@Maneesha](https://discuss.elastic.co/u/Maneesha)\ **Replies:** 3\ **Last updated:** [March 27, 2026, 8:29am UTC](https://discuss.elastic.co/t/how-to-remove-hide-top-elastic-logo-from-kibana-dashboard-for-embedding-kibana-dashboard-in-angular-application-iframe-without-top-elastic-logo-header/385649 "2026-03-27T08:29:32Z")
how to remove/hide top elastic logo from kibana dashboard? my requirement is, need to load kibana dashboard in angular application iframe without top elastic logo header --- ## [Error: rejected execution of coordinating operation \[coordinating\_and\_primary\_bytes=0, replica\_bytes=0, all\_bytes=0, coordinating\_operation\_bytes=130953165, max\_coordinating\_bytes=107374182\]"](https://discuss.elastic.co/t/error-rejected-execution-of-coordinating-operation-coordinating-and-primary-bytes-0-replica-bytes-0-all-bytes-0-coordinating-operation-bytes-130953165-max-coordinating-bytes-107374182/382813)
**Author:** [@Peng\_Dong](https://discuss.elastic.co/u/Peng_Dong)\ **Replies:** 0\ **Last updated:** [October 18, 2025, 9:14pm UTC](https://discuss.elastic.co/t/error-rejected-execution-of-coordinating-operation-coordinating-and-primary-bytes-0-replica-bytes-0-all-bytes-0-coordinating-operation-bytes-130953165-max-coordinating-bytes-107374182/382813 "2025-10-18T21:14:00Z")
Hi, was trying to re-index in elastic. Using the command below: POST \_reindex?wait\_for\_completion=false&requests\_per\_second=50 { "source": { "index": "prod-application-2025", "size": 200 }, "dest": { … --- ## [Jakarta.mail dependency downgraded](https://discuss.elastic.co/t/jakarta-mail-dependency-downgraded/390039)
**Author:** [@manick02](https://discuss.elastic.co/u/manick02)\ **Replies:** 2\ **Last updated:** [September 1, 2026, 8:11pm UTC](https://discuss.elastic.co/t/jakarta-mail-dependency-downgraded/390039 "2026-09-01T20:11:07Z")
I noticed jakarta.mail dependency downgraded from 1.6.8( in 8.18.6 )to 1.6.3 (in 8.19.20) We were tracking the CVE CVE-2025-7962 internally and was wondering if this downgrade made it open it again --- ## [LLM token usage in Elasticsearch Service Billing integration](https://discuss.elastic.co/t/llm-token-usage-in-elasticsearch-service-billing-integration/387893)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 2\ **Last updated:** [July 9, 2026, 6:59am UTC](https://discuss.elastic.co/t/llm-token-usage-in-elasticsearch-service-billing-integration/387893 "2026-07-09T06:59:29Z")
Hey guys! I installed Elasticsearch Service Billing integration but cannot find my LLM token usage. I may see it in Elastic Cloud: However, I want to see this info in Elastic integration If it is not possible, how … --- ## [How can I speed up tokenizing in elasticsearch?](https://discuss.elastic.co/t/how-can-i-speed-up-tokenizing-in-elasticsearch/383141)
**Author:** [@orlenkoda5](https://discuss.elastic.co/u/orlenkoda5)\ **Replies:** 2\ **Last updated:** [November 1, 2025, 10:01am UTC](https://discuss.elastic.co/t/how-can-i-speed-up-tokenizing-in-elasticsearch/383141 "2025-11-01T10:01:10Z")
I use elasticsearch in social network product to receive and search documents (posts) created by users but there is a problem with searching just created document, it appears in search results after a while (1-2 minutes)… --- ## [Log Source Stopped Working](https://discuss.elastic.co/t/log-source-stopped-working/389423)
**Author:** [@tortnike.e](https://discuss.elastic.co/u/tortnike.e)\ **Replies:** 1\ **Last updated:** [August 11, 2026, 11:35am UTC](https://discuss.elastic.co/t/log-source-stopped-working/389423 "2026-08-11T11:35:49Z")
Hello Guys, How do you monitor log sources? I need to monitor some of Data Streams, when they are not sending logs, I need to be alerted. What do you suggest? I have created esql rule but sometimes it is not woking: F… --- ## [Elastic Security for SIEM On-Demand Windows-Endpoint stuck on starting/creating](https://discuss.elastic.co/t/elastic-security-for-siem-on-demand-windows-endpoint-stuck-on-starting-creating/383834)
**Author:** [@TigTogFlip](https://discuss.elastic.co/u/TigTogFlip)\ **Replies:** 1\ **Last updated:** [December 6, 2025, 12:21pm UTC](https://discuss.elastic.co/t/elastic-security-for-siem-on-demand-windows-endpoint-stuck-on-starting-creating/383834 "2025-12-06T12:21:51Z")
Course: Elastic Security for SIEM On-Demand Question: Within the Strigo Environment, the Windows-Endpoint VM is not starting. The status is stuck on starting, while in the creating phase. The lab-machine and CTFd VM… --- ## [Agentic AI](https://discuss.elastic.co/t/agentic-ai/382945)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [October 26, 2025, 1:12am UTC](https://discuss.elastic.co/t/agentic-ai/382945 "2025-10-26T01:12:43Z")
Hi Team, How can i leverage Agentic AI in elk stack? //Ankita --- ## [CEF processor](https://discuss.elastic.co/t/cef-processor/386165)
**Author:** [@Moe\_Hmaidan](https://discuss.elastic.co/u/Moe_Hmaidan)\ **Replies:** 4\ **Last updated:** [May 5, 2026, 3:42pm UTC](https://discuss.elastic.co/t/cef-processor/386165 "2026-05-05T15:42:35Z")
Does the newly introduced cef processor require license? --- ## [Snapshot disaster recovery settings only](https://discuss.elastic.co/t/snapshot-disaster-recovery-settings-only/383589)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 2\ **Last updated:** [November 21, 2025, 3:41pm UTC](https://discuss.elastic.co/t/snapshot-disaster-recovery-settings-only/383589 "2025-11-21T15:41:53Z")
Thanks to the valuable help of @leandrojmp I was able to successfully configure what was necessary to use the “Snapshot and restore” feature. I have another question: I don't have enough space for the snapshot to save… --- ## [How to exclude already-swiped users when using Elasticsearch for a dating app?](https://discuss.elastic.co/t/how-to-exclude-already-swiped-users-when-using-elasticsearch-for-a-dating-app/384278)
**Author:** [@dmelendez](https://discuss.elastic.co/u/dmelendez)\ **Replies:** 3\ **Last updated:** [December 29, 2025, 2:05pm UTC](https://discuss.elastic.co/t/how-to-exclude-already-swiped-users-when-using-elasticsearch-for-a-dating-app/384278 "2025-12-29T14:05:02Z")
I’m using Elasticsearch as a matching engine for a dating app. Right now each user is indexed with: a geo\_point filters like age, gender, preferences, activity status With this I make queries like find users wi… --- ## [Logstash elastic\_agent input: connection resets](https://discuss.elastic.co/t/logstash-elastic-agent-input-connection-resets/388898)
**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Replies:** 1\ **Last updated:** [August 13, 2026, 4:57am UTC](https://discuss.elastic.co/t/logstash-elastic-agent-input-connection-resets/388898 "2026-08-13T04:57:55Z")
I notice a lot of java.net.SocketException: Connection reset warnings in my Logstash logs. It seems this is related to the elastic\_agent input and is noticeably higher in combination with Defend. It also occurs on device… [Previous page](https://discuss.elastic.co/top.md?page=20&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=22&per_page=50)