# Top

**URL:** https://discuss.elastic.co/top.md?page=3

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 4

---

## [How to measure daily log volume (count and size) in Elasticsearch?](https://discuss.elastic.co/t/how-to-measure-daily-log-volume-count-and-size-in-elasticsearch/384485)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 3\
**Last updated:** [January 13, 2026, 3:30pm UTC](https://discuss.elastic.co/t/how-to-measure-daily-log-volume-count-and-size-in-elasticsearch/384485 "2026-01-13T15:30:00Z")

</div>

Hi Elastic community, I’m looking for a reliable way to track the amount of logs we are receiving in our Elasticsearch/ELK stack on a daily basis. Specifically, I’d like to know: The number of logs ingested per day. …

---

## [Kibana 8.19.7, 9.1.7, 9.2.1 Security Update (ESA-2025-25)](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-9-2-1-security-update-esa-2025-25/383379)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [November 12, 2025, 9:33am UTC](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-9-2-1-security-update-esa-2025-25/383379 "2025-11-12T09:33:52Z")

</div>

Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (ESA-2025-25) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Kibana can lead to DOM-ba…

---

## [Elasticsearch Migration from Windows to Linux – Swap Enabled and SELinux Enforcing](https://discuss.elastic.co/t/elasticsearch-migration-from-windows-to-linux-swap-enabled-and-selinux-enforcing/388113)

<div class="topic-metadata">

**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\
**Replies:** 5\
**Last updated:** [July 15, 2026, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-migration-from-windows-to-linux-swap-enabled-and-selinux-enforcing/388113 "2026-07-15T09:58:57Z")

</div>

Hi Team, We are migrating our Elasticsearch 9.1.3 cluster from Windows Server to RHEL Linux (9.8). The environment consists of 2 dedicated master nodes, 4 data nodes, nodes, and 2 Logstash nodes. As part of the Linux p…

---

## [Kibana 9.3.1 Security Update (ESA-2026-17)](https://discuss.elastic.co/t/kibana-9-3-1-security-update-esa-2026-17/385253)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [February 26, 2026, 4:55pm UTC](https://discuss.elastic.co/t/kibana-9-3-1-security-update-esa-2026-17/385253 "2026-02-26T16:55:40Z")

</div>

Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF) Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) ex…

---

## [Is elastic.aiops.work an official site?](https://discuss.elastic.co/t/is-elastic-aiops-work-an-official-site/384475)

<div class="topic-metadata">

**Author:** [@wildflower](https://discuss.elastic.co/u/wildflower)\
**Replies:** 5\
**Last updated:** [January 16, 2026, 10:24pm UTC](https://discuss.elastic.co/t/is-elastic-aiops-work-an-official-site/384475 "2026-01-16T22:24:02Z")

</div>

I’ve noticed recently that many, or most, of my search results for Elastic documentation are taking me elastic\[.\]aiops\[.\]work. This hosts what looks like a clone of the main elastic.co website, though with either older i…

---

## [Predict Full Disk Usage Date](https://discuss.elastic.co/t/predict-full-disk-usage-date/382847)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [October 20, 2025, 8:32pm UTC](https://discuss.elastic.co/t/predict-full-disk-usage-date/382847 "2025-10-20T20:32:45Z")

</div>

Hello, How can I predict the date the disk will be full like this: I tried Elastic ML and used it to forecast, but I am not sure how to produce a date that can be added to a dashboard?

---

## [Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-178)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-178/390164)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 6:03pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-178/390164 "2026-09-03T18:03:25Z")

</div>

Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured …

---

## [Elastic Cloud Enterprise (ECE) 3.8.3 and 4.0.3 Security Update (ESA-2025-22)](https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-3-and-4-0-3-security-update-esa-2025-22/383132)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [October 31, 2025, 5:36pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-3-and-4-0-3-security-update-esa-2025-22/383132 "2025-10-31T17:36:53Z")

</div>

Elastic Cloud Enterprise Improper Authorization (ESA-2025-22) Improper Authorization in Elastic Cloud Enterprise can lead to Privilege Escalation where the built-in readonly user can call APIs that should not be allowed…

---

## [Elastic AI Agent Builder skills](https://discuss.elastic.co/t/elastic-ai-agent-builder-skills/387483)

<div class="topic-metadata">

**Author:** [@wilian.martins](https://discuss.elastic.co/u/wilian.martins)\
**Replies:** 2\
**Last updated:** [July 2, 2026, 6:34pm UTC](https://discuss.elastic.co/t/elastic-ai-agent-builder-skills/387483 "2026-07-02T18:34:33Z")

</div>

I\`m creating some agents in the agent builder but facing some high token usage. There is any place to share and download shared skills by the community to help agents and get better results?

---

## [Kibana 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-28)](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-28/384064)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 15, 2025, 10:15am UTC](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-28/384064 "2025-12-15T10:15:09Z")

</div>

Kibana Cross-site Scripting via the Integration Package Upload Functionality (ESA-2025-28) Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to re…

---

## [Forwarding detection alert status changes (acknowledged / closed) to an external system](https://discuss.elastic.co/t/forwarding-detection-alert-status-changes-acknowledged-closed-to-an-external-system/390784)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [September 30, 2026, 6:17pm UTC](https://discuss.elastic.co/t/forwarding-detection-alert-status-changes-acknowledged-closed-to-an-external-system/390784 "2026-09-30T18:17:33Z")

</div>

Hello, We forward Elastic Security detection alerts to an external system through a Webhook connector configured as a rule action. That works well for new alerts. However, the receiving side also requires every subseque…

---

## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-03)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-03/384521)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [January 13, 2026, 8:45pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-03/384521 "2026-01-13T20:45:44Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation (ESA-2026-03) Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocatio…

---

## [Kibana 8.19.13, 9.2.7, 9.3.2 Security Update (ESA-2026-20)](https://discuss.elastic.co/t/kibana-8-19-13-9-2-7-9-3-2-security-update-esa-2026-20/385535)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [March 19, 2026, 4:59pm UTC](https://discuss.elastic.co/t/kibana-8-19-13-9-2-7-9-3-2-security-update-esa-2026-20/385535 "2026-03-19T16:59:58Z")

</div>

Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of S…

---

## [Workflow ai.agent prompt gives completely different answer than when asking the same agent in the chat interface](https://discuss.elastic.co/t/workflow-ai-agent-prompt-gives-completely-different-answer-than-when-asking-the-same-agent-in-the-chat-interface/387391)

<div class="topic-metadata">

**Author:** [@Tiemen](https://discuss.elastic.co/u/Tiemen)\
**Replies:** 8\
**Last updated:** [July 16, 2026, 8:27am UTC](https://discuss.elastic.co/t/workflow-ai-agent-prompt-gives-completely-different-answer-than-when-asking-the-same-agent-in-the-chat-interface/387391 "2026-07-16T08:27:59Z")

</div>

So I'm messing around with workflows and found out that the answers i get from that prompt are completely different and less expansive than when I copy-paste that prompt into the chat with the exact same agent. this is t…

---

## [Using Kibana Spaces to Enable Multi-Tenancy](https://discuss.elastic.co/t/using-kibana-spaces-to-enable-multi-tenancy/383762)

<div class="topic-metadata">

**Author:** [@RedneckHutch](https://discuss.elastic.co/u/RedneckHutch)\
**Replies:** 1\
**Last updated:** [December 12, 2025, 11:59am UTC](https://discuss.elastic.co/t/using-kibana-spaces-to-enable-multi-tenancy/383762 "2025-12-12T11:59:36Z")

</div>

Hey all, We’re working on strengthening our Elastic deployment to better support a multi-tenant environment. Today, we’re handling multi-tenancy by using separate namespaces within agent policies in Fleet, which allows …

---

## [Elasticsearch 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-37)](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 9:27pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185 "2025-12-18T21:27:04Z")

</div>

Elasticsearch Allocation of Resources Without Limits or Throttling (ESA-2025-37) Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore priv…

---

## [Elasticsearch S3 Snapshot Repository - Is s3:DeleteObject Mandatory for S3 Repository and SLM?](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-repository-is-s3-deleteobject-mandatory-for-s3-repository-and-slm/388588)

<div class="topic-metadata">

**Author:** [@Shubham\_Khodpe](https://discuss.elastic.co/u/Shubham_Khodpe)\
**Replies:** 5\
**Last updated:** [July 22, 2026, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-repository-is-s3-deleteobject-mandatory-for-s3-repository-and-slm/388588 "2026-07-22T15:18:44Z")

</div>

Hi Team, We are configuring Elasticsearch 9.1.3 snapshots to an AWS S3 bucket using the repository-s3 plugin and would like to clarify whether s3:DeleteObject permission is mandatory. Environment Elasticsearch Version…

---

## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-04)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-04/384522)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [January 13, 2026, 8:47pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-04/384522 "2026-01-13T20:47:06Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Fleet (ESA-2026-04) Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specia…

---

## [Elasticsearch 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-33)](https://discuss.elastic.co/t/elasticsearch-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-33/384181)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-33/384181 "2025-12-18T21:17:50Z")

</div>

Elasticsearch Allocation of Resources Without Limits or Throttling (ESA-2025-33) Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Exc…

---

## [Trying to calculate MTTD (Mean Time To Detect)](https://discuss.elastic.co/t/trying-to-calculate-mttd-mean-time-to-detect/384517)

<div class="topic-metadata">

**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\
**Replies:** 4\
**Last updated:** [June 18, 2026, 12:00pm UTC](https://discuss.elastic.co/t/trying-to-calculate-mttd-mean-time-to-detect/384517 "2026-06-18T12:00:58Z")

</div>

Hello all, I have been trying to calculate the MTTD, which consists of the difference between the case creation date and the first update of the case. However, when updating the case, the updated\_at field gets updated a…

---

## [Visualize OTEL http.server.request.duration metric](https://discuss.elastic.co/t/visualize-otel-http-server-request-duration-metric/382841)

<div class="topic-metadata">

**Author:** [@david.michael](https://discuss.elastic.co/u/david.michael)\
**Replies:** 4\
**Last updated:** [October 20, 2025, 11:14pm UTC](https://discuss.elastic.co/t/visualize-otel-http-server-request-duration-metric/382841 "2025-10-20T23:14:44Z")

</div>

I’m currently using the elastic-otel-java agent to instrument Java based applications and have enabled the OTEL\_INSTRUMENTATION\_HTTP\_SERVER\_EMIT\_EXPERIMENTAL\_TELEMETRY option which outputs a new metric called http.server…

---

## [Upgrading (Critical Deprecations...)](https://discuss.elastic.co/t/upgrading-critical-deprecations/383424)

<div class="topic-metadata">

**Author:** [@Hannah\_J\_Swystun](https://discuss.elastic.co/u/Hannah_J_Swystun)\
**Replies:** 6\
**Last updated:** [November 14, 2025, 1:27pm UTC](https://discuss.elastic.co/t/upgrading-critical-deprecations/383424 "2025-11-14T13:27:13Z")

</div>

Hello everybody, I would like to upgrade from v.8.17.0 to 8.19.4 do this criticals deprecation issues will block my upgrade please ?

---

## [Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-128)](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-128/389539)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:49am UTC](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-128/389539 "2026-08-13T10:49:09Z")

</div>

Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys Description: Improper Privilege Management (CWE-269) in Kibana Fleet can lead to privilege escalation via Privilege Escalation…

---

## [Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-13)](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-13/385249)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [February 26, 2026, 4:53pm UTC](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-13/385249 "2026-02-26T16:53:12Z")

</div>

Improper Input Validation in Kibana Leading to Denial of Service Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CA…

---

## [DNS Activity Data from Elastic Defend](https://discuss.elastic.co/t/dns-activity-data-from-elastic-defend/390171)

<div class="topic-metadata">

**Author:** [@RalphDibney](https://discuss.elastic.co/u/RalphDibney)\
**Replies:** 7\
**Last updated:** [September 10, 2026, 8:58am UTC](https://discuss.elastic.co/t/dns-activity-data-from-elastic-defend/390171 "2026-09-10T08:58:51Z")

</div>

Hey Elastic Community, after realizing that our Elastic Defend DNS data collected in our Windows machines has some data missing, we found some threads here in the community about it: Missing DNS requests on Windows mac…

---

## [Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-74)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-74/388577)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [July 21, 2026, 11:08pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-74/388577 "2026-07-21T23:08:36Z")

</div>

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An a…

---

## [Kibana 8.19.18, 9.3.7, 9.4.3 Security Update (ESA-2026-59)](https://discuss.elastic.co/t/kibana-8-19-18-9-3-7-9-4-3-security-update-esa-2026-59/388558)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [July 21, 2026, 8:11pm UTC](https://discuss.elastic.co/t/kibana-8-19-18-9-3-7-9-4-3-security-update-esa-2026-59/388558 "2026-07-21T20:11:35Z")

</div>

Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can…

---

## [Kibana 8.19.7, 9.1.7, and 9.2.1 Security Update (ESA-2025-39)](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-39/384187)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 9:28pm UTC](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-39/384187 "2025-12-18T21:28:59Z")

</div>

Kibana Improper Authorization (ESA-2025-39) Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a craf…

---

## [Ingest Pipeline - Why Isn’t My Failure Processor Redirecting Failed Docs to a New Index?](https://discuss.elastic.co/t/ingest-pipeline-why-isn-t-my-failure-processor-redirecting-failed-docs-to-a-new-index/384619)

<div class="topic-metadata">

**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\
**Replies:** 3\
**Last updated:** [January 19, 2026, 3:23pm UTC](https://discuss.elastic.co/t/ingest-pipeline-why-isn-t-my-failure-processor-redirecting-failed-docs-to-a-new-index/384619 "2026-01-19T15:23:15Z")

</div>

Following the Elastic documentation for Handling pipeline failures I have added a failure processor which is supposed to change the \_index, but it does not seem to work as I thought. ▶ Failure Processors (.json) My Pi…

---

## [What Is the Best Way to Export MBOX to PDF With Attachments?](https://discuss.elastic.co/t/what-is-the-best-way-to-export-mbox-to-pdf-with-attachments/384927)

<div class="topic-metadata">

**Author:** [@Brant\_anson](https://discuss.elastic.co/u/Brant_anson)\
**Replies:** 1\
**Last updated:** [February 5, 2026, 10:04am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-export-mbox-to-pdf-with-attachments/384927 "2026-02-05T10:04:17Z")

</div>

I am working in a small organization, and we have several important email mailboxes saved in MBOX format from an old email client. Now, due to audit and legal documentation requirements, we need to convert MBOX files int…

---

## [Feedback AutoOps for On-Prem Cluster](https://discuss.elastic.co/t/feedback-autoops-for-on-prem-cluster/385479)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 4\
**Last updated:** [March 17, 2026, 10:18am UTC](https://discuss.elastic.co/t/feedback-autoops-for-on-prem-cluster/385479 "2026-03-17T10:18:01Z")

</div>

Dear All, We are using AutoOps for our on-prem cluster for about 5 months now (we connect AutoOps as soon as we heard of it at the end of october). After the first few hickups trying to install it, the installation was…

---

## [Kibana 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-24)](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-24/385812)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [April 8, 2026, 4:18pm UTC](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-24/385812 "2026-04-08T16:18:41Z")

</div>

Incorrect Authorization in Kibana Fleet Leading to Information Disclosure Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). A user with limited Fleet privile…

---

## [Metricbeat 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-01)](https://discuss.elastic.co/t/metricbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-01/384519)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [January 13, 2026, 8:42pm UTC](https://discuss.elastic.co/t/metricbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-01/384519 "2026-01-13T20:42:48Z")

</div>

Improper Input Validation in Metricbeat Leading to Denial of Service (ESA-2026-01) Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service via Input Data Mani…

---

## [Kibana 8.19.17 fails to start after upgrade with FATAL Error \[ERR\_REQUIRE\_ESM\] in @elastic/charts](https://discuss.elastic.co/t/kibana-8-19-17-fails-to-start-after-upgrade-with-fatal-error-err-require-esm-in-elastic-charts/387406)

<div class="topic-metadata">

**Author:** [@JPPereira](https://discuss.elastic.co/u/JPPereira)\
**Replies:** 4\
**Last updated:** [July 7, 2026, 4:07pm UTC](https://discuss.elastic.co/t/kibana-8-19-17-fails-to-start-after-upgrade-with-fatal-error-err-require-esm-in-elastic-charts/387406 "2026-07-07T16:07:51Z")

</div>

Hi everyone, I am experiencing a crash loop with Kibana version 8.19.17 after upgrade on Rocky Linux 9.8 (Kernel 5.14). The service starts but crashes and restarts every ~20 seconds. Error Logs Here is the fatal error …

---

## [Feedback for ransomware correlation using Elastic](https://discuss.elastic.co/t/feedback-for-ransomware-correlation-using-elastic/388311)

<div class="topic-metadata">

**Author:** [@After\_Marsupial\_3531](https://discuss.elastic.co/u/After_Marsupial_3531)\
**Replies:** 3\
**Last updated:** [July 13, 2026, 4:40pm UTC](https://discuss.elastic.co/t/feedback-for-ransomware-correlation-using-elastic/388311 "2026-07-13T16:40:28Z")

</div>

Hello everyone, I'm currently working on an Alert/workflow that aims to proactively trigger when a ransomware pattern is detected. Our SOC uses Elastic Security as both the SIEM and EDR. To build it, I started from rea…

---

## [Elasticsearch 8.19.8, 9.1.8 Security Update (ESA-2026-18)](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-security-update-esa-2026-18/385534)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [March 19, 2026, 4:59pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-security-update-esa-2026-18/385534 "2026-03-19T16:59:18Z")

</div>

Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution Dependency on Vulnerable Third-Party Component (CWE-1395) exists in PyTorch used by the machine learning model loading component in Ela…

---

## [Exceptions in rules through DaC](https://discuss.elastic.co/t/exceptions-in-rules-through-dac/384790)

<div class="topic-metadata">

**Author:** [@proclick](https://discuss.elastic.co/u/proclick)\
**Replies:** 2\
**Last updated:** [February 9, 2026, 9:43pm UTC](https://discuss.elastic.co/t/exceptions-in-rules-through-dac/384790 "2026-02-09T21:43:35Z")

</div>

Greetings, I am not sure that I use right category so I am sorry in advance. Is it possible to add exceptions to the rule using Detection as Code from Elastic directly in the rule file (.toml) without creating a Shared…

---

## [Disable AI Assistant in Kibana 9.2.1](https://discuss.elastic.co/t/disable-ai-assistant-in-kibana-9-2-1/383550)

<div class="topic-metadata">

**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\
**Replies:** 4\
**Last updated:** [November 20, 2025, 1:46pm UTC](https://discuss.elastic.co/t/disable-ai-assistant-in-kibana-9-2-1/383550 "2025-11-20T13:46:05Z")

</div>

Hi Everyone, I want to disable the AI Assistent in Kibana 9.2.1, how to do that? I noticed on the documentation Manage access to AI features | Elastic Docs that can be done in GenAI Settings page, but I don’t find it (a…

---

## [Clarification issue in ColPali late interaction article: Hamming distance vs XOR value](https://discuss.elastic.co/t/clarification-issue-in-colpali-late-interaction-article-hamming-distance-vs-xor-value/384510)

<div class="topic-metadata">

**Author:** [@Mohammad\_Saeed\_Dalil](https://discuss.elastic.co/u/Mohammad_Saeed_Dalil)\
**Replies:** 2\
**Last updated:** [January 14, 2026, 10:11am UTC](https://discuss.elastic.co/t/clarification-issue-in-colpali-late-interaction-article-hamming-distance-vs-xor-value/384510 "2026-01-14T10:11:06Z")

</div>

I would like to report a conceptual inconsistency in the following article: Issue summary In the section describing binary quantization and similarity scoring, the article states: “Simple binary quantization will tr…

---

## [Firewall Detection Rules](https://discuss.elastic.co/t/firewall-detection-rules/386399)

<div class="topic-metadata">

**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\
**Replies:** 6\
**Last updated:** [May 26, 2026, 7:58pm UTC](https://discuss.elastic.co/t/firewall-detection-rules/386399 "2026-05-26T19:58:29Z")

</div>

I have a use case where i need to collect logs from firewall ( checkpoint ) so ,i did that but now the thing is i want to enable detection rules(as we are running dummy attacks ) for firewall (like we can do wo for windo…

---

## [Kibana 7.17.15, 8.11.1 Security Update (ESA-2026-53)](https://discuss.elastic.co/t/kibana-7-17-15-8-11-1-security-update-esa-2026-53/387449)

<div class="topic-metadata">

**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\
**Replies:** 0\
**Last updated:** [July 1, 2026, 2:05pm UTC](https://discuss.elastic.co/t/kibana-7-17-15-8-11-1-security-update-esa-2026-53/387449 "2026-07-01T14:05:44Z")

</div>

Improper Output Neutralization for Logs in Kibana Leading to Log Injection Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacke…

---

## [Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-12)](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-12/385248)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [February 26, 2026, 4:52pm UTC](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-12/385248 "2026-02-26T16:52:37Z")

</div>

Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privil…

---

## [Kibana 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-26)](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-26/385814)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [April 8, 2026, 4:25pm UTC](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-26/385814 "2026-04-08T16:25:26Z")

</div>

Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user wi…

---

## [Kibana 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-36)](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-36/384184)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 9:26pm UTC](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-36/384184 "2025-12-18T21:26:25Z")

</div>

Kibana Allocation of Resources Without Limits or Throttling (ESA-2025-36) Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocat…

---

## [Help troubleshooting Elastic APM Integration: Installation Error - Input Not Supported](https://discuss.elastic.co/t/help-troubleshooting-elastic-apm-integration-installation-error-input-not-supported/383931)

<div class="topic-metadata">

**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\
**Replies:** 8\
**Last updated:** [December 17, 2025, 10:12pm UTC](https://discuss.elastic.co/t/help-troubleshooting-elastic-apm-integration-installation-error-input-not-supported/383931 "2025-12-17T22:12:20Z")

</div>

Kibana version: v 9.1.5 Elasticsearch version: 9.1.5 Elastic APM: 9.1.5 I'm having problems installing the Elastic APM integration on around half of my Fleet Agents. Getting the error: input not supported, have tried …

---

## [Auditd Logs 3.24.1 - "Use auditd parser" fails on Elastic 9.3.3 with Missing helper: semverSatisfies](https://discuss.elastic.co/t/auditd-logs-3-24-1-use-auditd-parser-fails-on-elastic-9-3-3-with-missing-helper-semversatisfies/389780)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [August 19, 2026, 2:20pm UTC](https://discuss.elastic.co/t/auditd-logs-3-24-1-use-auditd-parser-fails-on-elastic-9-3-3-with-missing-helper-semversatisfies/389780 "2026-08-19T14:20:03Z")

</div>

Hi all, We are testing the latest Auditd Logs integration, version 3.24.1, on an Elastic Stack running 9.3.3. The integration now has the experimental option: Use auditd parser (experimental) The description sounds…

---

## [Elasticsearch 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-184)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-3-security-update-esa-2026-184/390688)

<div class="topic-metadata">

**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\
**Replies:** 0\
**Last updated:** [September 25, 2026, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-3-security-update-esa-2026-184/390688 "2026-09-25T08:35:53Z")

</div>

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Vers…

---

## [Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-199)](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-199/390874)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-199/390874 "2026-10-06T18:53:22Z")

</div>

Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a sp…

---

## [Kibana 8.19.11, 9.2.5 Security Update (ESA-2026-14)](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-14/385250)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [February 26, 2026, 4:53pm UTC](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-14/385250 "2026-02-26T16:53:47Z")

</div>

Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Reg…

---

## [Kibana Fleet 8.19.16, 9.3.5, and 9.4.2 Security Update (ESA-2026-38)](https://discuss.elastic.co/t/kibana-fleet-8-19-16-9-3-5-and-9-4-2-security-update-esa-2026-38/386559)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [May 28, 2026, 7:26pm UTC](https://discuss.elastic.co/t/kibana-fleet-8-19-16-9-3-5-and-9-4-2-security-update-esa-2026-38/386559 "2026-05-28T19:26:13Z")

</div>

Improper Input Validation in Kibana Fleet Leading to Privilege Escalation Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user wi…

[Previous page](https://discuss.elastic.co/top.md?page=2&per_page=50)

[Next page](https://discuss.elastic.co/top.md?page=4&per_page=50)
