# Top **URL:** https://discuss.elastic.co/top.md?page=7 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 8 --- ## [Filebeat package (filebeat-9.2.1-amd64.deb) is affected by CVE-2025-11226/CVE-2025-5818/CVE-2025-47914](https://discuss.elastic.co/t/filebeat-package-filebeat-9-2-1-amd64-deb-is-affected-by-cve-2025-11226-cve-2025-5818-cve-2025-47914/384618)
**Author:** [@cahl](https://discuss.elastic.co/u/cahl)\ **Replies:** 2\ **Last updated:** [January 19, 2026, 9:56pm UTC](https://discuss.elastic.co/t/filebeat-package-filebeat-9-2-1-amd64-deb-is-affected-by-cve-2025-11226-cve-2025-5818-cve-2025-47914/384618 "2026-01-19T21:56:11Z")
Hi, I see the filebeat-9.2.1-amd64.deb is affected by CVE-2025-10543 which is present on GitHub - eclipse-paho/paho.mqtt.golang 1.3.5 and fixed on 1.5.1. Also, the same package is affected by CVE-2025-58181 and CVE-2025-… --- ## [\[PSA\] Data shipped via Elastic Agent 9.3.4 might be dropped due to problem in the serialization of time fields](https://discuss.elastic.co/t/psa-data-shipped-via-elastic-agent-9-3-4-might-be-dropped-due-to-problem-in-the-serialization-of-time-fields/386888)
**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Replies:** 0\ **Last updated:** [June 17, 2026, 4:36pm UTC](https://discuss.elastic.co/t/psa-data-shipped-via-elastic-agent-9-3-4-might-be-dropped-due-to-problem-in-the-serialization-of-time-fields/386888 "2026-06-17T16:36:04Z")
A performance optimization in Elastic Agent 9.3.4 causes timestamp fields sent from Beats based inputs and integrations to be incorrectly serialized to an empty {} JSON object. This does not affect the primary @timestamp … --- ## [Intermittent metric registration error: worker\_millis\_per\_event](https://discuss.elastic.co/t/intermittent-metric-registration-error-worker-millis-per-event/383836)
**Author:** [@mariyabanatic](https://discuss.elastic.co/u/mariyabanatic)\ **Replies:** 8\ **Last updated:** [September 2, 2026, 6:02am UTC](https://discuss.elastic.co/t/intermittent-metric-registration-error-worker-millis-per-event/383836 "2026-09-02T06:02:11Z")
Issue Intermittent warning during pipeline startup. The worker\_millis\_per\_event metric fails to register but pipeline functions normally. \[org.logstash.execution.AbstractPipelineExt\] Metric registration error: \`worker\_m… --- ## [Kibana 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-127)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-127/389531)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-127/389531 "2026-08-13T10:48:43Z")
Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation Description: Incorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122). Fleet restricts s… --- ## [Unable to create CSV report in kibana despite having superuser-like privileges](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479)
**Author:** [@Brumi](https://discuss.elastic.co/u/Brumi)\ **Replies:** 2\ **Last updated:** [November 18, 2025, 8:49am UTC](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479 "2025-11-18T08:49:15Z")
Hello, I have an Elasticsearch+Kibana cluster set up (version 8.17.2). Regular users (given the editor) role cannot create CSV reports from Discover, while I (having the superuser role) can. I have been trying to figur… --- ## [Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-99)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-99/389529)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-99/389529 "2026-08-13T10:48:37Z")
Cross-Site Request Forgery in Kibana Leading to Privilege Escalation Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to … --- ## [Kibana Internal API's via Python Request](https://discuss.elastic.co/t/kibana-internal-apis-via-python-request/383073)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 6\ **Last updated:** [October 30, 2025, 1:11pm UTC](https://discuss.elastic.co/t/kibana-internal-apis-via-python-request/383073 "2025-10-30T13:11:09Z")
Is it possible to interact with Kibana's internal API's via Python? Do I need to add something to the header of the request besides {'kbn-xsrf': 'true'} My specific use case is to be able to assign ML jobs to a specific… --- ## [Elasticsearch Engineer - Self-Paced Learning Plan](https://discuss.elastic.co/t/elasticsearch-engineer-self-paced-learning-plan/389892)
**Author:** [@fabio.iovine](https://discuss.elastic.co/u/fabio.iovine)\ **Replies:** 7\ **Last updated:** [August 26, 2026, 7:15am UTC](https://discuss.elastic.co/t/elasticsearch-engineer-self-paced-learning-plan/389892 "2026-08-26T07:15:50Z")
Course: Elasticsearch Engineer - Self-Paced Learning Plan Question: Hi there. I've the business goal to get elastic certification. I already followd two courses but unfortunately for business reasons I had to give up t… --- ## [Fleet Server 8.19.11, 9.2.5, 9.3.0 Security Update (ESA-2026-44)](https://discuss.elastic.co/t/fleet-server-8-19-11-9-2-5-9-3-0-security-update-esa-2026-44/387441)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [July 1, 2026, 1:53pm UTC](https://discuss.elastic.co/t/fleet-server-8-19-11-9-2-5-9-3-0-security-update-esa-2026-44/387441 "2026-07-01T13:53:44Z")
Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excess… --- ## [Getting API throttled (?) by Elastic, cannot understand why](https://discuss.elastic.co/t/getting-api-throttled-by-elastic-cannot-understand-why/382955)
**Author:** [@maxxer](https://discuss.elastic.co/u/maxxer)\ **Replies:** 5\ **Last updated:** [January 8, 2026, 11:33am UTC](https://discuss.elastic.co/t/getting-api-throttled-by-elastic-cannot-understand-why/382955 "2026-01-08T11:33:06Z")
Hi. We have an Elastic Cloud 7.17.18 managed instance we use for our staging app, along with two others we use for Training and Production. In the staging environment we’re rather frequently unable to connect to our El… --- ## [Kibana 8.19.18, 9.3.6, 9.4.3 Security Update (ESA-2026-158)](https://discuss.elastic.co/t/kibana-8-19-18-9-3-6-9-4-3-security-update-esa-2026-158/390113)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:34pm UTC](https://discuss.elastic.co/t/kibana-8-19-18-9-3-6-9-4-3-security-update-esa-2026-158/390113 "2026-09-01T22:34:47Z")
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in t… --- ## [Kibana 8.19.20, and 9.4.5 Security Update (ESA-2026-92)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-92/389526)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-92/389526 "2026-08-13T10:48:28Z")
Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification Description: Missing Authorization (CWE-862) in Kibana can lead to cross-space informati… --- ## [Dec 20th, 2025: \[EN\] The performance paradox: when slower code doesn't slow you down](https://discuss.elastic.co/t/dec-20th-2025-en-the-performance-paradox-when-slower-code-doesnt-slow-you-down/383868)
**Author:** [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\ **Replies:** 0\ **Last updated:** [December 20, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2025-en-the-performance-paradox-when-slower-code-doesnt-slow-you-down/383868 "2025-12-20T08:00:37Z")
Esse artigo também está disponível em Português Welcome to day 20 of our Advent Calendar! Behind today’s door, we’re not finding whisky (as I usually do), but something even better for an engineer: a performance myst… --- ## [Wrapping Elastic OTEL Java Agent for internal standardization — best practices & legal considerations](https://discuss.elastic.co/t/wrapping-elastic-otel-java-agent-for-internal-standardization-best-practices-legal-considerations/385586)
**Author:** [@rajbdilip](https://discuss.elastic.co/u/rajbdilip)\ **Replies:** 6\ **Last updated:** [March 26, 2026, 7:49am UTC](https://discuss.elastic.co/t/wrapping-elastic-otel-java-agent-for-internal-standardization-best-practices-legal-considerations/385586 "2026-03-26T07:49:08Z")
Hi all, We are integrating the Elastic OpenTelemetry Java agent across multiple services in our organization and are exploring creating a small internal wrapper around the agent (elastic-otel-java) to standardize config… --- ## [Cluster keeps getting into yellow state and hitting throttled for initializing shards (max rebalance)](https://discuss.elastic.co/t/cluster-keeps-getting-into-yellow-state-and-hitting-throttled-for-initializing-shards-max-rebalance/385392)
**Author:** [@carlosmg1](https://discuss.elastic.co/u/carlosmg1)\ **Replies:** 8\ **Last updated:** [March 20, 2026, 12:26pm UTC](https://discuss.elastic.co/t/cluster-keeps-getting-into-yellow-state-and-hitting-throttled-for-initializing-shards-max-rebalance/385392 "2026-03-20T12:26:40Z")
Hi, we have a cluster with this info: { "status": "yellow", "timed\_out": false, "number\_of\_nodes": 59, "number\_of\_data\_nodes": 54, "active\_primary\_shards": 6205, "active\_shards": 12409, "relocating\_shards": 7, … --- ## [Migrate data to a new cluster with minimal interruption](https://discuss.elastic.co/t/migrate-data-to-a-new-cluster-with-minimal-interruption/383294)
**Author:** [@Ror](https://discuss.elastic.co/u/Ror)\ **Replies:** 7\ **Last updated:** [November 17, 2025, 11:04am UTC](https://discuss.elastic.co/t/migrate-data-to-a-new-cluster-with-minimal-interruption/383294 "2025-11-17T11:04:55Z")
Hi, I need to migrate multiple TB of data to a new cluster. Since this is production data, I’d like to avoid interruption as much as possible which can be tricky based on the volume of data. I have a simple infrastructu… --- ## [Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-180)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-180/390684)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-180/390684 "2026-09-25T08:34:19Z")
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Vers… --- ## [Kibana 8.19.16, 9.3.5, 9.4.2 Security Update (ESA-2026-160)](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-2-security-update-esa-2026-160/390077)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:41pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-2-security-update-esa-2026-160/390077 "2026-09-01T18:41:43Z")
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in K… --- ## [Elastic Stack 9.3?](https://discuss.elastic.co/t/elastic-stack-9-3/384875)
**Author:** [@gauchj](https://discuss.elastic.co/u/gauchj)\ **Replies:** 5\ **Last updated:** [February 3, 2026, 2:57pm UTC](https://discuss.elastic.co/t/elastic-stack-9-3/384875 "2026-02-03T14:57:03Z")
We just upgraded our elastic stack from 8.19 to 9.2. When upgrading kibana (elasticsearch on 9.2.4), we get an error: kibana 9.3 cannot communicate to elasticsearch 9.2.4. There is no announcement on the release notes, … --- ## [Virtual Machines or Containers?](https://discuss.elastic.co/t/virtual-machines-or-containers/385765)
**Author:** [@saba\_kallel](https://discuss.elastic.co/u/saba_kallel)\ **Replies:** 4\ **Last updated:** [April 10, 2026, 1:13pm UTC](https://discuss.elastic.co/t/virtual-machines-or-containers/385765 "2026-04-10T13:13:29Z")
Hello everyone, I am currently working on my final-year project, which focuses on designing and automating the deployment of a highly available and fault-tolerant ELK stack (Elasticsearch, Logstash, Kibana). The goal o… --- ## [Kibana 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-126)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-126/389530)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-126/389530 "2026-08-13T10:48:40Z")
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models Description: Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to … --- ## [Kibana 9.4.3 Security Update (ESA-2026-61)](https://discuss.elastic.co/t/kibana-9-4-3-security-update-esa-2026-61/390086)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:44pm UTC](https://discuss.elastic.co/t/kibana-9-4-3-security-update-esa-2026-61/390086 "2026-09-01T18:44:14Z")
Incorrect Authorization in Kibana Leading to Privilege Escalation Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-80)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-80/389507)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-80/389507 "2026-08-13T10:47:26Z")
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an … --- ## [How to Configure Trust/Entitlements for Datadog APM Java Agent on Elasticsearch 9.X](https://discuss.elastic.co/t/how-to-configure-trust-entitlements-for-datadog-apm-java-agent-on-elasticsearch-9-x/383119)
**Author:** [@flyxp11](https://discuss.elastic.co/u/flyxp11)\ **Replies:** 6\ **Last updated:** [November 9, 2025, 11:42am UTC](https://discuss.elastic.co/t/how-to-configure-trust-entitlements-for-datadog-apm-java-agent-on-elasticsearch-9-x/383119 "2025-11-09T11:42:23Z")
1. Is the Datadog APM Java Agent officially supported for use with Elasticsearch 9.x? 2. What are the specifuc Entitlements(security permissions) required for the dd-java-agent.jar to run as a Java Agent on an Elasticse… --- ## [/app/fleet/agents shows no agents in Kibana, but API does](https://discuss.elastic.co/t/app-fleet-agents-shows-no-agents-in-kibana-but-api-does/388372)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 7\ **Last updated:** [August 13, 2026, 11:48am UTC](https://discuss.elastic.co/t/app-fleet-agents-shows-no-agents-in-kibana-but-api-does/388372 "2026-08-13T11:48:22Z")
Hi, I use elastic stack in version 9.4.3. I have one fleet instance running, but it's not visible in the Kibana UI: An API call via curl shows otherwise: { "items": \[ { "id": "3b28b7af-6b94-4a08-8105-5ba0b25afd… --- ## [Elastic Mapping For Search and Updates](https://discuss.elastic.co/t/elastic-mapping-for-search-and-updates/387907)
**Author:** [@Harinder\_Singh](https://discuss.elastic.co/u/Harinder_Singh)\ **Replies:** 5\ **Last updated:** [July 9, 2026, 5:57pm UTC](https://discuss.elastic.co/t/elastic-mapping-for-search-and-updates/387907 "2026-07-09T17:57:05Z")
Hi, I am building an Enterprise level search for a Digital Asset Management where I can have below Entities Asset id, name, source, owner, expirationdate , tags Each of these assets can be tagged to i items , campaig… --- ## [Elastic Agent / Endpoint 8.19.22, 9.4.8, and 9.5.5 Security Update (ESA-2026-194)](https://discuss.elastic.co/t/elastic-agent-endpoint-8-19-22-9-4-8-and-9-5-5-security-update-esa-2026-194/390868)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:47pm UTC](https://discuss.elastic.co/t/elastic-agent-endpoint-8-19-22-9-4-8-and-9-5-5-security-update-esa-2026-194/390868 "2026-10-06T18:47:56Z")
Uncaught Exception in Elastic Endpoint Leading to Denial of Service Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoin… --- ## [Elasticsearch 8.19.20, 9.3.0 Security Update (ESA-2026-47)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-3-0-security-update-esa-2026-47/390084)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:43pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-3-0-security-update-esa-2026-47/390084 "2026-09-01T18:43:23Z")
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Exce… --- ## [Slowness in Performance of ElasticSearch/Kibana](https://discuss.elastic.co/t/slowness-in-performance-of-elasticsearch-kibana/383084)
**Author:** [@geoffrey](https://discuss.elastic.co/u/geoffrey)\ **Replies:** 7\ **Last updated:** [November 5, 2025, 5:20am UTC](https://discuss.elastic.co/t/slowness-in-performance-of-elasticsearch-kibana/383084 "2025-11-05T05:20:38Z")
I am running elasticsearch and kibana at V9.2.0: and have datasets that are very small: I am using edge with Kibana and I notice as more documents have been loaded that I can refresh the webpage (using edge refre… --- ## [Is it possible to "warm up" indexes with low volume?](https://discuss.elastic.co/t/is-it-possible-to-warm-up-indexes-with-low-volume/382921)
**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\ **Replies:** 8\ **Last updated:** [October 29, 2025, 10:19pm UTC](https://discuss.elastic.co/t/is-it-possible-to-warm-up-indexes-with-low-volume/382921 "2025-10-29T22:19:32Z")
I have an index with 9M documents, 1 shard and 1 replica that receives traffic very sporadically (less than 5 requests per hour). The ingestion rate of this index is less than 1/s A recurring pattern is that query respo… --- ## [Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-139)](https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-139/390680)
**Author:** [@kruskall](https://discuss.elastic.co/u/kruskall)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 8:32am UTC](https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-139/390680 "2026-09-25T08:32:46Z")
Missing Authorization in Kibana Leading to Unauthorized Deletion of Data Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security … --- ## [Request Timeout Errors Observed After Upgrade from 9.3.0 to 9.3.1 – Timeout Configuration Clarification](https://discuss.elastic.co/t/request-timeout-errors-observed-after-upgrade-from-9-3-0-to-9-3-1-timeout-configuration-clarification/385741)
**Author:** [@yogesh119905](https://discuss.elastic.co/u/yogesh119905)\ **Replies:** 6\ **Last updated:** [April 2, 2026, 5:54pm UTC](https://discuss.elastic.co/t/request-timeout-errors-observed-after-upgrade-from-9-3-0-to-9-3-1-timeout-configuration-clarification/385741 "2026-04-02T17:54:30Z")
Elastic Stack \> Elasticsearch category for assistance. Title: Request Timeout Errors Observed After Upgrade from 9.3.0 to 9.3.1 – Timeout Configuration Clarification Descriptions: We are observing repeated Request ti… --- ## [Filebeat-logstash question](https://discuss.elastic.co/t/filebeat-logstash-question/386311)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [May 13, 2026, 11:48pm UTC](https://discuss.elastic.co/t/filebeat-logstash-question/386311 "2026-05-13T23:48:05Z")
filebeat.inputs: - type: filestream id: tad-run-logs enabled: true paths: - /run/\*/\*.tl - /run/\*/extra\_info exclude\_files: - '/run/cleanup\_rack/' file\_identity.native: ~ prospe… --- ## [Assigning an Index Template to an ILM Policy Gets Periodically Removed](https://discuss.elastic.co/t/assigning-an-index-template-to-an-ilm-policy-gets-periodically-removed/389274)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 8\ **Last updated:** [August 6, 2026, 2:30pm UTC](https://discuss.elastic.co/t/assigning-an-index-template-to-an-ilm-policy-gets-periodically-removed/389274 "2026-08-06T14:30:17Z")
As the title suggests, I keep assigning the index template that I want to be linked with a certain ILM, then after some time I go check it and find that they went back to the previous one. This happened to me numerou… --- ## [Entra ID Unusual Cloud Device Registration](https://discuss.elastic.co/t/entra-id-unusual-cloud-device-registration/385717)
**Author:** [@lonpm2](https://discuss.elastic.co/u/lonpm2)\ **Replies:** 2\ **Last updated:** [April 1, 2026, 8:05am UTC](https://discuss.elastic.co/t/entra-id-unusual-cloud-device-registration/385717 "2026-04-01T08:05:38Z")
Receiving a number of these alerts after a recent update to alerts, in vestigating I find that the following string is being located: User-Agent Microsoft.OData.Client/7.12.5. However investigation of all such alerts do… --- ## [Elasticsearch 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-196)](https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-2-security-update-esa-2026-196/390870)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:50pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-2-security-update-esa-2026-196/390870 "2026-10-06T18:50:30Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggreg… --- ## [TRANSFORM Destination index is not using Index Template](https://discuss.elastic.co/t/transform-destination-index-is-not-using-index-template/384611)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 1\ **Last updated:** [January 19, 2026, 7:29am UTC](https://discuss.elastic.co/t/transform-destination-index-is-not-using-index-template/384611 "2026-01-19T07:29:20Z")
Hello Team, We are using Elasticsearch 7.8.0 version. I understand its very old \[ w are in process of upgradation too \] While using TRANSFORM feature , I am finding that my destination index is not using template sett… --- ## [How to Resolve Filebeat File Reading and Ingest Target Warning Issues](https://discuss.elastic.co/t/how-to-resolve-filebeat-file-reading-and-ingest-target-warning-issues/383506)
**Author:** [@siva0030](https://discuss.elastic.co/u/siva0030)\ **Replies:** 1\ **Last updated:** [November 18, 2025, 4:36pm UTC](https://discuss.elastic.co/t/how-to-resolve-filebeat-file-reading-and-ingest-target-warning-issues/383506 "2025-11-18T16:36:33Z")
Hello Team, I am currently using the Filebeat configuration shown below. Recently, Filebeat has started logging frequent warning messages such as “\[points to an already known ingest target\]”. I noticed that if I do not… --- ## [How to make horizontal bar graph?](https://discuss.elastic.co/t/how-to-make-horizontal-bar-graph/384723)
**Author:** [@Miksos](https://discuss.elastic.co/u/Miksos)\ **Replies:** 5\ **Last updated:** [January 24, 2026, 10:11am UTC](https://discuss.elastic.co/t/how-to-make-horizontal-bar-graph/384723 "2026-01-24T10:11:00Z")
I can’t create horizontal bar graphs, I find mentions in old post about them, and videos but in my version of Elastic I am unable to create one ? I will be grateful for some info. Thanks ! --- ## [Indices Stack Monitoring - Cannot expand \`inner\_hits\` for collapse field \`index\_stats.index\`](https://discuss.elastic.co/t/indices-stack-monitoring-cannot-expand-inner-hits-for-collapse-field-index-stats-index/386205)
**Author:** [@adminunix](https://discuss.elastic.co/u/adminunix)\ **Replies:** 3\ **Last updated:** [August 12, 2026, 3:53pm UTC](https://discuss.elastic.co/t/indices-stack-monitoring-cannot-expand-inner-hits-for-collapse-field-index-stats-index/386205 "2026-08-12T15:53:42Z")
Hello, We have updated to Elasticsearch 9.4.0, Kibana 9.4.0, Elastic Agent 9.4.0 and Elasticsearch monitoring integration 1.20.2. Since then, the Stack Monitong Indices tab is broken and does not load the dashboard: … --- ## [Kibana Dashboard search blocks bracket characters in \[\] prefix](https://discuss.elastic.co/t/kibana-dashboard-search-blocks-bracket-characters-in-prefix/389725)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 4\ **Last updated:** [August 19, 2026, 6:20pm UTC](https://discuss.elastic.co/t/kibana-dashboard-search-blocks-bracket-characters-in-prefix/389725 "2026-08-19T18:20:53Z")
We are using ELK 9.4.3 We are seeing this error when searching our dashboard. I though using brackets was a naming convention from Kibana itself so why is it giving an error? --- ## [Logstash Plugin logstash-filter-json\_encode vanishes between 9.x upgrades](https://discuss.elastic.co/t/logstash-plugin-logstash-filter-json-encode-vanishes-between-9-x-upgrades/387482)
**Author:** [@Jesselastic](https://discuss.elastic.co/u/Jesselastic)\ **Replies:** 1\ **Last updated:** [September 5, 2026, 12:51pm UTC](https://discuss.elastic.co/t/logstash-plugin-logstash-filter-json-encode-vanishes-between-9-x-upgrades/387482 "2026-09-05T12:51:22Z")
After upgrading to version 9.x + running plugin updates, the filter "logstash-filter-json\_encode" becomes absent from the system, and pipelines that use it begin to fail. Interestingly, when one does a list query for it… --- ## [ES|QL RLIKE](https://discuss.elastic.co/t/es-ql-rlike/382831)
**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\ **Replies:** 2\ **Last updated:** [October 20, 2025, 1:24pm UTC](https://discuss.elastic.co/t/es-ql-rlike/382831 "2025-10-20T13:24:18Z")
We are a little confused here, playing with ES|QL and RLIKE in Discover:. This one works and returns paths like \\\\?\\C:\\Windows\\CSC\\v2.0.6\\namespace\\example.com\\DFS\\Homes\\User\\Downloads\\evil.exe | WHERE file.path RLIKE … --- ## [Instrumentation failure with Java Agent 1.56](https://discuss.elastic.co/t/instrumentation-failure-with-java-agent-1-56/387319)
**Author:** [@igorlovich](https://discuss.elastic.co/u/igorlovich)\ **Replies:** 5\ **Last updated:** [June 26, 2026, 12:26pm UTC](https://discuss.elastic.co/t/instrumentation-failure-with-java-agent-1-56/387319 "2026-06-26T12:26:03Z")
Hello, After upgrading to Java Agent 1.56 Instrumentation stopped working. It works fine with 1.55.6. Java version: 26.0.1+8-FR (Amazon.com Inc.) Linux 6.12.88-119.157.amzn2023.x86\_64 Tomcat version: 10.1.55 Linux: A… --- ## [🐴 Elastic AutoOps is now free for every self-managed cluster — no license upgrade, no credit card, no strings attached](https://discuss.elastic.co/t/elastic-autoops-is-now-free-for-every-self-managed-cluster-no-license-upgrade-no-credit-card-no-strings-attached/385258)
**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 10:50pm UTC](https://discuss.elastic.co/t/elastic-autoops-is-now-free-for-every-self-managed-cluster-no-license-upgrade-no-credit-card-no-strings-attached/385258 "2026-02-26T22:50:08Z")
:partying\_face: Sharing this great news here for more visibility. Elastic AutoOps brings diagnostics and operational insights directly to your environment, transforming the way you manage Elasticsearch. Today, we are m… --- ## [Kibana - API key search results broken](https://discuss.elastic.co/t/kibana-api-key-search-results-broken/384128)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 8\ **Last updated:** [December 16, 2025, 6:27pm UTC](https://discuss.elastic.co/t/kibana-api-key-search-results-broken/384128 "2025-12-16T18:27:35Z")
In Kibana go to Stack management \> Security \> API keys. Type into search some letters or a word for an API key name. Nothing is returned, even if the API key names include letters or words you typed. If you type the w… --- ## [How to see status of enhancement requests?](https://discuss.elastic.co/t/how-to-see-status-of-enhancement-requests/384601)
**Author:** [@mistrhanky1](https://discuss.elastic.co/u/mistrhanky1)\ **Replies:** 1\ **Last updated:** [January 19, 2026, 2:43pm UTC](https://discuss.elastic.co/t/how-to-see-status-of-enhancement-requests/384601 "2026-01-19T14:43:03Z")
I have a few enhancement requests filed through elastic support. How can I find the status of these requests? I am sure there is a searchable place to see this, likely in github, but it did not stand out to me. As a fo… --- ## [Kibana 8.19.19 and 9.4.5 Security Update (ESA-2026-86)](https://discuss.elastic.co/t/kibana-8-19-19-and-9-4-5-security-update-esa-2026-86/389515)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-19-and-9-4-5-security-update-esa-2026-86/389515 "2026-08-13T10:47:52Z")
Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the ro… --- ## [APM Server 7.17.25 crashes: fatal error: concurrent map iteration and map write](https://discuss.elastic.co/t/apm-server-7-17-25-crashes-fatal-error-concurrent-map-iteration-and-map-write/384544)
**Author:** [@jpescalona](https://discuss.elastic.co/u/jpescalona)\ **Replies:** 3\ **Last updated:** [January 19, 2026, 4:02pm UTC](https://discuss.elastic.co/t/apm-server-7-17-25-crashes-fatal-error-concurrent-map-iteration-and-map-write/384544 "2026-01-19T16:02:55Z")
Kibana version: 8.16.2 Elasticsearch version: 8.16.2 APM Server version: 7.17.25 APM Agent language and version: Java - 1.50.0, 1.43.0 and 1.41.0 Original install method (e.g. download page, yum, deb, from source, et… --- ## [Logstash and Elasticsearch v9 – Compatibility Issue and Windows Support Removal](https://discuss.elastic.co/t/logstash-and-elasticsearch-v9-compatibility-issue-and-windows-support-removal/383331)
**Author:** [@Mahesh\_Kumar1](https://discuss.elastic.co/u/Mahesh_Kumar1)\ **Replies:** 3\ **Last updated:** [November 11, 2025, 10:30am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-v9-compatibility-issue-and-windows-support-removal/383331 "2025-11-11T10:30:00Z")
Why was Windows Server 2016/2019 support removed in Elastic v9 even though they’re still supported by Microsoft? Hello Elastic Team, I’m trying to understand the reasoning behind the removal of Windows Server 2016 and W… [Previous page](https://discuss.elastic.co/top.md?page=6&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=8&per_page=50)