# Top

**URL:** https://discuss.elastic.co/top.md?page=8

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 9

---

## [Kibana 9.4.5 Security Update (ESA-2026-97)](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-97/389537)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:49am UTC](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-97/389537 "2026-08-13T10:49:03Z")

</div>

Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query exe…

---

## [Clarification on using "timestamp\_override: event.ingested" with EQL sequence rules](https://discuss.elastic.co/t/clarification-on-using-timestamp-override-event-ingested-with-eql-sequence-rules/385377)

<div class="topic-metadata">

**Author:** [@iremtoru](https://discuss.elastic.co/u/iremtoru)\
**Replies:** 0\
**Last updated:** [March 9, 2026, 11:22am UTC](https://discuss.elastic.co/t/clarification-on-using-timestamp-override-event-ingested-with-eql-sequence-rules/385377 "2026-03-09T11:22:02Z")

</div>

Hello, I’m looking for clarification and guidance around the use of timestamp\_override: event.ingested in EQL sequence rules. From my understanding and search of official docs: timestamp\_override: event.ingested is …

---

## [Observability UI shows incorrect count of active alerts](https://discuss.elastic.co/t/observability-ui-shows-incorrect-count-of-active-alerts/383386)

<div class="topic-metadata">

**Author:** [@Hari\_mandla](https://discuss.elastic.co/u/Hari_mandla)\
**Replies:** 0\
**Last updated:** [November 12, 2025, 10:55am UTC](https://discuss.elastic.co/t/observability-ui-shows-incorrect-count-of-active-alerts/383386 "2025-11-12T10:55:32Z")

</div>

Our expectation about Alert lifecycle is, "When a rule creates an alert for particular group, kibana creates a document in .internal-observability-\* index with a status active. When this is recovered, kibana updates the …

---

## [Kibana 9.4.5 Security Update (ESA-2026-82)](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-82/389535)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-82/389535 "2026-08-13T10:48:56Z")

</div>

Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a us…

---

## [Dropdown suggestions not showing up for Filters in Kibana Dashboard](https://discuss.elastic.co/t/dropdown-suggestions-not-showing-up-for-filters-in-kibana-dashboard/383811)

<div class="topic-metadata">

**Author:** [@Lakshay\_Choube](https://discuss.elastic.co/u/Lakshay_Choube)\
**Replies:** 6\
**Last updated:** [July 17, 2026, 9:41am UTC](https://discuss.elastic.co/t/dropdown-suggestions-not-showing-up-for-filters-in-kibana-dashboard/383811 "2026-07-17T09:41:49Z")

</div>

How can we have auto-suggestions and options to show in filters for say Program Names - with account\_id restriction on the documents the user can see. Basically my account has all granted fields access but when an accou…

---

## [Elastic - MISP Integration shows total Indicators ( fortigate logs)](https://discuss.elastic.co/t/elastic-misp-integration-shows-total-indicators-fortigate-logs/385132)

<div class="topic-metadata">

**Author:** [@4l13v](https://discuss.elastic.co/u/4l13v)\
**Replies:** 5\
**Last updated:** [February 24, 2026, 11:07am UTC](https://discuss.elastic.co/t/elastic-misp-integration-shows-total-indicators-fortigate-logs/385132 "2026-02-24T11:07:56Z")

</div>

Hello community. I am having big issue right now. I have Integrated Fortigate and Elastic. Then attempted to integrate MISP to Elastic. Integration was well till \[Logs MISP\] Dashboard was thinking Total Indicators coun…

---

## [Kibana 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-135)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-135/390091)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 6:46pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-135/390091 "2026-09-01T18:46:19Z")

</div>

Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosure via Privilege A…

---

## [Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-87)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-87/389524)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-87/389524 "2026-08-13T10:48:21Z")

</div>

Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials A lower privileged user who holds only the privilege to read agent policies can read the entire confi…

---

## [Elasticsearch 9.2.1 snapshot visible in repository but restore fails with snapshot\_missing\_exception](https://discuss.elastic.co/t/elasticsearch-9-2-1-snapshot-visible-in-repository-but-restore-fails-with-snapshot-missing-exception/386829)

<div class="topic-metadata">

**Author:** [@shantia](https://discuss.elastic.co/u/shantia)\
**Replies:** 8\
**Last updated:** [June 15, 2026, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-9-2-1-snapshot-visible-in-repository-but-restore-fails-with-snapshot-missing-exception/386829 "2026-06-15T13:59:41Z")

</div>

I have an Elasticsearch 9.2.1 cluster configured with Snapshot Lifecycle Management (SLM) that takes nightly snapshots to an S3 repository. The snapshots are successfully created, and I can see all snapshot metadata in t…

---

## [Elasticsearch 8.19.22, 9.4.8, and 9.5.5 Security Update (ESA-2026-189)](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-8-and-9-5-5-security-update-esa-2026-189/390862)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 6:39pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-8-and-9-5-5-security-update-esa-2026-189/390862 "2026-10-06T18:39:39Z")

</div>

Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponent…

---

## [Using Elastic Security as SOAR for IBM QRadar SIEM (Log Forwarding Architecture)](https://discuss.elastic.co/t/using-elastic-security-as-soar-for-ibm-qradar-siem-log-forwarding-architecture/385893)

<div class="topic-metadata">

**Author:** [@PatreKerier](https://discuss.elastic.co/u/PatreKerier)\
**Replies:** 5\
**Last updated:** [April 16, 2026, 1:41pm UTC](https://discuss.elastic.co/t/using-elastic-security-as-soar-for-ibm-qradar-siem-log-forwarding-architecture/385893 "2026-04-16T13:41:59Z")

</div>

Hi everyone, I'm working on a project to integrate IBM QRadar SIEM with Elastic Security. The goal is to use Elastic specifically for its SOAR capabilities (Case Management, Automation, Response Actions) while keeping Q…

---

## [Kibana 9.4.4 Security Update (ESA-2026-161)](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-161/390115)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 10:35pm UTC](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-161/390115 "2026-09-01T22:35:33Z")

</div>

Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Inf…

---

## [Kibana 8.19.20, 9.3.8, and 9.4.5 Security Update (ESA-2026-101)](https://discuss.elastic.co/t/kibana-8-19-20-9-3-8-and-9-4-5-security-update-esa-2026-101/389517)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-3-8-and-9-4-5-security-update-esa-2026-101/389517 "2026-08-13T10:47:58Z")

</div>

Uncaught Exception in Kibana Leading to Denial of Service Description: Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can lead to denial of service via Input Data Manipulatio…

---

## [Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-188)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-188/390861)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 6:37pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-188/390861 "2026-10-06T18:37:40Z")

</div>

Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality …

---

## [Kibana 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-142)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-142/390093)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 6:47pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-142/390093 "2026-09-01T18:47:09Z")

</div>

Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of dat…

---

## [Kibana 9.4.4 Security Update (ESA-2026-83)](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-83/389534)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-83/389534 "2026-08-13T10:48:53Z")

</div>

Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana featu…

---

## [Agent Spoofing alerts due to mismatched agent id's since 9.2.1 update](https://discuss.elastic.co/t/agent-spoofing-alerts-due-to-mismatched-agent-ids-since-9-2-1-update/383420)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 4\
**Last updated:** [November 20, 2025, 10:25pm UTC](https://discuss.elastic.co/t/agent-spoofing-alerts-due-to-mismatched-agent-ids-since-9-2-1-update/383420 "2025-11-20T22:25:19Z")

</div>

Since I updated this afternoon to 9.2.1 this alert triggers continuously for all my 3 agents. Grtz

---

## [Elasticsearch 9.4.8, 9.5.5 Security Update (ESA-2026-190)](https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 6:41pm UTC](https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863 "2026-10-06T18:41:32Z")

</div>

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in…

---

## [Will the HLRC client work with Elasticsearch version 9.x](https://discuss.elastic.co/t/will-the-hlrc-client-work-with-elasticsearch-version-9-x/383952)

<div class="topic-metadata">

**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\
**Replies:** 5\
**Last updated:** [December 10, 2025, 11:23am UTC](https://discuss.elastic.co/t/will-the-hlrc-client-work-with-elasticsearch-version-9-x/383952 "2025-12-10T11:23:33Z")

</div>

Hello everyone, We have a large java application which heavily relies on HLRC code. Our current ES version is 8.x As we know that the HLRC client was deprecated with 7.17.x, it currently works with our version 8.x my …

---

## [Kibana 8.19.16, 9.3.5, 9.4.2 Security Update (ESA-2026-163)](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-2-security-update-esa-2026-163/390116)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 10:35pm UTC](https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-2-security-update-esa-2026-163/390116 "2026-09-01T22:35:56Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocati…

---

## [Kibana 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-159)](https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-159/390114)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 10:35pm UTC](https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-159/390114 "2026-09-01T22:35:10Z")

</div>

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) …

---

## ["Error" in Documents Count - Index Management](https://discuss.elastic.co/t/error-in-documents-count-index-management/385242)

<div class="topic-metadata">

**Author:** [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\
**Replies:** 3\
**Last updated:** [April 3, 2026, 2:40pm UTC](https://discuss.elastic.co/t/error-in-documents-count-index-management/385242 "2026-04-03T14:40:51Z")

</div>

Hi everyone, I recently upgraded my environment to Elastic 9.3, and I’ve encountered a specific issue in the Index Management section that wasn't present before. The Problem When I set the page to display 100 rows, …

---

## [RBAC - Manage spaces - how to disable it?](https://discuss.elastic.co/t/rbac-manage-spaces-how-to-disable-it/386881)

<div class="topic-metadata">

**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\
**Replies:** 6\
**Last updated:** [July 2, 2026, 7:26am UTC](https://discuss.elastic.co/t/rbac-manage-spaces-how-to-disable-it/386881 "2026-07-02T07:26:56Z")

</div>

In elastic stack 9.4 we want to disable /enable "Manage spaces" functionality. I found only this in the documentation: "An example of a built-in role is kibana\_admin. Assigning this role to your users will grant access…

---

## [Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-105)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-105/389521)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-105/389521 "2026-08-13T10:48:11Z")

</div>

Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Function…

---

## [Winlogbeat 8.13.0 Security Update (ESA-2024-49)](https://discuss.elastic.co/t/winlogbeat-8-13-0-security-update-esa-2024-49/390044)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 1:42pm UTC](https://discuss.elastic.co/t/winlogbeat-8-13-0-security-update-esa-2024-49/390044 "2026-09-01T13:42:24Z")

</div>

Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service A local vulnerability in the Winlogbeat Windows installer caused runtime files to be pla…

---

## [Filebeat 8.17.10 disable template data\_stream](https://discuss.elastic.co/t/filebeat-8-17-10-disable-template-data-stream/383429)

<div class="topic-metadata">

**Author:** [@almteref](https://discuss.elastic.co/u/almteref)\
**Replies:** 3\
**Last updated:** [November 18, 2025, 3:55am UTC](https://discuss.elastic.co/t/filebeat-8-17-10-disable-template-data-stream/383429 "2025-11-18T03:55:08Z")

</div>

Hi I have filebae version 8.17.10 running on k8s And send logs to elasticsearch with the same version This is my configuration filebeat: inputs: type: filestream id: vouchers-logs-stream paths: /path/to/logs/\*.…

---

## [Custom App with authentication log](https://discuss.elastic.co/t/custom-app-with-authentication-log/386871)

<div class="topic-metadata">

**Author:** [@william.cheang](https://discuss.elastic.co/u/william.cheang)\
**Replies:** 8\
**Last updated:** [June 18, 2026, 3:29am UTC](https://discuss.elastic.co/t/custom-app-with-authentication-log/386871 "2026-06-18T03:29:12Z")

</div>

I have custom app with authentication log(consist of login success or failure activities, and logout activities), can I ingest these log directly into log.system.auth-\* ? After ingest direct to log.system.auth-\*, will t…

---

## [Workflows' Connectors in DaC](https://discuss.elastic.co/t/workflows-connectors-in-dac/385829)

<div class="topic-metadata">

**Author:** [@proclick](https://discuss.elastic.co/u/proclick)\
**Replies:** 0\
**Last updated:** [April 9, 2026, 5:43pm UTC](https://discuss.elastic.co/t/workflows-connectors-in-dac/385829 "2026-04-09T17:43:51Z")

</div>

Hello Team, I’ve been using DaC for a while in my infrastructure and pretty satisfied with it as a source of truth and version control. I’ve recently created few custom Workflows and wanted to attach them to the securi…

---

## [Schedule Report - kibana.configuration trouble](https://discuss.elastic.co/t/schedule-report-kibana-configuration-trouble/383080)

<div class="topic-metadata">

**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\
**Replies:** 3\
**Last updated:** [January 13, 2026, 4:34pm UTC](https://discuss.elastic.co/t/schedule-report-kibana-configuration-trouble/383080 "2026-01-13T16:34:53Z")

</div>

Hi all, I have Elastic Stack version 8.19. Is it possible to schedule report sending without using watchers or URLs? We tried configuring this in kibana.yml: Kibana Email settings xpack.actions.preconfigured: my-emai…

---

## [Elastic OTP never comes](https://discuss.elastic.co/t/elastic-otp-never-comes/384319)

<div class="topic-metadata">

**Author:** [@Pegasus](https://discuss.elastic.co/u/Pegasus)\
**Replies:** 6\
**Last updated:** [June 25, 2026, 1:59am UTC](https://discuss.elastic.co/t/elastic-otp-never-comes/384319 "2026-06-25T01:59:46Z")

</div>

I signed up for Elastic Cloud (hosted) and was able to log in only during the initial signup. Since then, I have not been receiving the OTP, which is preventing me from logging in. This is extremely frustrating.

---

## [Kibana 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-94)](https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-94/389512)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-94/389512 "2026-08-13T10:47:42Z")

</div>

Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources Description: Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources vi…

---

## [Kibana 8.19.20, 9.4.5 Security Update (ESA-2026-137)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-137/389511)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-137/389511 "2026-08-13T10:47:39Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation…

---

## [How I can get 2 fields values in Elastic Search](https://discuss.elastic.co/t/how-i-can-get-2-fields-values-in-elastic-search/384419)

<div class="topic-metadata">

**Author:** [@SivaK](https://discuss.elastic.co/u/SivaK)\
**Replies:** 7\
**Last updated:** [January 8, 2026, 2:59pm UTC](https://discuss.elastic.co/t/how-i-can-get-2-fields-values-in-elastic-search/384419 "2026-01-08T14:59:06Z")

</div>

I am trying as follows : Create visualization of custom field, which is addition of 2 available fields. How I can get this, so in my dashboard data updates automatically.

---

## [Elasticsearch 9.4.7, 9.5.3, 8.19.23 Security Update (ESA-2026-192)](https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865)

<div class="topic-metadata">

**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 6:43pm UTC](https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865 "2026-10-06T18:43:29Z")

</div>

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excess…

---

## [DLL hell; the elastic apm profiler vs OutSystems edition…](https://discuss.elastic.co/t/dll-hell-the-elastic-apm-profiler-vs-outsystems-edition/384737)

<div class="topic-metadata">

**Author:** [@avanlieshout](https://discuss.elastic.co/u/avanlieshout)\
**Replies:** 2\
**Last updated:** [January 26, 2026, 2:26pm UTC](https://discuss.elastic.co/t/dll-hell-the-elastic-apm-profiler-vs-outsystems-edition/384737 "2026-01-26T14:26:06Z")

</div>

DLL hell; the elastic apm profiler vs OutSystems edition… l.s. We are running our applications on an OutSystems platform (v11.32.0 (Build 44177)) which is a lowcode platform hosted on a windows server 2022 IIS. For app…

---

## [How to Increase the throughput for KNN in my ES cluster](https://discuss.elastic.co/t/how-to-increase-the-throughput-for-knn-in-my-es-cluster/384252)

<div class="topic-metadata">

**Author:** [@Esteban\_Velasquez](https://discuss.elastic.co/u/Esteban_Velasquez)\
**Replies:** 6\
**Last updated:** [January 31, 2026, 10:44am UTC](https://discuss.elastic.co/t/how-to-increase-the-throughput-for-knn-in-my-es-cluster/384252 "2026-01-31T10:44:11Z")

</div>

Hello! I created a track in ESrally with some queries that are normally done in my ES cluster and I replicated the big index (using snapshot) from the original cluster I have into a new one. I am doing an ESrally test f…

---

## [9.4.1 Agent Update on Windows get's orphaned](https://discuss.elastic.co/t/9-4-1-agent-update-on-windows-gets-orphaned/386535)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 5\
**Last updated:** [June 8, 2026, 3:55am UTC](https://discuss.elastic.co/t/9-4-1-agent-update-on-windows-gets-orphaned/386535 "2026-06-08T03:55:15Z")

</div>

I regularly update my Elastic environment. Upgrading to version 9.4.1 was somewhat painful due to the “CPU flag” issue, but with the help of the forum, I was able to get everything back up and running. After that, I pro…

---

## [Kibana 8.19.20, and 9.4.5 Security Update (ESA-2026-95)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-95/389527)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-95/389527 "2026-08-13T10:48:31Z")

</div>

Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed h…

---

## [System requirements for Elastic Security "All-in-One" pilot deployment](https://discuss.elastic.co/t/system-requirements-for-elastic-security-all-in-one-pilot-deployment/385731)

<div class="topic-metadata">

**Author:** [@PatreKerier](https://discuss.elastic.co/u/PatreKerier)\
**Replies:** 3\
**Last updated:** [April 3, 2026, 8:30am UTC](https://discuss.elastic.co/t/system-requirements-for-elastic-security-all-in-one-pilot-deployment/385731 "2026-04-03T08:30:42Z")

</div>

Hello everyone, My company is planning a pilot project to test Elastic Security (including Elasticsearch, Kibana, Logstash, and Fleet). We are also looking into integrating it with various third-party services. For thi…

---

## [Kibana 9.3.8, 9.4.4 Security Update (ESA-2026-91)](https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-91/389533)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-91/389533 "2026-08-13T10:48:50Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Description: Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Exce…

---

## [Kibana 8.19.17, 9.3.0 Security Update (ESA-2026-31)](https://discuss.elastic.co/t/kibana-8-19-17-9-3-0-security-update-esa-2026-31/390050)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 6:40pm UTC](https://discuss.elastic.co/t/kibana-8-19-17-9-3-0-security-update-esa-2026-31/390050 "2026-09-01T18:40:01Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocati…

---

## [Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-88)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-88/389525)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-88/389525 "2026-08-13T10:48:24Z")

</div>

Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments A Kibana Machine Learning capability that removes a saved object from the current space accepts ma…

---

## [Independent Agent Version 9.3.0+build202602051825](https://discuss.elastic.co/t/independent-agent-version-9-3-0-build202602051825/385074)

<div class="topic-metadata">

**Author:** [@syk](https://discuss.elastic.co/u/syk)\
**Replies:** 3\
**Last updated:** [February 18, 2026, 10:45pm UTC](https://discuss.elastic.co/t/independent-agent-version-9-3-0-build202602051825/385074 "2026-02-18T22:45:15Z")

</div>

Just a quick question (I don’t find anything about that in any release-note..) When upgrading agents via Fleet (in an upgraded 9.3.0 deployment) this “independent release version” will be installed: Following the pr…

---

## [Logstash SNMP plugin not polling all OIDs](https://discuss.elastic.co/t/logstash-snmp-plugin-not-polling-all-oids/385975)

<div class="topic-metadata">

**Author:** [@tom.verbeek](https://discuss.elastic.co/u/tom.verbeek)\
**Replies:** 8\
**Last updated:** [April 22, 2026, 12:40pm UTC](https://discuss.elastic.co/t/logstash-snmp-plugin-not-polling-all-oids/385975 "2026-04-22T12:40:11Z")

</div>

Hi, I'm setting up a logstash that has a snmp input plugin and an elasticsearch output. Everything works except 1 specific OID, I checked and the OID has data and it is available. I ca't figure out why he is not pollin…

---

## [Kibana 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-125)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-125/390090)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 6:45pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-9-5-2-security-update-esa-2026-125/390090 "2026-09-01T18:45:54Z")

</div>

Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An…

---

## [Kibana 8.19.20, 9.4.5 Security Update (ESA-2026-106)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-106/389522)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-106/389522 "2026-08-13T10:48:15Z")

</div>

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation…

---

## [Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-76)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-76/389508)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-76/389508 "2026-08-13T10:47:29Z")

</div>

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request conta…

---

## [Meaning of configuration options ( General purpose or Optimized for Vectors) for azure erverless](https://discuss.elastic.co/t/meaning-of-configuration-options-general-purpose-or-optimized-for-vectors-for-azure-erverless/383654)

<div class="topic-metadata">

**Author:** [@RobinSteil](https://discuss.elastic.co/u/RobinSteil)\
**Replies:** 1\
**Last updated:** [November 27, 2025, 5:49am UTC](https://discuss.elastic.co/t/meaning-of-configuration-options-general-purpose-or-optimized-for-vectors-for-azure-erverless/383654 "2025-11-27T05:49:14Z")

</div>

What do the configuration options ( General purpose or Optimized for Vectors) for azure erverless mean. I found this blog but it does not contain any specifics. The Azure docs have nothing aswell (it told me I cant lin…

---

## [\_count vs track\_total\_hits](https://discuss.elastic.co/t/count-vs-track-total-hits/384346)

<div class="topic-metadata">

**Author:** [@maulik\_trapasiya](https://discuss.elastic.co/u/maulik_trapasiya)\
**Replies:** 3\
**Last updated:** [January 5, 2026, 8:33am UTC](https://discuss.elastic.co/t/count-vs-track-total-hits/384346 "2026-01-05T08:33:47Z")

</div>

in my Elasticsearch index there are around 10M document, pagination based query is happening on this, on UI need to show total count of document matching query along with some data in page-format, there are 2 approach fo…

---

## [Kibana 8.19.18, 9.4.3 Security Update (ESA-2026-157)](https://discuss.elastic.co/t/kibana-8-19-18-9-4-3-security-update-esa-2026-157/390112)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [September 1, 2026, 10:34pm UTC](https://discuss.elastic.co/t/kibana-8-19-18-9-4-3-security-update-esa-2026-157/390112 "2026-09-01T22:34:24Z")

</div>

Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the …

[Previous page](https://discuss.elastic.co/top.md?page=7&per_page=50)

[Next page](https://discuss.elastic.co/top.md?page=9&per_page=50)
