# Top **URL:** https://discuss.elastic.co/top.md?page=4 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 5 --- ## [Data view - how to delete](https://discuss.elastic.co/t/data-view-how-to-delete/383037)
**Author:** [@Marek\_Galbavy](https://discuss.elastic.co/u/Marek_Galbavy)\ **Replies:** 6\ **Last updated:** [October 30, 2025, 8:43am UTC](https://discuss.elastic.co/t/data-view-how-to-delete/383037 "2025-10-30T08:43:19Z")
Hi how can i delete data views which are created by elastic? eg Latest cloud…. etc if i delete data views which i dont want they are created again. thx --- ## [Elastic Package Registry 1.38.0 Security Update (ESA-2026-27)](https://discuss.elastic.co/t/elastic-package-registry-1-38-0-security-update-esa-2026-27/386081)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 28, 2026, 9:11pm UTC](https://discuss.elastic.co/t/elastic-package-registry-1-38-0-security-update-esa-2026-27/386081 "2026-04-28T21:11:09Z")
Improper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity Bypass Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an atta… --- ## [Impact of CVE-2025-68161 on Elasticsearch](https://discuss.elastic.co/t/impact-of-cve-2025-68161-on-elasticsearch/384828)
**Author:** [@amolrm](https://discuss.elastic.co/u/amolrm)\ **Replies:** 2\ **Last updated:** [January 30, 2026, 4:13pm UTC](https://discuss.elastic.co/t/impact-of-cve-2025-68161-on-elasticsearch/384828 "2026-01-30T16:13:00Z")
hi, Is any version of Elaticsearch impacted by CVE-2025-68161 ? Thank you. --- ## [Kibana 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-25)](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-25/385813)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2026, 4:22pm UTC](https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-25/385813 "2026-04-08T16:22:12Z")
Incorrect Authorization in Kibana Fleet Leading to Information Disclosure Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122). A user with Fleet age… --- ## [Kibana 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-35)](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-35/384183)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:25pm UTC](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-35/384183 "2025-12-18T21:25:42Z")
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (ESA-2025-35) Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthent… --- ## [ML anomaly detection for log-volume drop detection and looking for real-world experiences (low\_count, high count)](https://discuss.elastic.co/t/ml-anomaly-detection-for-log-volume-drop-detection-and-looking-for-real-world-experiences-low-count-high-count/387299)
**Author:** [@battal](https://discuss.elastic.co/u/battal)\ **Replies:** 3\ **Last updated:** [July 22, 2026, 9:54am UTC](https://discuss.elastic.co/t/ml-anomaly-detection-for-log-volume-drop-detection-and-looking-for-real-world-experiences-low-count-high-count/387299 "2026-07-22T09:54:50Z")
Hello dear Elastic Community, I am new here. I'm building out log-source health monitoring across a multi-tenant ECE deployment and would love to hear how others have approached this with ML anomaly detection, especiall… --- ## [Kibana 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-38)](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-38/384186)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:28pm UTC](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-38/384186 "2025-12-18T21:28:18Z")
Kibana Improper Authorization (ESA-2025-38) Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even… --- ## [Kibana 9.3.3 Security Update (ESA-2026-40)](https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-40/386562)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:26pm UTC](https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-40/386562 "2026-05-28T19:26:45Z")
Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the oper… --- ## [False Positive Report – EXO Panda Installer (Elastic Detection)](https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082)
**Author:** [@Jude\_Tallent](https://discuss.elastic.co/u/Jude_Tallent)\ **Replies:** 1\ **Last updated:** [April 29, 2026, 9:29pm UTC](https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082 "2026-04-29T21:29:52Z")
Hello Elastic Team, I'm the owner of EXO Panda (exopanda.com), a legitimate macro and tutorial hub for Roblox players. I'm reaching out regarding a false positive detection by Elastic's engine on VirusTotal for our inst… --- ## [Packetbeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-30)](https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-30/384178)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:15pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-30/384178 "2025-12-18T21:15:08Z")
Packetbeat Improper Bounds Check (ESA-2025-30) Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cau… --- ## [Elastic Agent offline caching of events](https://discuss.elastic.co/t/elastic-agent-offline-caching-of-events/382925)
**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\ **Replies:** 6\ **Last updated:** [October 23, 2025, 7:03pm UTC](https://discuss.elastic.co/t/elastic-agent-offline-caching-of-events/382925 "2025-10-23T19:03:31Z")
If we have a fleet agent installed and then that agent goes offline with no “line of sight” to the elasticsearch/fleet server, how are events handled that are captured through integrations. Say you had an ubuntu host wit… --- ## [Can I use ESQL Lookup Join to match fields with different names?](https://discuss.elastic.co/t/can-i-use-esql-lookup-join-to-match-fields-with-different-names/385324)
**Author:** [@TSlump](https://discuss.elastic.co/u/TSlump)\ **Replies:** 7\ **Last updated:** [March 4, 2026, 1:33pm UTC](https://discuss.elastic.co/t/can-i-use-esql-lookup-join-to-match-fields-with-different-names/385324 "2026-03-04T13:33:03Z")
Hi, I have two indices with matching fields that I want to use for an ESQL Lookup Join, however, the fields in each index have different names. Am I still able to use a lookup join? As an example, I have a ‘customers’ … --- ## [Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187)](https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-4-security-update-esa-2026-187/390860)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:36pm UTC](https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-4-security-update-esa-2026-187/390860 "2026-10-06T18:36:48Z")
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In … --- ## [Elastic APM Java agent on Java 25 with inferred spans](https://discuss.elastic.co/t/elastic-apm-java-agent-on-java-25-with-inferred-spans/383042)
**Author:** [@rhuitl](https://discuss.elastic.co/u/rhuitl)\ **Replies:** 4\ **Last updated:** [September 28, 2026, 12:40pm UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-on-java-25-with-inferred-spans/383042 "2026-09-28T12:40:56Z")
I’d like to understand how to get inferred spans working with Java 25. It’s working with Java 17. Java agent version: 1.55.0 Java 25 (Azul) Profiling configuration options | APM Java agent says: “In addition only Java… --- ## [Seek Recommended Storage Type for Data Retention](https://discuss.elastic.co/t/seek-recommended-storage-type-for-data-retention/383945)
**Author:** [@houn\_thoeurt](https://discuss.elastic.co/u/houn_thoeurt)\ **Replies:** 3\ **Last updated:** [December 23, 2025, 7:24am UTC](https://discuss.elastic.co/t/seek-recommended-storage-type-for-data-retention/383945 "2025-12-23T07:24:14Z")
Dear Team, We would like to seek your recommendation on log data retention, as we are implementing the Elastic Stack on-premise. To align with regulatory requirements, we must store the data on NAS storage using the Hot… --- ## [Kibana 8.19.16 and 9.3.5 Security Update (ESA-2026-30)](https://discuss.elastic.co/t/kibana-8-19-16-and-9-3-5-security-update-esa-2026-30/386545)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:24pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-and-9-3-5-security-update-esa-2026-30/386545 "2026-05-28T19:24:06Z")
Path Traversal in Kibana Leading to Unauthorized Deletion of User Accounts A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with limited permissions cou… --- ## [Packetbeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-31)](https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-31/384179)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:16pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-31/384179 "2025-12-18T21:16:04Z")
Packetbeat Out-of-bounds Read (ESA-2025-31) Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service … --- ## [Upgrade to 9.x](https://discuss.elastic.co/t/upgrade-to-9-x/383126)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 6\ **Last updated:** [October 31, 2025, 2:21pm UTC](https://discuss.elastic.co/t/upgrade-to-9-x/383126 "2025-10-31T14:21:33Z")
Hello, I use ELK 8.8, 3-node cluster, I would like to upgrade to the newest version, is there an easy way to upgrade it? Perhaps there are 2 ways to upgrade but I don’t know which one will be better: a. build new clus… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-114)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-114/390087)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:44pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-114/390087 "2026-09-01T18:44:39Z")
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Objec… --- ## [Elastic for MSSP: What is the impact of a new space on kibana?](https://discuss.elastic.co/t/elastic-for-mssp-what-is-the-impact-of-a-new-space-on-kibana/388732)
**Author:** [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\ **Replies:** 4\ **Last updated:** [July 24, 2026, 4:39pm UTC](https://discuss.elastic.co/t/elastic-for-mssp-what-is-the-impact-of-a-new-space-on-kibana/388732 "2026-07-24T16:39:53Z")
Hello! Our main goal: As an MSSP, we want to create a multi-tenant subdivision for our customers. Each customer has an internal IT team who wants access to their Elastic Security Space. Useful information: Elastic … --- ## [Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-19)](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-19/385530)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:51pm UTC](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-19/385530 "2026-03-19T16:51:08Z")
Missing Authorization in Kibana Leading to Unauthorized Endpoint Response Action Configuration Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response… --- ## [Elasticsearch 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-43)](https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-43/387440)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-43/387440 "2026-07-01T13:51:51Z")
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Exce… --- ## [Kibana 8.19.16, 9.3.5, 9.4.2 Security Update (ESA-2026-35)](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-2-security-update-esa-2026-35/386554)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:25pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-2-security-update-esa-2026-35/386554 "2026-05-28T19:25:21Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user ca… --- ## [Probable Bug in HyperLogLogPlusPlus](https://discuss.elastic.co/t/probable-bug-in-hyperloglogplusplus/383620)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 4\ **Last updated:** [November 26, 2025, 6:09am UTC](https://discuss.elastic.co/t/probable-bug-in-hyperloglogplusplus/383620 "2025-11-26T06:09:14Z")
Hello everyone, Somehow I am facing an issue while running certain aggregation query when cardinality is high. The thread seems to be stuck at trace: "elasticsearch\[es-data-pz-listening4-es7-125-1b\]\[search\]\[T#12\]" #1… --- ## [Elasticsearch 7.17.24, 8.15.0 Security Update (ESA-2026-52)](https://discuss.elastic.co/t/elasticsearch-7-17-24-8-15-0-security-update-esa-2026-52/387447)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 2:04pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-24-8-15-0-security-update-esa-2026-52/387447 "2026-07-01T14:04:58Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authe… --- ## [Kibana 8.19.16 Security Update (ESA-2026-39)](https://discuss.elastic.co/t/kibana-8-19-16-security-update-esa-2026-39/386561)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:26pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-security-update-esa-2026-39/386561 "2026-05-28T19:26:30Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user wi… --- ## [ELK Kibana 9.3.1 How do we disable the AI Assistant?](https://discuss.elastic.co/t/elk-kibana-9-3-1-how-do-we-disable-the-ai-assistant/385822)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 7\ **Last updated:** [April 12, 2026, 6:02am UTC](https://discuss.elastic.co/t/elk-kibana-9-3-1-how-do-we-disable-the-ai-assistant/385822 "2026-04-12T06:02:46Z")
How can we disable the AI Assistant button on the top bar? --- ## [Hot/Warm/Cold phases being ignored. Data goes directly to Cold](https://discuss.elastic.co/t/hot-warm-cold-phases-being-ignored-data-goes-directly-to-cold/389910)
**Author:** [@Alberto\_Martinez](https://discuss.elastic.co/u/Alberto_Martinez)\ **Replies:** 7\ **Last updated:** [September 15, 2026, 12:41pm UTC](https://discuss.elastic.co/t/hot-warm-cold-phases-being-ignored-data-goes-directly-to-cold/389910 "2026-09-15T12:41:27Z")
Hello, As the title says, all my streams share a common ILM policy but somehow it is ignored. All nodes are capable of hot/warm/cold. It is a recent setup and we don't have separate roles yet. Any pointer to wha… --- ## [Packetbeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-29)](https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:13pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177 "2025-12-18T21:13:38Z")
Packetbeat Allocation of Resources Without Limits or Throttling (ESA-2025-29) Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC… --- ## [Kibana 9.2.8, and 9.3.2 Security Update (ESA-2026-37)](https://discuss.elastic.co/t/kibana-9-2-8-and-9-3-2-security-update-esa-2026-37/386557)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:25pm UTC](https://discuss.elastic.co/t/kibana-9-2-8-and-9-3-2-security-update-esa-2026-37/386557 "2026-05-28T19:25:55Z")
Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-… --- ## [Packetbeat 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-02)](https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:43pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520 "2026-01-13T20:43:19Z")
Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers (ESA-2026-02) Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buff… --- ## [Kibana 8.19.16, 9.3.5 Security Update (ESA-2026-33)](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-security-update-esa-2026-33/386551)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:24pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-security-update-esa-2026-33/386551 "2026-05-28T19:24:46Z")
Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disc… --- ## [Elasticsearch 8.17 → 8.19 upgrade: kNN now eagerly defaults "k = size", breaking aggregation-only queries](https://discuss.elastic.co/t/elasticsearch-8-17-8-19-upgrade-knn-now-eagerly-defaults-k-size-breaking-aggregation-only-queries/384628)
**Author:** [@shekhar\_k](https://discuss.elastic.co/u/shekhar_k)\ **Replies:** 5\ **Last updated:** [June 26, 2026, 7:11pm UTC](https://discuss.elastic.co/t/elasticsearch-8-17-8-19-upgrade-knn-now-eagerly-defaults-k-size-breaking-aggregation-only-queries/384628 "2026-06-26T19:11:15Z")
I’m upgrading Elasticsearch from 8.17.3 to 8.19.10 and ran into a behavioural change with kNN + aggregations that breaks an existing use case. What worked in 8.17.3: We use knn inside the query DSL (bool.must) together… --- ## [Unable to load dashboardin kibana in version 9.4 array size is \[164\] greater than 100](https://discuss.elastic.co/t/unable-to-load-dashboardin-kibana-in-version-9-4-array-size-is-164-greater-than-100/386720)
**Author:** [@ylm](https://discuss.elastic.co/u/ylm)\ **Replies:** 2\ **Last updated:** [July 20, 2026, 7:56am UTC](https://discuss.elastic.co/t/unable-to-load-dashboardin-kibana-in-version-9-4-array-size-is-164-greater-than-100/386720 "2026-07-20T07:56:12Z")
Since I update kibana from 9.3 to 9.4 I have the following message Unable to load dashboard Invalid response. \[panels\]: array size is \[164\], but cannot be greater than \[100\] When I look at a dashboard with a lot of pa… --- ## [Impact of CVE-2025-68161 on Elasticsearch v7.17.28](https://discuss.elastic.co/t/impact-of-cve-2025-68161-on-elasticsearch-v7-17-28/384825)
**Author:** [@amolrm](https://discuss.elastic.co/u/amolrm)\ **Replies:** 4\ **Last updated:** [January 30, 2026, 4:31pm UTC](https://discuss.elastic.co/t/impact-of-cve-2025-68161-on-elasticsearch-v7-17-28/384825 "2026-01-30T16:31:48Z")
Hi, Kindly let know if Elasticsearch v7.17.28 is impacted by CVE-2025-68161 CVE Details as follows - Description: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostna… --- ## [Windows Event 7009 - A timeout was reached (30000 milliseconds) while waiting for the Elastic Agent service to connect](https://discuss.elastic.co/t/windows-event-7009-a-timeout-was-reached-30000-milliseconds-while-waiting-for-the-elastic-agent-service-to-connect/383052)
**Author:** [@bgreen99](https://discuss.elastic.co/u/bgreen99)\ **Replies:** 4\ **Last updated:** [October 31, 2025, 12:55pm UTC](https://discuss.elastic.co/t/windows-event-7009-a-timeout-was-reached-30000-milliseconds-while-waiting-for-the-elastic-agent-service-to-connect/383052 "2025-10-31T12:55:04Z")
We are often getting a windows event code 7009 post reboot regarding elastic agent service not starting indicating: A timeout was reached (30000 milliseconds) while waiting for the Elastic Agent service to connect. This… --- ## [Kibana 8.19.16, 9.3.5, 9.4.1 Security Update (ESA-2026-32)](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-1-security-update-esa-2026-32/386548)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:24pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-1-security-update-esa-2026-32/386548 "2026-05-28T19:24:24Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user … --- ## [Open a point in time API error after Elastic Client upgrade](https://discuss.elastic.co/t/open-a-point-in-time-api-error-after-elastic-client-upgrade/383940)
**Author:** [@tcsbears](https://discuss.elastic.co/u/tcsbears)\ **Replies:** 2\ **Last updated:** [December 10, 2025, 9:48am UTC](https://discuss.elastic.co/t/open-a-point-in-time-api-error-after-elastic-client-upgrade/383940 "2025-12-10T09:48:49Z")
We are upgrading our application from Java 11 → 17 and Spring boot 2.x.x → 3.5.6. Before the upgrade, we used RestHighLevelClient 7.17 and Elasticsearch 7.17 on the server. We replaced RestHighLevelClient with Elastics… --- ## [Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-68)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-68/388571)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:23pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-68/388571 "2026-07-21T22:23:26Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged a… --- ## [Kibana 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-45)](https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-45/387442)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:56pm UTC](https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-45/387442 "2026-07-01T13:56:52Z")
Improper Input Validation in Kibana Leading to Denial of Service Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user can submit a s… --- ## [Kibana 9.4.4 Security Update (ESA-2026-73)](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-73/388576)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 11:05pm UTC](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-73/388576 "2026-07-21T23:05:08Z")
Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-leve… --- ## [Elastic Flush/fetch latency too high](https://discuss.elastic.co/t/elastic-flush-fetch-latency-too-high/383681)
**Author:** [@richard2](https://discuss.elastic.co/u/richard2)\ **Replies:** 8\ **Last updated:** [November 27, 2025, 8:57am UTC](https://discuss.elastic.co/t/elastic-flush-fetch-latency-too-high/383681 "2025-11-27T08:57:14Z")
Hello, from zabbix monitoring im getting a lot of notifications fetch/flush latency is too high. Are values within a margin or is it problem. In last 12 hours avg was 5000 ms max 34000ms Would changing durability to a… --- ## [Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-140)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-140/390158)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:01pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-140/390158 "2026-09-03T18:01:03Z")
Incorrect Authorization in Kibana Leading to Privilege Escalation Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster privilege dec… --- ## [ES Java Client 9.2.4 -\> 9.4.4 performance regression. HttpComponents 5.4.4 -\> 5.6 to blame?](https://discuss.elastic.co/t/es-java-client-9-2-4-9-4-4-performance-regression-httpcomponents-5-4-4-5-6-to-blame/388868)
**Author:** [@peedeeboy](https://discuss.elastic.co/u/peedeeboy)\ **Replies:** 2\ **Last updated:** [July 31, 2026, 4:22pm UTC](https://discuss.elastic.co/t/es-java-client-9-2-4-9-4-4-performance-regression-httpcomponents-5-4-4-5-6-to-blame/388868 "2026-07-31T16:22:33Z")
Hey friends :waving\_hand: We just upgraded all our ES clusters from 9.2.4 -\> 9.4.4. Server upgrade was buttery smooth, as always! :flexed\_biceps: However, upgrading the ES Java client from 9.2.4 to 9.4.4 we noticed a … --- ## [Upgrade from 8 to 9 resolve issues in bulk](https://discuss.elastic.co/t/upgrade-from-8-to-9-resolve-issues-in-bulk/384146)
**Author:** [@Peterro](https://discuss.elastic.co/u/Peterro)\ **Replies:** 8\ **Last updated:** [December 18, 2025, 10:17am UTC](https://discuss.elastic.co/t/upgrade-from-8-to-9-resolve-issues-in-bulk/384146 "2025-12-18T10:17:48Z")
On the path to version 9 from version 7 I am currently on 8.19. Upgrade assistant shows a lot of deprecation issues that needs to be solved first. Mostly older indexes with compatibility version \< 8.0. It is possible to … --- ## [Is java client 7.17 compatible with elastic 8.18](https://discuss.elastic.co/t/is-java-client-7-17-compatible-with-elastic-8-18/384194)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 8\ **Last updated:** [January 2, 2026, 7:40am UTC](https://discuss.elastic.co/t/is-java-client-7-17-compatible-with-elastic-8-18/384194 "2026-01-02T07:40:07Z")
We are using Elastic stack version 8.9 currently and Java api client 7.17. we want to upgrade to 9.x. From 8.9 we are migrating to 8.18 or 8.19, then from 8.19 version to 9.x. How should we upgrade java client? --- ## [Understanding forcemerge with only\_expunge\_deletes](https://discuss.elastic.co/t/understanding-forcemerge-with-only-expunge-deletes/383924)
**Author:** [@ma\_br](https://discuss.elastic.co/u/ma_br)\ **Replies:** 2\ **Last updated:** [December 29, 2025, 2:28am UTC](https://discuss.elastic.co/t/understanding-forcemerge-with-only-expunge-deletes/383924 "2025-12-29T02:28:17Z")
My scenario is the following: i have a live index with a lot of updates that runs out of disk space at some time. The reason is that after some time i have a lot of max size segments (5gb) but the deleted document coun… --- ## [Elastic OTel Java 1.10.0 Security Update (ESA-2026-22 / GHSA-xw7x-h9fj-p2c7)](https://discuss.elastic.co/t/elastic-otel-java-1-10-0-security-update-esa-2026-22-ghsa-xw7x-h9fj-p2c7/385700)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 30, 2026, 2:17pm UTC](https://discuss.elastic.co/t/elastic-otel-java-1-10-0-security-update-esa-2026-22-ghsa-xw7x-h9fj-p2c7/385700 "2026-03-30T14:17:53Z")
Dependency on Vulnerable Third-Party Component in Elastic OTel Java Leading to Remote Code Execution Dependency on Vulnerable Third-Party Component (CWE-1395) exists in Elastic OTel Java via a dependency on OpenTelemetr… --- ## [Kibana 8.19.16, and 9.3.5 Security Update (ESA-2026-36)](https://discuss.elastic.co/t/kibana-8-19-16-and-9-3-5-security-update-esa-2026-36/386556)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:25pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-and-9-3-5-security-update-esa-2026-36/386556 "2026-05-28T19:25:38Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-pri… --- ## [Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-56)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-56/388555)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 7:44pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-56/388555 "2026-07-21T19:44:36Z")
Incorrect Authorization in Elasticsearch Leading to Information Disclosure Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authori… [Previous page](https://discuss.elastic.co/top.md?page=3&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=5&per_page=50)