# Top **URL:** https://discuss.elastic.co/top.md?page=5 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 6 --- ## [False Positive](https://discuss.elastic.co/t/false-positive/389749)
**Author:** [@jedikeeper](https://discuss.elastic.co/u/jedikeeper)\ **Replies:** 7\ **Last updated:** [August 24, 2026, 9:49pm UTC](https://discuss.elastic.co/t/false-positive/389749 "2026-08-24T21:49:27Z")
Hello, I understand that false positives require manual analysis by malware engineers, and that you will only take action if the False Positive is officially confirmed to be 100% safe. However, please understand that en… --- ## [ES|QL date histogram?](https://discuss.elastic.co/t/es-ql-date-histogram/383029)
**Author:** [@kmp](https://discuss.elastic.co/u/kmp)\ **Replies:** 4\ **Last updated:** [October 28, 2025, 3:32pm UTC](https://discuss.elastic.co/t/es-ql-date-histogram/383029 "2025-10-28T15:32:44Z")
I’m really trying to start to use ES|QL… About six months ago, I generated some queries (saved search sessions) and was wondering why (unlike the Classic search) there was no date histogram displayed. I was playing aro… --- ## [AI Assistant with local LLM](https://discuss.elastic.co/t/ai-assistant-with-local-llm/383091)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 8\ **Last updated:** [November 6, 2025, 9:21pm UTC](https://discuss.elastic.co/t/ai-assistant-with-local-llm/383091 "2025-11-06T21:21:25Z")
Hi, I’m trying to setup an AI connector for my local LLM. I have ngnix as reverse proxy with an API key. $ curl -s http://x.x.x.x:8080/api/chat -H "Authorization: $OKEY" -H "Content-Type: application/json" -d '{ … --- ## [Elastic APM Agent - CVE-2026-34480](https://discuss.elastic.co/t/elastic-apm-agent-cve-2026-34480/386100)
**Author:** [@leoluzh](https://discuss.elastic.co/u/leoluzh)\ **Replies:** 3\ **Last updated:** [May 18, 2026, 8:09pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-cve-2026-34480/386100 "2026-05-18T20:09:52Z")
When running a NeuVector scan, CVE-2026-34480 was found in the elastic-apm-agent artifact (version 1.55.6) for the log4j-core dependency. Vulnerabilities: 5, HIGH: 1, MEDIUM: 3, LOW: 1, UNKNOWN: 0 File: app/libs/apm-ag… --- ## [Dec 16th, 2025: \[EN\] Visualize Your Bosch Smart Home Data in Kibana](https://discuss.elastic.co/t/dec-16th-2025-en-visualize-your-bosch-smart-home-data-in-kibana/384014)
**Author:** [@walterra](https://discuss.elastic.co/u/walterra)\ **Replies:** 0\ **Last updated:** [December 16, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-16th-2025-en-visualize-your-bosch-smart-home-data-in-kibana/384014 "2025-12-16T08:00:21Z")
Ever wondered what's really happening in your smart home? When does your heating kick in? How does humidity change throughout the day? What's the temperature pattern in each room? If you have a Bosch Smart Home Controll… --- ## [Kibana 8.19.16, 9.3.5 Security Update (ESA-2026-34)](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-security-update-esa-2026-34/386552)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 28, 2026, 7:25pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-security-update-esa-2026-34/386552 "2026-05-28T19:25:03Z")
Improper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML Injection Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection. A … --- ## [Logstash 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-06)](https://discuss.elastic.co/t/logstash-8-19-10-9-1-10-9-2-4-security-update-esa-2026-06/385531)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:53pm UTC](https://discuss.elastic.co/t/logstash-8-19-10-9-1-10-9-2-4-security-update-esa-2026-06/385531 "2026-03-19T16:53:51Z")
Sensitive Information in Resource Not Removed Before Reuse in Logstash Leading to Access to Sensitive Information Dependency on Vulnerable Third-Party Component (CWE-1395) exists in org.lz4:lz4-java decompression librar… --- ## [\[ANNOUNCEMENT\] - FSCrawler 3.0 released](https://discuss.elastic.co/t/announcement-fscrawler-3-0-released/389938)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [August 26, 2026, 4:20pm UTC](https://discuss.elastic.co/t/announcement-fscrawler-3-0-released/389938 "2026-08-26T16:20:04Z")
The FSCrawler team is pleased to announce the FSCrawler 3.0 release! FSCrawler is a crawler for Elasticsearch that helps to index binary documents such as PDF, MS Office, and more. Usage Download FSCrawler 3.0: wge… --- ## [Error occurred during the signature verification](https://discuss.elastic.co/t/error-occurred-during-the-signature-verification/389364)
**Author:** [@yoitsdope](https://discuss.elastic.co/u/yoitsdope)\ **Replies:** 2\ **Last updated:** [August 12, 2026, 1:25pm UTC](https://discuss.elastic.co/t/error-occurred-during-the-signature-verification/389364 "2026-08-12T13:25:50Z")
on my kali linux system every time i run apt upgrade i get this error Warning: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP sign… --- ## [What Can I Do with Elastic SIEM Free Tier? (Capabilities and Limitations)](https://discuss.elastic.co/t/what-can-i-do-with-elastic-siem-free-tier-capabilities-and-limitations/383103)
**Author:** [@cyberfury](https://discuss.elastic.co/u/cyberfury)\ **Replies:** 1\ **Last updated:** [October 30, 2025, 2:01pm UTC](https://discuss.elastic.co/t/what-can-i-do-with-elastic-siem-free-tier-capabilities-and-limitations/383103 "2025-10-30T14:01:42Z")
Hi everyone, I’ve successfully installed on premises Elasticsearch, Logstash, Kibana, and Elastic Agent/Fleet Server on my Ubuntu server. I’m now exploring the SIEM features in the Elastic Stack free tier, but I’m a bit… --- ## [Security Update Cadence Concern - Too Frequent for Enterprise Upgrade Cycles and Recurring Fleet Vulnerabilities](https://discuss.elastic.co/t/security-update-cadence-concern-too-frequent-for-enterprise-upgrade-cycles-and-recurring-fleet-vulnerabilities/386569)
**Author:** [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Replies:** 4\ **Last updated:** [August 13, 2026, 12:37pm UTC](https://discuss.elastic.co/t/security-update-cadence-concern-too-frequent-for-enterprise-upgrade-cycles-and-recurring-fleet-vulnerabilities/386569 "2026-08-13T12:37:55Z")
Hi Elastic team and community, I want to raise a concern around the frequency of security updates and the recurring nature of vulnerabilities in the Fleet plugin specifically. Looking at the Security Announcements foru… --- ## [Elasticsearch 8.19.18, 9.3.7, 9.4.4 Security Update (ESA-2026-57)](https://discuss.elastic.co/t/elasticsearch-8-19-18-9-3-7-9-4-4-security-update-esa-2026-57/388556)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 8:01pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-18-9-3-7-9-4-4-security-update-esa-2026-57/388556 "2026-07-21T20:01:46Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-priv… --- ## [Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-64)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-64/388565)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 9:01pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-64/388565 "2026-07-21T21:01:02Z")
Reachable Assertion in Elasticsearch Leading to Denial of Service Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request … --- ## [Elasticsearch 8.19.19, 9.3.8, 9.4.4, 9.5.1 Security Update (ESA-2026-143)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-9-5-1-security-update-esa-2026-143/390094)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:47pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-9-5-1-security-update-esa-2026-143/390094 "2026-09-01T18:47:36Z")
Missing Authorization in Elasticsearch Leading to Information Disclosure Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). … --- ## [Elasticsearch 8.19.15, 9.2.9, 9.3.4 Security Update (ESA-2026-60)](https://discuss.elastic.co/t/elasticsearch-8-19-15-9-2-9-9-3-4-security-update-esa-2026-60/388559)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 8:17pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-15-9-2-9-9-3-4-security-update-esa-2026-60/388559 "2026-07-21T20:17:24Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user wit… --- ## [Can Elastic Defend Event Collection interfere with software installation?](https://discuss.elastic.co/t/can-elastic-defend-event-collection-interfere-with-software-installation/389935)
**Author:** [@marrc.rousseau](https://discuss.elastic.co/u/marrc.rousseau)\ **Replies:** 5\ **Last updated:** [September 9, 2026, 4:43pm UTC](https://discuss.elastic.co/t/can-elastic-defend-event-collection-interfere-with-software-installation/389935 "2026-09-09T16:43:35Z")
Hello, I have a Windows server on which Elastic Defend is enabled, but only the Event Collection component is active. Nothing else is enabled — no malware protection, no ransomware protection, etc... The sole purpose i… --- ## [Kibana 8.19.15, 9.3.4 Security Update (ESA-2026-49)](https://discuss.elastic.co/t/kibana-8-19-15-9-3-4-security-update-esa-2026-49/387444)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:59pm UTC](https://discuss.elastic.co/t/kibana-8-19-15-9-3-4-security-update-esa-2026-49/387444 "2026-07-01T13:59:08Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocati… --- ## [Filebeat to Elastic Agent(otel collector) migration - 9.4.2](https://discuss.elastic.co/t/filebeat-to-elastic-agent-otel-collector-migration-9-4-2/387302)
**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\ **Replies:** 7\ **Last updated:** [July 7, 2026, 1:15pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-agent-otel-collector-migration-9-4-2/387302 "2026-07-07T13:15:03Z")
I am currently migrating our existing Filebeat-based log collection architecture to the Elastic Agent as OpenTelemetry Collector approach and would appreciate some clarification. I am following the "Elastic Agent as O… --- ## [Elastic Agent memory consumption](https://discuss.elastic.co/t/elastic-agent-memory-consumption/383034)
**Author:** [@mike123](https://discuss.elastic.co/u/mike123)\ **Replies:** 3\ **Last updated:** [December 4, 2025, 7:02pm UTC](https://discuss.elastic.co/t/elastic-agent-memory-consumption/383034 "2025-12-04T19:02:49Z")
Is there any ways to limit the memory used by elastic-agent. Elastic Agent and Endpoint are consuming around 2GB memory. This is too high for a tool like elastic agent. Any help/tips for reducing memory usage is highly a… --- ## [Elasticsearch-rest5-client isn't deployed to maven central repository](https://discuss.elastic.co/t/elasticsearch-rest5-client-isnt-deployed-to-maven-central-repository/383384)
**Author:** [@Ahmed\_Ashour](https://discuss.elastic.co/u/Ahmed_Ashour)\ **Replies:** 1\ **Last updated:** [November 12, 2025, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-rest5-client-isnt-deployed-to-maven-central-repository/383384 "2025-11-12T10:07:29Z")
It seems that elasticsearch-rest5-client 9.2.1 isn’t deployed to the maven central repository, although it is referenced by elasticsearch-java 9.2.1. Thanks. --- ## [Elasticsearch Engineer Learning (Changing Data) Module not loading environment](https://discuss.elastic.co/t/elasticsearch-engineer-learning-changing-data-module-not-loading-environment/389925)
**Author:** [@Etiosa](https://discuss.elastic.co/u/Etiosa)\ **Replies:** 3\ **Last updated:** [September 2, 2026, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-learning-changing-data-module-not-loading-environment/389925 "2026-09-02T16:21:16Z")
Hi, i have an issue, when i try to to load changing data module in the elastic course it will not load the environment for days now, i have tried different browsers and same thing and other modules open except this on… --- ## [Upcoming geoip.elastic.co storage backend migration](https://discuss.elastic.co/t/upcoming-geoip-elastic-co-storage-backend-migration/385901)
**Author:** [@agunnerson-elastic](https://discuss.elastic.co/u/agunnerson-elastic)\ **Replies:** 1\ **Last updated:** [April 22, 2026, 4:15pm UTC](https://discuss.elastic.co/t/upcoming-geoip-elastic-co-storage-backend-migration/385901 "2026-04-22T16:15:23Z")
The Elastic GeoIP service (geoip.elastic.co) is the default endpoint from which Elasticsearch's GeoIP processor downloads the database used for looking up ASN/city/country data for an IP address. On 2026-04-22 at 16:00 U… --- ## [Kibana 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-169)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-169/390119)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:37pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-169/390119 "2026-09-01T22:37:05Z")
Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorr… --- ## [Kibana Workflows and secrets](https://discuss.elastic.co/t/kibana-workflows-and-secrets/386028)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [April 25, 2026, 8:27am UTC](https://discuss.elastic.co/t/kibana-workflows-and-secrets/386028 "2026-04-25T08:27:41Z")
Hello, I’ve been experimenting with Kibana Workflows and really like the direction. It’s a powerful addition for automation and enrichment use cases. One thing I’m currently struggling with is securely handling secrets… --- ## [Elasticsearch-hadoop Spark 4 compatible release timelines](https://discuss.elastic.co/t/elasticsearch-hadoop-spark-4-compatible-release-timelines/389906)
**Author:** [@Nathan\_Grand](https://discuss.elastic.co/u/Nathan_Grand)\ **Replies:** 7\ **Last updated:** [August 26, 2026, 1:27pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-spark-4-compatible-release-timelines/389906 "2026-08-26T13:27:20Z")
Hi, I'd like to know when a Spark 4 compatible release of GitHub - elastic/elasticsearch-hadoop: Elasticsearch real-time search and analytics natively integrated with Hadoop · GitHub is expected? I believe this might be… --- ## [Server hangs due to high uses CPU and memory by elasticsearch or kibana](https://discuss.elastic.co/t/server-hangs-due-to-high-uses-cpu-and-memory-by-elasticsearch-or-kibana/389879)
**Author:** [@yogesh119905](https://discuss.elastic.co/u/yogesh119905)\ **Replies:** 7\ **Last updated:** [August 25, 2026, 4:02am UTC](https://discuss.elastic.co/t/server-hangs-due-to-high-uses-cpu-and-memory-by-elasticsearch-or-kibana/389879 "2026-08-25T04:02:57Z")
Kibana version: 9.5.0 Elasticsearch version: 9.5.0 Server OS version: 24.04.3 LTS (Noble Numbat) Original install method (e.g. download page, yum, from source, etc.): Docker Describe the bug: Kibana is consuming… --- ## [Kibana 8.16.3, 8.17.2 Security Update (ESA-2026-51)](https://discuss.elastic.co/t/kibana-8-16-3-8-17-2-security-update-esa-2026-51/387446)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 2:03pm UTC](https://discuss.elastic.co/t/kibana-8-16-3-8-17-2-security-update-esa-2026-51/387446 "2026-07-01T14:03:47Z")
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via Ac… --- ## [Can you track Windows Defender sample submission?](https://discuss.elastic.co/t/can-you-track-windows-defender-sample-submission/385705)
**Author:** [@Florian\_Heigl](https://discuss.elastic.co/u/Florian_Heigl)\ **Replies:** 4\ **Last updated:** [April 23, 2026, 12:29am UTC](https://discuss.elastic.co/t/can-you-track-windows-defender-sample-submission/385705 "2026-04-23T00:29:18Z")
I just had a popup from Windows Defender, it wanted confirmation for uploading a sample (some browser temp file). Elastic Agent+Defend is also running, the primary tool is still Windows Defender. In my Elastic Dashboard… --- ## [Kibana 9.4.1 xpack disabled not working anymore](https://discuss.elastic.co/t/kibana-9-4-1-xpack-disabled-not-working-anymore/386347)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 8\ **Last updated:** [May 28, 2026, 10:50pm UTC](https://discuss.elastic.co/t/kibana-9-4-1-xpack-disabled-not-working-anymore/386347 "2026-05-28T22:50:00Z")
I can't access Kibana with xpack security disabled since upgrading my test setup to 9.4.1 I'm proxying Kibana with nginx --- ## [Best way to reliably forward logs from Elasticsearch to multiple destinations using Logstash](https://discuss.elastic.co/t/best-way-to-reliably-forward-logs-from-elasticsearch-to-multiple-destinations-using-logstash/383730)
**Author:** [@Mahesh\_Kumar1](https://discuss.elastic.co/u/Mahesh_Kumar1)\ **Replies:** 1\ **Last updated:** [November 27, 2025, 1:49pm UTC](https://discuss.elastic.co/t/best-way-to-reliably-forward-logs-from-elasticsearch-to-multiple-destinations-using-logstash/383730 "2025-11-27T13:49:52Z")
Hi all, I am collecting logs from multiple sources (Syslog, SNMP, Windows EventLog,) and storing them in Elasticsearch. Now I need to forward these stored logs from Elasticsearch to multiple external destinations using… --- ## [RHEL 10 support for Elasticsearch 8 and 9](https://discuss.elastic.co/t/rhel-10-support-for-elasticsearch-8-and-9/384461)
**Author:** [@sblack](https://discuss.elastic.co/u/sblack)\ **Replies:** 3\ **Last updated:** [January 10, 2026, 11:34pm UTC](https://discuss.elastic.co/t/rhel-10-support-for-elasticsearch-8-and-9/384461 "2026-01-10T23:34:25Z")
Does Elasticsearch 8.18.X, 8.19.X and 9.X (plus Logstash, Kibana, Fleet and Beats) support RHEL 10? I am referring to the licensed version and not just the OSS version. A quick perusal indicates that there is no issues … --- ## [Where is Elasticsearch storing unmapped field](https://discuss.elastic.co/t/where-is-elasticsearch-storing-unmapped-field/388701)
**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\ **Replies:** 7\ **Last updated:** [July 24, 2026, 5:51am UTC](https://discuss.elastic.co/t/where-is-elasticsearch-storing-unmapped-field/388701 "2026-07-24T05:51:26Z")
I have an index created with index.mode=logsdb and index.mapping.source.mode=synthetic. The mapping also has dynamic: false. If I index a document containing an unmapped field, for example: { "@timestamp": "2026-07-2… --- ## [Kibana 8.18.9, 8.19.6, 9.0.8, 9.1.6 Security Update (ESA-2026-50)](https://discuss.elastic.co/t/kibana-8-18-9-8-19-6-9-0-8-9-1-6-security-update-esa-2026-50/387445)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 2:02pm UTC](https://discuss.elastic.co/t/kibana-8-18-9-8-19-6-9-0-8-9-1-6-security-update-esa-2026-50/387445 "2026-07-01T14:02:20Z")
Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional app… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-71)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-71/388574)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:51pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-71/388574 "2026-07-21T22:51:22Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacke… --- ## [Upgrade from 8.19.1 to 9.2.3 failed because of .security-7 index](https://discuss.elastic.co/t/upgrade-from-8-19-1-to-9-2-3-failed-because-of-security-7-index/384755)
**Author:** [@Balait4](https://discuss.elastic.co/u/Balait4)\ **Replies:** 5\ **Last updated:** [January 29, 2026, 1:48pm UTC](https://discuss.elastic.co/t/upgrade-from-8-19-1-to-9-2-3-failed-because-of-security-7-index/384755 "2026-01-29T13:48:42Z")
Hi, I upgrade the cluster from 7.16.1 to 8.19.1 as per the upgrade guide. The kibana ugprade assistant did’t report anything. Now I’m upgrading to version 9.2.3 where getting the below issue for security index. The inde… --- ## [Kibana 9.4.6, 9.5.3 Security Update (ESA-2026-175)](https://discuss.elastic.co/t/kibana-9-4-6-9-5-3-security-update-esa-2026-175/390163)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:03pm UTC](https://discuss.elastic.co/t/kibana-9-4-6-9-5-3-security-update-esa-2026-175/390163 "2026-09-03T18:03:02Z")
Incorrect Authorization in Kibana Leading to Information Disclosure Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CA… --- ## [Agents not "upgradeable"](https://discuss.elastic.co/t/agents-not-upgradeable/383437)
**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\ **Replies:** 7\ **Last updated:** [December 24, 2025, 5:52pm UTC](https://discuss.elastic.co/t/agents-not-upgradeable/383437 "2025-12-24T17:52:19Z")
Hello I have updated my cluster to 8.19.7, then upgraded Kibana to 8.19.7 (including a reboot) and manually updated the fleet servers to 8.19.7, because they were not shown as "upgradeable". Now two days later, still n… --- ## [Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-124)](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-124/389538)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:49am UTC](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-124/389538 "2026-08-13T10:49:06Z")
Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one … --- ## [Request for product remediation guidance – bundled Apache Log4j vulnerabilities in Elasticsearch/Logstash](https://discuss.elastic.co/t/request-for-product-remediation-guidance-bundled-apache-log4j-vulnerabilities-in-elasticsearch-logstash/386221)
**Author:** [@sankalita](https://discuss.elastic.co/u/sankalita)\ **Replies:** 1\ **Last updated:** [May 7, 2026, 4:43pm UTC](https://discuss.elastic.co/t/request-for-product-remediation-guidance-bundled-apache-log4j-vulnerabilities-in-elasticsearch-logstash/386221 "2026-05-07T16:43:37Z")
Security scans have identified vulnerable Apache Log4j Core versions bundled with Elasticsearch 8.19.14 and Logstash on the host. Nessus reports CVE‑2026‑34477 and CVE‑2026‑34480, requiring Log4j 2.25.3/2.25.4 or later. … --- ## [Device control enabled without license](https://discuss.elastic.co/t/device-control-enabled-without-license/388399)
**Author:** [@jumpingrock](https://discuss.elastic.co/u/jumpingrock)\ **Replies:** 4\ **Last updated:** [August 19, 2026, 4:40pm UTC](https://discuss.elastic.co/t/device-control-enabled-without-license/388399 "2026-08-19T16:40:30Z")
My stack is running on 9.4.3. It was a fresh install to that version. I have created a fleet policy with Elastic Defend. Where device control would be, I have this warning Device Control Upgrade to Elastic Enterpris… --- ## [Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-198)](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-198/390872)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:52pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-198/390872 "2026-10-06T18:52:02Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct an… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-63)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-63/388560)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 8:32pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-63/388560 "2026-07-21T20:32:06Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-pri… --- ## [Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-174)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-174/390162)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:02pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-174/390162 "2026-09-03T18:02:39Z")
Incorrect Authorization in Kibana Leading to Denial of Service Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). … --- ## [Query execution drastically increased after upgrade elastic cloud hosted deployment from v8.18.4 to v9.0.4](https://discuss.elastic.co/t/query-execution-drastically-increased-after-upgrade-elastic-cloud-hosted-deployment-from-v8-18-4-to-v9-0-4/382908)
**Author:** [@fpeter](https://discuss.elastic.co/u/fpeter)\ **Replies:** 8\ **Last updated:** [November 5, 2025, 6:14am UTC](https://discuss.elastic.co/t/query-execution-drastically-increased-after-upgrade-elastic-cloud-hosted-deployment-from-v8-18-4-to-v9-0-4/382908 "2025-11-05T06:14:38Z")
We had a really long query (it could be up to 30k lines), and in v8 it took around 50 ms. After upgrading to v9, the query took around 400–500 ms. When we profiled it, the results were essentially identical in profile.s… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-69)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-69/388572)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:28pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-69/388572 "2026-07-21T22:28:23Z")
Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification record… --- ## [Exam Result Timeline](https://discuss.elastic.co/t/exam-result-timeline/386369)
**Author:** [@Shary\_chahal](https://discuss.elastic.co/u/Shary_chahal)\ **Replies:** 4\ **Last updated:** [May 25, 2026, 8:44am UTC](https://discuss.elastic.co/t/exam-result-timeline/386369 "2026-05-25T08:44:46Z")
So after I finished my Observability certification exam what's the the timeline to get results I know its written 4-7 business days but I have heard people getting them in 3-4 hours as its checked by using automated scri… --- ## [Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185)](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:34pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859 "2026-10-06T18:34:52Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-priv… --- ## [Metricbeat 8.19.13, 9.2.5 Security Update (ESA-2026-09)](https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:54pm UTC](https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532 "2026-03-19T16:54:15Z")
Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote\_write HTTP handler in Metricbeat can lead Denial of S… --- ## [Packetbeat 8.19.11, 9.2.5 Security Update (ESA-2026-10)](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-10/385247)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:51pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-10/385247 "2026-02-26T16:51:41Z")
Improper Validation of Array Index in Packetbeat Leading to Denial of Service Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipu… --- ## [Elasticsearch 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-170)](https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-3-security-update-esa-2026-170/390681)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-3-security-update-esa-2026-170/390681 "2026-09-25T08:33:09Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected … [Previous page](https://discuss.elastic.co/top.md?page=4&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=6&per_page=50)