# Top **URL:** https://discuss.elastic.co/top.md?page=6 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 7 --- ## [Kibana 9.4.4 Security Update (ESA-2026-70)](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-70/388573)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:34pm UTC](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-70/388573 "2026-07-21T22:34:50Z")
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied iden… --- ## [Salesforce Integration - Resolving Salesforce instance URL Error](https://discuss.elastic.co/t/salesforce-integration-resolving-salesforce-instance-url-error/383693)
**Author:** [@BKgingersnap](https://discuss.elastic.co/u/BKgingersnap)\ **Replies:** 8\ **Last updated:** [December 15, 2025, 2:47pm UTC](https://discuss.elastic.co/t/salesforce-integration-resolving-salesforce-instance-url-error/383693 "2025-12-15T14:47:07Z")
I’m configuring the Salesforce Integration as described here: Salesforce Integration | Elastic integrations I am able to authenticate and generate an Salesforce Access Token using the test script in the document but whe… --- ## [Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-183)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-183/390687)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-183/390687 "2026-09-25T08:35:28Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Vers… --- ## [POSTFIX Ingest and the future of Logstash](https://discuss.elastic.co/t/postfix-ingest-and-the-future-of-logstash/390279)
**Author:** [@RalphDibney](https://discuss.elastic.co/u/RalphDibney)\ **Replies:** 6\ **Last updated:** [September 16, 2026, 12:40pm UTC](https://discuss.elastic.co/t/postfix-ingest-and-the-future-of-logstash/390279 "2026-09-16T12:40:22Z")
We have a mail gateway based on Postfix, and we want to get these logs into Elastic. For our product, our MSP that helps us with it has a logstash based integration that is also merges the mutliline log of postfix to on… --- ## [Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-197)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-197/390871)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:51pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-197/390871 "2026-10-06T18:51:14Z")
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fu… --- ## [Dec 6th, 2025: \[EN\] A little chat with your AutoOps](https://discuss.elastic.co/t/dec-6th-2025-en-a-little-chat-with-your-autoops/383721)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [December 6, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-2025-en-a-little-chat-with-your-autoops/383721 "2025-12-06T08:00:47Z")
This article is also available in French. AutoOps helps you diagnose issues in your Elasticsearch cluster by collecting, analyzing and correlating hundreds of metrics in real-time, providing root-cause analysis and a… --- ## [Kibana 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-129)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-129/389532)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-129/389532 "2026-08-13T10:48:47Z")
Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys Description: Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPE… --- ## [Refresh\_interval affects search time queries?](https://discuss.elastic.co/t/refresh-interval-affects-search-time-queries/383213)
**Author:** [@nascimento](https://discuss.elastic.co/u/nascimento)\ **Replies:** 3\ **Last updated:** [December 26, 2025, 6:04am UTC](https://discuss.elastic.co/t/refresh-interval-affects-search-time-queries/383213 "2025-12-26T06:04:29Z")
So I need to understand exactly, because I feel like the more I read, the more I don’t understand. If I ingest, let’s say just during nighttime, but I have my refresh\_interval set to 60s, during the day, when normal user… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-66)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-66/388568)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:01pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-66/388568 "2026-07-21T22:01:37Z")
Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to … --- ## [Kibana 9.4.8, 9.5.5 Security Update (ESA-2026-193)](https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:44pm UTC](https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866 "2026-10-06T18:44:15Z")
Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-141)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-141/390092)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:46pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-141/390092 "2026-09-01T18:46:43Z")
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsear… --- ## [Kibana 8.19.20, and 9.4.5 Security Update (ESA-2026-96)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-96/389528)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-96/389528 "2026-08-13T10:48:34Z")
Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on m… --- ## [Kibana 9.4.3 Security Update (ESA-2026-54)](https://discuss.elastic.co/t/kibana-9-4-3-security-update-esa-2026-54/388553)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 7:24pm UTC](https://discuss.elastic.co/t/kibana-9-4-3-security-update-esa-2026-54/388553 "2026-07-21T19:24:42Z")
Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information Exposure Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information e… --- ## [Kibana Log Threshold Alert Rule Trigger Problem when using multiple conditions](https://discuss.elastic.co/t/kibana-log-threshold-alert-rule-trigger-problem-when-using-multiple-conditions/384795)
**Author:** [@manzer](https://discuss.elastic.co/u/manzer)\ **Replies:** 8\ **Last updated:** [February 1, 2026, 5:54pm UTC](https://discuss.elastic.co/t/kibana-log-threshold-alert-rule-trigger-problem-when-using-multiple-conditions/384795 "2026-02-01T17:54:57Z")
Hi, I have created many alert rules in Kibana, however currently I am facing a strange issue, when I create Log Threshold Rule with single condition it is working file and Triggering the alert, but if I add multiple con… --- ## [ECE Monitoring - cgroup memory fields mapped as keyword instead of numeric](https://discuss.elastic.co/t/ece-monitoring-cgroup-memory-fields-mapped-as-keyword-instead-of-numeric/386861)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 4\ **Last updated:** [June 30, 2026, 10:04am UTC](https://discuss.elastic.co/t/ece-monitoring-cgroup-memory-fields-mapped-as-keyword-instead-of-numeric/386861 "2026-06-30T10:04:56Z")
Hello, I'm investigating CPU throttling and resource entitlement for Elasticsearch nodes running on Elastic Cloud Enterprise (ECE). While building dashboards from the \`.monitoring-es-\*\` indices, I noticed the following… --- ## [Kibana 8.19.22, 9.4.6 Security Update (ESA-2026-103)](https://discuss.elastic.co/t/kibana-8-19-22-9-4-6-security-update-esa-2026-103/390679)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:32am UTC](https://discuss.elastic.co/t/kibana-8-19-22-9-4-6-security-update-esa-2026-103/390679 "2026-09-25T08:32:22Z")
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthor… --- ## [Fleet server, policy, and integrations for Linux terminal](https://discuss.elastic.co/t/fleet-server-policy-and-integrations-for-linux-terminal/382981)
**Author:** [@Eren\_Cil](https://discuss.elastic.co/u/Eren_Cil)\ **Replies:** 6\ **Last updated:** [October 28, 2025, 1:20pm UTC](https://discuss.elastic.co/t/fleet-server-policy-and-integrations-for-linux-terminal/382981 "2025-10-28T13:20:54Z")
Hello everyone. I want to watch my Linux terminal with simple integrations and custom-defined rules. Right now, I’ve tried system, auditd, or both at the same time. But there is always something wrong with the fleet serv… --- ## [Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-154)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-154/390161)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:02pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-154/390161 "2026-09-03T18:02:15Z")
Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to u… --- ## [Kibana 9.4.7, 9.5.0 Security Update (ESA-2026-85)](https://discuss.elastic.co/t/kibana-9-4-7-9-5-0-security-update-esa-2026-85/390678)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:31am UTC](https://discuss.elastic.co/t/kibana-9-4-7-9-5-0-security-update-esa-2026-85/390678 "2026-09-25T08:31:59Z")
Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A n… --- ## [The response action does not work](https://discuss.elastic.co/t/the-response-action-does-not-work/385980)
**Author:** [@PatreKerier](https://discuss.elastic.co/u/PatreKerier)\ **Replies:** 8\ **Last updated:** [April 24, 2026, 9:19am UTC](https://discuss.elastic.co/t/the-response-action-does-not-work/385980 "2026-04-24T09:19:13Z")
Good afternoon! Tell me, please. I have created a custom rule defining the creation of a local user account, configured it so that the isolation of the host is performed using a "response action", but nothing happens. … --- ## [Optimizing wildcard and regex query performance on large indices in Elasticsearch](https://discuss.elastic.co/t/optimizing-wildcard-and-regex-query-performance-on-large-indices-in-elasticsearch/388642)
**Author:** [@Maaz](https://discuss.elastic.co/u/Maaz)\ **Replies:** 4\ **Last updated:** [July 24, 2026, 7:56am UTC](https://discuss.elastic.co/t/optimizing-wildcard-and-regex-query-performance-on-large-indices-in-elasticsearch/388642 "2026-07-24T07:56:06Z")
Hi everyone, I am working on tuning a search query pipeline in Elasticsearch and running into a performance bottleneck when executing high-frequency wildcard and regular expression searches against a rapidly growing ind… --- ## [Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-151)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-151/390159)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:01pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-3-security-update-esa-2026-151/390159 "2026-09-03T18:01:27Z")
Improper Control of Generation of Code in Kibana Leading to Privilege Escalation An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management… --- ## [Kibana 9.4.6, 9.5.3 Security Update (ESA-2026-153)](https://discuss.elastic.co/t/kibana-9-4-6-9-5-3-security-update-esa-2026-153/390160)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 3, 2026, 6:01pm UTC](https://discuss.elastic.co/t/kibana-9-4-6-9-5-3-security-update-esa-2026-153/390160 "2026-09-03T18:01:52Z")
Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature c… --- ## [Dec 19th, 2025: \[EN\] How we made Elastic more accessible in 2025](https://discuss.elastic.co/t/dec-19th-2025-en-how-we-made-elastic-more-accessible-in-2025/384132)
**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\ **Replies:** 0\ **Last updated:** [December 19, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2025-en-how-we-made-elastic-more-accessible-in-2025/384132 "2025-12-19T08:00:56Z")
At Elastic, building software with care for the people who rely on it means making accessibility a core part of product quality, it's not a side project for us. Over the last several months, our focus has been threefold:… --- ## [High ram.percent (98%) but low heap usage and high available memory](https://discuss.elastic.co/t/high-ram-percent-98-but-low-heap-usage-and-high-available-memory/386194)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [May 19, 2026, 9:43am UTC](https://discuss.elastic.co/t/high-ram-percent-98-but-low-heap-usage-and-high-available-memory/386194 "2026-05-19T09:43:20Z")
Hi everyone, I would like to clarify a memory usage scenario in our Elasticsearch cluster because internally there is some debate about whether this represents a real memory pressure issue or just normal Linux filesyste… --- ## [Impossible to build Elasticsearch 9.0 anymore](https://discuss.elastic.co/t/impossible-to-build-elasticsearch-9-0-anymore/383364)
**Author:** [@benjamingdocker](https://discuss.elastic.co/u/benjamingdocker)\ **Replies:** 7\ **Last updated:** [December 15, 2025, 2:00pm UTC](https://discuss.elastic.co/t/impossible-to-build-elasticsearch-9-0-anymore/383364 "2025-12-15T14:00:30Z")
Good morning :waving\_hand: I was trying to build ES 9.0.8 from sources but I am facing some issues. I am not a Java expert so please bear with me I probably do silly things here. However, I do need to build ES from sour… --- ## [Synthetics Recorder 1.4.15 Security Update (ESA-2026-16) - CVE-2025-6554 and CVE-2025-7657](https://discuss.elastic.co/t/synthetics-recorder-1-4-15-security-update-esa-2026-16-cve-2025-6554-and-cve-2025-7657/385252)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:55pm UTC](https://discuss.elastic.co/t/synthetics-recorder-1-4-15-security-update-esa-2026-16-cve-2025-6554-and-cve-2025-7657/385252 "2026-02-26T16:55:04Z")
Dependency on Vulnerable Third-Party Component in Synthetics Recorder Leading to Remote Code Execution Dependency on Vulnerable Third-Party Component (CWE-1395) exists in the bundled Chromium browser in Elastic Synthet… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-123)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-123/389504)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-123/389504 "2026-08-13T10:47:17Z")
Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operati… --- ## [Packetbeat 8.19.11, 9.2.5 Security Update (ESA-2026-11)](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:56pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533 "2026-03-19T16:56:17Z")
Improper Validation of Array Index in Packetbeat Leading to Denial of Service Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data M… --- ## [Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-176)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-176/390682)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-176/390682 "2026-09-25T08:33:33Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected … --- ## [Guide to Start a single-node cluster in Docker](https://discuss.elastic.co/t/guide-to-start-a-single-node-cluster-in-docker/383560)
**Author:** [@RobinSteil](https://discuss.elastic.co/u/RobinSteil)\ **Replies:** 5\ **Last updated:** [November 26, 2025, 11:08am UTC](https://discuss.elastic.co/t/guide-to-start-a-single-node-cluster-in-docker/383560 "2025-11-26T11:08:49Z")
I found this: Start a single-node cluster in Docker | Elastic Docs but I am probably misunderstanding something. The container does not work. The guide never discovery.type to single-node which is necessary by my unders… --- ## [Filebeat 8.19.18, 9.3.1 Security Update (ESA-2026-165)](https://discuss.elastic.co/t/filebeat-8-19-18-9-3-1-security-update-esa-2026-165/390118)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:36pm UTC](https://discuss.elastic.co/t/filebeat-8-19-18-9-3-1-security-update-esa-2026-165/390118 "2026-09-01T22:36:42Z")
Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker able to reach the Filebeat HTTP ingestion endpoint could send s… --- ## [Dec 8th, 2025: \[EN\] 🎁 The Twelve Days of A2A: A Christmas Carol for Developers](https://discuss.elastic.co/t/dec-8th-2025-en-the-twelve-days-of-a2a-a-christmas-carol-for-developers/383854)
**Author:** [@Justin\_Castilla](https://discuss.elastic.co/u/Justin_Castilla)\ **Replies:** 0\ **Last updated:** [December 8, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2025-en-the-twelve-days-of-a2a-a-christmas-carol-for-developers/383854 "2025-12-08T08:00:20Z")
:wrapped\_gift: The Twelve Days of A2A: A Christmas Carol for Developers 'Twas the Night Before Deployment... Picture this, friends: You're sitting by the fireplace, hot cocoa in hand, wondering how to explain agent… --- ## [Kibana 9.4.3 Security Update (ESA-2026-58)](https://discuss.elastic.co/t/kibana-9-4-3-security-update-esa-2026-58/388557)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 8:06pm UTC](https://discuss.elastic.co/t/kibana-9-4-3-security-update-esa-2026-58/388557 "2026-07-21T20:06:44Z")
Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytics Watchlist conf… --- ## [Elasticsearch migration from 7.17 to 8.15](https://discuss.elastic.co/t/elasticsearch-migration-from-7-17-to-8-15/384978)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 8\ **Last updated:** [February 11, 2026, 9:53pm UTC](https://discuss.elastic.co/t/elasticsearch-migration-from-7-17-to-8-15/384978 "2026-02-11T21:53:00Z")
We need to upgrade from ES 7.17.3 to 8.15.2. We have done the following so far: Ran Upgrade Assistant on 7.17.3 and fixed any reported “Critical” issues. No Critical issue is being reported now. Taken snapshot on a NA… --- ## [Kibana 8.19.13, 9.2.7, 9.3.2 Security Update (ESA-2026-46)](https://discuss.elastic.co/t/kibana-8-19-13-9-2-7-9-3-2-security-update-esa-2026-46/387443)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:57pm UTC](https://discuss.elastic.co/t/kibana-8-19-13-9-2-7-9-3-2-security-update-esa-2026-46/387443 "2026-07-01T13:57:44Z")
Incorrect Authorization in Kibana Leading to Information Disclosure Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACL… --- ## [Elastic Agent 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-150)](https://discuss.elastic.co/t/elastic-agent-8-19-21-9-4-6-9-5-2-security-update-esa-2026-150/390109)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:33pm UTC](https://discuss.elastic.co/t/elastic-agent-8-19-21-9-4-6-9-5-2-security-update-esa-2026-150/390109 "2026-09-01T22:33:15Z")
Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local p… --- ## [Kibana 9.3.7, 9.4.4 Security Update (ESA-2026-55)](https://discuss.elastic.co/t/kibana-9-3-7-9-4-4-security-update-esa-2026-55/388554)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 7:31pm UTC](https://discuss.elastic.co/t/kibana-9-3-7-9-4-4-security-update-esa-2026-55/388554 "2026-07-21T19:31:33Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocati… --- ## [Dec 3rd, 2025: \[EN\] Build a Conversational Expense Assistant Using Elasticsearch Agent Builder with Telegram, n8n, and AWS Bedrock](https://discuss.elastic.co/t/dec-3rd-2025-en-build-a-conversational-expense-assistant-using-elasticsearch-agent-builder-with-telegram-n8n-and-aws-bedrock/383585)
**Author:** [@\_som](https://discuss.elastic.co/u/_som)\ **Replies:** 0\ **Last updated:** [December 3, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-3rd-2025-en-build-a-conversational-expense-assistant-using-elasticsearch-agent-builder-with-telegram-n8n-and-aws-bedrock/383585 "2025-12-03T08:00:21Z")
Ever wished you could talk to your expense data? Ask things like: “How much did I spend last week?” “Show my food expenses for the month.” “Add yesterday’s dinner for 350 via credit card.” This project turns tho… --- ## [Unable to create private location](https://discuss.elastic.co/t/unable-to-create-private-location/386864)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 2\ **Last updated:** [June 16, 2026, 10:09am UTC](https://discuss.elastic.co/t/unable-to-create-private-location/386864 "2026-06-16T10:09:02Z")
Invalid spaces. Private location spaces \[default\] must be fully contained within agent policy 532963e5-1c04-4475-b0a3-0d807c6a12e7 spaces \[\]. GET kbn:/api/fleet/agent\_policies/532963e5-1c04-4475-b0a3-0d807c6a12e7 { "… --- ## [SentinelOne Integration with ELK](https://discuss.elastic.co/t/sentinelone-integration-with-elk/384924)
**Author:** [@Jayesh\_Auti](https://discuss.elastic.co/u/Jayesh_Auti)\ **Replies:** 4\ **Last updated:** [February 5, 2026, 1:22pm UTC](https://discuss.elastic.co/t/sentinelone-integration-with-elk/384924 "2026-02-05T13:22:13Z")
Hi Guys, I am integrating SentinelOne with ELK, after adding console URL and API key it showing me to add elastic agent. Elastic agent is required for these type of integrations? Can anyone help me with this? Than… --- ## [Kibana 9.4.5 Security Update (ESA-2026-89)](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-89/389536)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-89/389536 "2026-08-13T10:48:59Z")
Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries El… --- ## [Kibana 9.3.8, 9.4.4 Security Update (ESA-2026-65)](https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-65/388566)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 9:06pm UTC](https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-65/388566 "2026-07-21T21:06:08Z")
Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuratio… --- ## [Run Elasticsearch Docker 9.x on CPU without x86-64-v2 support?](https://discuss.elastic.co/t/run-elasticsearch-docker-9-x-on-cpu-without-x86-64-v2-support/385212)
**Author:** [@greenwoodma](https://discuss.elastic.co/u/greenwoodma)\ **Replies:** 1\ **Last updated:** [March 27, 2026, 2:32pm UTC](https://discuss.elastic.co/t/run-elasticsearch-docker-9-x-on-cpu-without-x86-64-v2-support/385212 "2026-03-27T14:32:01Z")
Is it at all possible to run the Elasticsearch 9.x docker containers on a machine with a CPU which doesn’t support x86-64-v2? The 8.x releases all ran fine on the machine but the new ones don’t start up as they just repo… --- ## [Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-179)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683 "2026-09-25T08:33:56Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Vers… --- ## [Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-181)](https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:34am UTC](https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685 "2026-09-25T08:34:42Z")
Uncontrolled Resource Consumption in Kibana Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: A… --- ## [Elasticsearch 9.4.7, 9.5.4 Security Update (ESA-2026-182)](https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-4-security-update-esa-2026-182/390686)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-4-security-update-esa-2026-182/390686 "2026-09-25T08:35:05Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Vers… --- ## [Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-195)](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-195/390869)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:49pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-195/390869 "2026-10-06T18:49:46Z")
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CA… --- ## [Elasticsearch for TrueNAS indexing](https://discuss.elastic.co/t/elasticsearch-for-truenas-indexing/383894)
**Author:** [@chrislongros](https://discuss.elastic.co/u/chrislongros)\ **Replies:** 6\ **Last updated:** [January 5, 2026, 12:33pm UTC](https://discuss.elastic.co/t/elasticsearch-for-truenas-indexing/383894 "2026-01-05T12:33:19Z")
How can I use elasticsearch to index my TrueNAS? --- ## [Kibana 9.3.8, 9.4.4 Security Update (ESA-2026-67)](https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-67/388569)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [July 21, 2026, 10:06pm UTC](https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-67/388569 "2026-07-21T22:06:14Z")
Missing Authorization in Kibana Leading to Unauthorized Information Disclosure Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse (CAPEC-122). A user with limit… [Previous page](https://discuss.elastic.co/top.md?page=5&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=7&per_page=50)