# Top **URL:** https://discuss.elastic.co/top.md?page=9 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 10 --- ## [Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-98)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-98/389516)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-98/389516 "2026-08-13T10:47:55Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocati… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-156)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-156/390111)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:34pm UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-156/390111 "2026-09-01T22:34:01Z")
Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via… --- ## [Elastic elasticsearch-9.1.5-linux-x86\_64.tar.gz installation file issue](https://discuss.elastic.co/t/elastic-elasticsearch-9-1-5-linux-x86-64-tar-gz-installation-file-issue/382775)
**Author:** [@bodige.mahesh](https://discuss.elastic.co/u/bodige.mahesh)\ **Replies:** 5\ **Last updated:** [October 29, 2025, 10:35pm UTC](https://discuss.elastic.co/t/elastic-elasticsearch-9-1-5-linux-x86-64-tar-gz-installation-file-issue/382775 "2025-10-29T22:35:46Z")
HI Team, We are trying to install Elasticsearch 9.1.5 version on oel7 and jdk”21.0.7", while extracting the file, it is giving old date, could you please check and suggest if anything can be checked from ourend. tar: … --- ## [Issues Getting Node to Rejoin Cluster after Renewing Certificates](https://discuss.elastic.co/t/issues-getting-node-to-rejoin-cluster-after-renewing-certificates/383296)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 4\ **Last updated:** [November 11, 2025, 2:58pm UTC](https://discuss.elastic.co/t/issues-getting-node-to-rejoin-cluster-after-renewing-certificates/383296 "2025-11-11T14:58:16Z")
I’ve been working through the challenges of renewing my http and transport certificates on one of my nodes. Both were renewed using the same CA that was used prior. Although the elasticsearch service is now starting su… --- ## [Not able to delete indices which are in closed state using ILM](https://discuss.elastic.co/t/not-able-to-delete-indices-which-are-in-closed-state-using-ilm/383443)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 7\ **Last updated:** [November 14, 2025, 3:51pm UTC](https://discuss.elastic.co/t/not-able-to-delete-indices-which-are-in-closed-state-using-ilm/383443 "2025-11-14T15:51:02Z")
I am not able to delete indices which are in closed state using ILM. Is there any other way to do it? --- ## [Kibana 8.19.20, 9.4.5 Security Update (ESA-2026-110)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-110/389523)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-110/389523 "2026-08-13T10:48:18Z")
Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915)… --- ## [Hide Entitlement warnings?](https://discuss.elastic.co/t/hide-entitlement-warnings/384929)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 2\ **Last updated:** [February 6, 2026, 5:32pm UTC](https://discuss.elastic.co/t/hide-entitlement-warnings/384929 "2026-02-06T17:32:02Z")
Some of our elasticsearch installations are encountering warnings such as the following and I am wondering, since this is just a warning, is there any way to disable it or set the logging level lower to make this not app… --- ## [Suggestion: Unify components](https://discuss.elastic.co/t/suggestion-unify-components/385379)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 2\ **Last updated:** [March 10, 2026, 4:06pm UTC](https://discuss.elastic.co/t/suggestion-unify-components/385379 "2026-03-10T16:06:23Z")
Dear Elastic Team, I have a small suggestion in terms of wording in Visualizations: I have a Dashboard (for monitoring Postgres, but that doesn't matter here) with multiple components and every component seems to displ… --- ## [Need help in understanding architecture of cloud hosted and cloud serverless](https://discuss.elastic.co/t/need-help-in-understanding-architecture-of-cloud-hosted-and-cloud-serverless/384773)
**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\ **Replies:** 2\ **Last updated:** [January 28, 2026, 3:43pm UTC](https://discuss.elastic.co/t/need-help-in-understanding-architecture-of-cloud-hosted-and-cloud-serverless/384773 "2026-01-28T15:43:45Z")
hello everyone ! i have just started my journey with elastic and i have some question which i am not able to understand through documentation Que. briefly explain dif in architecture of cloud hosted and cloud serverles… --- ## [Elasticsearch automatic dashboard access](https://discuss.elastic.co/t/elasticsearch-automatic-dashboard-access/384632)
**Author:** [@Robin\_Gorry](https://discuss.elastic.co/u/Robin_Gorry)\ **Replies:** 2\ **Last updated:** [January 21, 2026, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-automatic-dashboard-access/384632 "2026-01-21T12:27:39Z")
Elasticsearch Cloud Hosted, 8. We’ll create separate spaces with a dashboard per space. We’ll provide users (that we create) access to a specific Kibana dashboard on Elastic and an embedded iframe of their application. … --- ## [How to Bulk update Synthesis ICMP monitor frequency?](https://discuss.elastic.co/t/how-to-bulk-update-synthesis-icmp-monitor-frequency/385291)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 6\ **Last updated:** [March 4, 2026, 9:29am UTC](https://discuss.elastic.co/t/how-to-bulk-update-synthesis-icmp-monitor-frequency/385291 "2026-03-04T09:29:44Z")
Our ELK is 8.19 We are using Synthetics monitoring. We have about 5000 ICMP monitors. The current ICMP Ping frequency is currently 3 minutes. Our customer have a request to update all to 1 minute. What’s our best opt… --- ## [Kibana 8.19.20, 9.4.5 Security Update (ESA-2026-100)](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-100/389519)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-100/389519 "2026-08-13T10:48:05Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service Description: Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excess… --- ## [Where to find the Custom Logs (Filestream) integration?](https://discuss.elastic.co/t/where-to-find-the-custom-logs-filestream-integration/385446)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 6\ **Last updated:** [March 15, 2026, 12:36pm UTC](https://discuss.elastic.co/t/where-to-find-the-custom-logs-filestream-integration/385446 "2026-03-15T12:36:00Z")
We’re trying to run an Air Gapped EPR registry v.1.37.0 with a minimal set of selected integration packages, but kibana v.8.19.9 first of all shows a larger(e) set of integrations (wondering why?) to select among in th… --- ## [Architecture Validation: Backing up ES Clusters to Local Disk without NAS (using S3 Gateway sidecar)](https://discuss.elastic.co/t/architecture-validation-backing-up-es-clusters-to-local-disk-without-nas-using-s3-gateway-sidecar/384020)
**Author:** [@Maciek\_Pilawski](https://discuss.elastic.co/u/Maciek_Pilawski)\ **Replies:** 7\ **Last updated:** [March 27, 2026, 6:24am UTC](https://discuss.elastic.co/t/architecture-validation-backing-up-es-clusters-to-local-disk-without-nas-using-s3-gateway-sidecar/384020 "2026-03-27T06:24:48Z")
The Context I am a C++ developer working on an on-premise Visual Analytics application. Our service (DocumentStore) manages an Elasticsearch cluster (handling logs, events, configuration). We need to implement a Backup & … --- ## [Kibana 9.1.5 behind Squid Proxy - Unable to get indices metadata configuration: AxiosError](https://discuss.elastic.co/t/kibana-9-1-5-behind-squid-proxy-unable-to-get-indices-metadata-configuration-axioserror/383302)
**Author:** [@dapster](https://discuss.elastic.co/u/dapster)\ **Replies:** 1\ **Last updated:** [February 27, 2026, 2:49pm UTC](https://discuss.elastic.co/t/kibana-9-1-5-behind-squid-proxy-unable-to-get-indices-metadata-configuration-axioserror/383302 "2026-02-27T14:49:58Z")
Hello, We are running an on-premises Elastic Stack (v9.1.5) on Ubuntu 24. Our Kibana nodes are configured to use an internal Squid proxy for all outbound traffic. We are seeing persistent errors in kibana.log from serv… --- ## [Kibana 8.19.21, 9.4.6 Security Update (ESA-2026-155)](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-security-update-esa-2026-155/390072)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:41pm UTC](https://discuss.elastic.co/t/kibana-8-19-21-9-4-6-security-update-esa-2026-155/390072 "2026-09-01T18:41:27Z")
Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation Missing Authorization (CWE-862) in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functio… --- ## [Explanation about DiskBBQ parameters](https://discuss.elastic.co/t/explanation-about-diskbbq-parameters/384248)
**Author:** [@viperv](https://discuss.elastic.co/u/viperv)\ **Replies:** 2\ **Last updated:** [December 30, 2025, 5:09pm UTC](https://discuss.elastic.co/t/explanation-about-diskbbq-parameters/384248 "2025-12-30T17:09:43Z")
Hi, I am looking into using DiskBBQ. I’ve read this blog post, and I noticed there are multiple parameters that can be defined, but there isn’t a thorough explanation about them: cluster size - with a default value of … --- ## [Kibana 9.4.0 Security Update (ESA-2026-191)](https://discuss.elastic.co/t/kibana-9-4-0-security-update-esa-2026-191/390864)
**Author:** [@cronosda](https://discuss.elastic.co/u/cronosda)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:42pm UTC](https://discuss.elastic.co/t/kibana-9-4-0-security-update-esa-2026-191/390864 "2026-10-06T18:42:33Z")
Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An i… --- ## [Date filter plugin in Logstash configuration](https://discuss.elastic.co/t/date-filter-plugin-in-logstash-configuration/385899)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 6\ **Last updated:** [April 16, 2026, 5:24am UTC](https://discuss.elastic.co/t/date-filter-plugin-in-logstash-configuration/385899 "2026-04-16T05:24:53Z")
In my Logstash configuration we use the "Date filter plugin" several times. It already looks like a mess for me. Is it possible to use only once the "Date Filter Plugin" at the end of the Filter section in the logstash … --- ## [Adding Tags to Elastic Endpoint Security Prebuilt rule](https://discuss.elastic.co/t/adding-tags-to-elastic-endpoint-security-prebuilt-rule/388799)
**Author:** [@Harry123](https://discuss.elastic.co/u/Harry123)\ **Replies:** 0\ **Last updated:** [July 26, 2026, 3:50pm UTC](https://discuss.elastic.co/t/adding-tags-to-elastic-endpoint-security-prebuilt-rule/388799 "2026-07-26T15:50:22Z")
I have a question regarding elastic's endpoint security rule which has sub rules in it when you enable it. Like for example the malware detection alert. I want to put a tag on one of its sub rule but in the rules I canno… --- ## [Dec 17th, 2025: \[EN\] Meowin' Around the Christmas Tree: Tracking a Virtual Cat with Elastic Observability](https://discuss.elastic.co/t/dec-17th-2025-en-meowin-around-the-christmas-tree-tracking-a-virtual-cat-with-elastic-observability/383867)
**Author:** [@Sophia\_Solomon](https://discuss.elastic.co/u/Sophia_Solomon)\ **Replies:** 0\ **Last updated:** [December 17, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-17th-2025-en-meowin-around-the-christmas-tree-tracking-a-virtual-cat-with-elastic-observability/383867 "2025-12-17T08:00:48Z")
Meowin' Around the Christmas Tree: Tracking a Virtual Cat with Elastic Observability One of the most fascinating parts of observability in this modern age is its versatility. While we usually refer to the Internet of … --- ## [Upgrading 8.13.0 - 8.19.20 giving migrations error for kibana\_analytics index](https://discuss.elastic.co/t/upgrading-8-13-0-8-19-20-giving-migrations-error-for-kibana-analytics-index/389786)
**Author:** [@drewb](https://discuss.elastic.co/u/drewb)\ **Replies:** 1\ **Last updated:** [September 8, 2026, 5:14pm UTC](https://discuss.elastic.co/t/upgrading-8-13-0-8-19-20-giving-migrations-error-for-kibana-analytics-index/389786 "2026-09-08T17:14:29Z")
Unable to complete saved object migrations for the .kibana\_analytics index. Unexpected Elasticsearch ResponseError: statuscode: 404, method: DELETE, url: /pit error: \[undefiend\]: ("succeeded":false,"num\_freed":0} My err… --- ## [Kibana expose through K8s Gateway API](https://discuss.elastic.co/t/kibana-expose-through-k8s-gateway-api/384073)
**Author:** [@livresco](https://discuss.elastic.co/u/livresco)\ **Replies:** 1\ **Last updated:** [February 7, 2026, 4:38am UTC](https://discuss.elastic.co/t/kibana-expose-through-k8s-gateway-api/384073 "2026-02-07T04:38:18Z")
I have a python app running and I already managed to expose it through Gateway API and access it through "http:///pythonapp".Next I deployed a Elasticsearch and Kibana instance so I can gain experience in monitoring and … --- ## [Json file input to and viewing in logstash console](https://discuss.elastic.co/t/json-file-input-to-and-viewing-in-logstash-console/383608)
**Author:** [@dashelastic](https://discuss.elastic.co/u/dashelastic)\ **Replies:** 7\ **Last updated:** [November 27, 2025, 5:33am UTC](https://discuss.elastic.co/t/json-file-input-to-and-viewing-in-logstash-console/383608 "2025-11-27T05:33:08Z")
logstash version : 8.17.2, installed on windows machine. Requirement : ingest json file into logstash json file (its bigger but for testing purpose, trimmed it to one entry only) {{"id":"ocid1.clem.oc1.iad.","compartm… --- ## [Kibana 9.4.5 Security Update (ESA-2026-147)](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-147/390107)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:32pm UTC](https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-147/390107 "2026-09-01T22:32:28Z")
Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization co… --- ## [Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-104)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-104/389520)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-104/389520 "2026-08-13T10:48:08Z")
Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service Description: Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153). A spe… --- ## [ERROR Connection marked as failed because the onConnect callback failed: could not connect to a compatible version of Elasticsearch: 404 Not Found:](https://discuss.elastic.co/t/error-connection-marked-as-failed-because-the-onconnect-callback-failed-could-not-connect-to-a-compatible-version-of-elasticsearch-404-not-found/382888)
**Author:** [@Rovsen\_Agayev](https://discuss.elastic.co/u/Rovsen_Agayev)\ **Replies:** 6\ **Last updated:** [October 23, 2025, 6:23am UTC](https://discuss.elastic.co/t/error-connection-marked-as-failed-because-the-onconnect-callback-failed-could-not-connect-to-a-compatible-version-of-elasticsearch-404-not-found/382888 "2025-10-23T06:23:26Z")
Filebeat 9.1.5 → Elasticsearch 9.1.5: /\_license?human=false returns 404 {}, Filebeat fails with “onConnect callback failed: 404 {}” Environment Elasticsearch: 9.1.5 (Deb package, build\_flavor: default) Kibana: 9.1.5 … --- ## [Elastic Microsoft Teams Connector](https://discuss.elastic.co/t/elastic-microsoft-teams-connector/387504)
**Author:** [@MR\_INTENSE\_GAMING](https://discuss.elastic.co/u/MR_INTENSE_GAMING)\ **Replies:** 2\ **Last updated:** [July 3, 2026, 1:49pm UTC](https://discuss.elastic.co/t/elastic-microsoft-teams-connector/387504 "2026-07-03T13:49:33Z")
Could you explain why the current implementation fetches user-specific chats using the ROPC mechanism? As ROPC is considered an insecure approach and is especially problematic for federated accounts. --- ## [Share discovery session time picker issue](https://discuss.elastic.co/t/share-discovery-session-time-picker-issue/384809)
**Author:** [@mcdaidh](https://discuss.elastic.co/u/mcdaidh)\ **Replies:** 4\ **Last updated:** [January 30, 2026, 5:19pm UTC](https://discuss.elastic.co/t/share-discovery-session-time-picker-issue/384809 "2026-01-30T17:19:13Z")
I have a discover session that I am trying share, I have the time picker set to a relative option (1 hour), yet when I try and share the view, it’s saying it will share it using the current time (it’s specifying the star… --- ## [Kibana 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-102)](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-102/389513)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-102/389513 "2026-08-13T10:47:46Z")
Missing Authorization in Kibana Leading to Information Disclosure Description: Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (… --- ## [How to make EDOT not extract traceparentid from external requests?](https://discuss.elastic.co/t/how-to-make-edot-not-extract-traceparentid-from-external-requests/384457)
**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\ **Replies:** 5\ **Last updated:** [January 12, 2026, 2:58pm UTC](https://discuss.elastic.co/t/how-to-make-edot-not-extract-traceparentid-from-external-requests/384457 "2026-01-12T14:58:51Z")
I'm using the EDOT for Java (elastic-otel-javaagent-1.6.0.jar) which automatically extracts traceparentid from incoming HTTP requests for distributed tracing. This works as expected, however, when our external users also… --- ## [This cluster had issues returning data and results might be incomplete](https://discuss.elastic.co/t/this-cluster-had-issues-returning-data-and-results-might-be-incomplete/384101)
**Author:** [@Sriknth](https://discuss.elastic.co/u/Sriknth)\ **Replies:** 1\ **Last updated:** [December 16, 2025, 9:55am UTC](https://discuss.elastic.co/t/this-cluster-had-issues-returning-data-and-results-might-be-incomplete/384101 "2025-12-16T09:55:05Z")
This cluster had issues returning data and results might be incomplete. and showing “searchTimeout"what is solution for this. --- ## [ES client upgrade to 9.X](https://discuss.elastic.co/t/es-client-upgrade-to-9-x/387693)
**Author:** [@sundar.s](https://discuss.elastic.co/u/sundar.s)\ **Replies:** 3\ **Last updated:** [July 7, 2026, 11:18am UTC](https://discuss.elastic.co/t/es-client-upgrade-to-9-x/387693 "2026-07-07T11:18:27Z")
Our product is currently with Current ES client version: 7.17.9 - co.elastic.clients:elasticsearch-java 7.17.9 with Java API Client Current ES server version: 8.14.3 for test automation Java:17 We are in process of a… --- ## [Configure High Availability setup for elastic stack](https://discuss.elastic.co/t/configure-high-availability-setup-for-elastic-stack/383819)
**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\ **Replies:** 3\ **Last updated:** [December 15, 2025, 7:35am UTC](https://discuss.elastic.co/t/configure-high-availability-setup-for-elastic-stack/383819 "2025-12-15T07:35:09Z")
Hi Elastic Experts, I would appreciate your inputs on the queries below. We have a requirement to configure high availability across two data centers (DC and DR) for Elasticsearch nodes, Logstash, and Kibana. The custo… --- ## [Query for top xx usage elasticsearch nodes](https://discuss.elastic.co/t/query-for-top-xx-usage-elasticsearch-nodes/385581)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 7\ **Last updated:** [March 29, 2026, 2:14pm UTC](https://discuss.elastic.co/t/query-for-top-xx-usage-elasticsearch-nodes/385581 "2026-03-29T14:14:30Z")
Trying to create a query for my cluster elasticsearch nodes. I want it to show nodes that is more than xx% of cpu or memory or JVM heap or free space left in % Not sure if I have selected the correct field for CPU , j… --- ## [Vulnerability Apache Tika 1.13 \< 3.2.2 XXE (CVE-2025-66516) and Apache Log4j 2.0-beta9 \< 2.25.3 MitM in VA scan report of server](https://discuss.elastic.co/t/vulnerability-apache-tika-1-13-3-2-2-xxe-cve-2025-66516-and-apache-log4j-2-0-beta9-2-25-3-mitm-in-va-scan-report-of-server/384881)
**Author:** [@Ravinder07Sharma](https://discuss.elastic.co/u/Ravinder07Sharma)\ **Replies:** 1\ **Last updated:** [February 9, 2026, 10:09am UTC](https://discuss.elastic.co/t/vulnerability-apache-tika-1-13-3-2-2-xxe-cve-2025-66516-and-apache-log4j-2-0-beta9-2-25-3-mitm-in-va-scan-report-of-server/384881 "2026-02-09T10:09:04Z")
we are running Elasticsearch-8.17.10 on 6 RHEL 8 servers. But we are getting vulnerability Apache Tika 1.13 \< 3.2.2 XXE (CVE-2025-66516) and Apache Log4j 2.0-beta9 \< 2.25.3 MitM in VA scan report of server. log4j vulnera… --- ## [Best approach to monitor a Linux Service with the Elastic Agent?](https://discuss.elastic.co/t/best-approach-to-monitor-a-linux-service-with-the-elastic-agent/384916)
**Author:** [@fer.mt](https://discuss.elastic.co/u/fer.mt)\ **Replies:** 4\ **Last updated:** [February 6, 2026, 5:27pm UTC](https://discuss.elastic.co/t/best-approach-to-monitor-a-linux-service-with-the-elastic-agent/384916 "2026-02-06T17:27:12Z")
Hello! I have a software that is critical for us so we want to monitor its availability. We want to start by monitoring the process/service that it creates when running. The software runs on Linux systems. Currently, I … --- ## [Failing to Start - License issue?](https://discuss.elastic.co/t/failing-to-start-license-issue/384468)
**Author:** [@aurora](https://discuss.elastic.co/u/aurora)\ **Replies:** 4\ **Last updated:** [January 11, 2026, 9:44pm UTC](https://discuss.elastic.co/t/failing-to-start-license-issue/384468 "2026-01-11T21:44:27Z")
I’m trying to start ES 9.0.2 as a service. Every time, the service fails with an error 143. One thing of note is that in the logs its telling me my license is not valid despite just using a basic license. I can start ela… --- ## [Kibana 8.19.20, and 9.4.4 Security Update (ESA-2026-90)](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-4-security-update-esa-2026-90/389518)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:48am UTC](https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-4-security-update-esa-2026-90/389518 "2026-08-13T10:48:02Z")
Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations Description: Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locati… --- ## [A major issue with cluster state handling and persistent tasks cancellation](https://discuss.elastic.co/t/a-major-issue-with-cluster-state-handling-and-persistent-tasks-cancellation/386014)
**Author:** [@sherman81](https://discuss.elastic.co/u/sherman81)\ **Replies:** 7\ **Last updated:** [April 27, 2026, 8:15am UTC](https://discuss.elastic.co/t/a-major-issue-with-cluster-state-handling-and-persistent-tasks-cancellation/386014 "2026-04-27T08:15:53Z")
We are using ES 9.3.0. Our cluster has many data streams and indices. The cluster state is ~350 MB (compressed on disk) under normal conditions. I mistakenly scheduled a large number of downsampling tasks for historica… --- ## [Endpoint Agent Healthy changes to unhealthy and has not logs](https://discuss.elastic.co/t/endpoint-agent-healthy-changes-to-unhealthy-and-has-not-logs/383340)
**Author:** [@Jeffrey\_Barda](https://discuss.elastic.co/u/Jeffrey_Barda)\ **Replies:** 4\ **Last updated:** [November 12, 2025, 3:31pm UTC](https://discuss.elastic.co/t/endpoint-agent-healthy-changes-to-unhealthy-and-has-not-logs/383340 "2025-11-12T15:31:12Z")
My Endpoint Health Status changed to unhealthy on my Windows Endpoint a few minutes after it had shown healthy. I have disabled my Windows firewall and checked my policy configuration. What could be the problem? --- ## [Kibana 9.4.6, 9.5.1 Security Update (ESA-2026-122)](https://discuss.elastic.co/t/kibana-9-4-6-9-5-1-security-update-esa-2026-122/390089)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:45pm UTC](https://discuss.elastic.co/t/kibana-9-4-6-9-5-1-security-update-esa-2026-122/390089 "2026-09-01T18:45:29Z")
Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrain… --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-118)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-118/389497)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-118/389497 "2026-08-13T10:46:53Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated… --- ## [Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-75)](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-75/389496)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-75/389496 "2026-08-13T10:46:50Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint to submit a request tha… --- ## [Elastic Defend Integration 8.18.1 not detecting/preventing at all?](https://discuss.elastic.co/t/elastic-defend-integration-8-18-1-not-detecting-preventing-at-all/382817)
**Author:** [@boredchilada](https://discuss.elastic.co/u/boredchilada)\ **Replies:** 3\ **Last updated:** [October 21, 2025, 5:44pm UTC](https://discuss.elastic.co/t/elastic-defend-integration-8-18-1-not-detecting-preventing-at-all/382817 "2025-10-21T17:44:55Z")
I just noticed that for some reason one of my policies was not detecting or preventing anything. I reinstalled the agent which applied the default endpoint initial policy which still had the 8.17.0 elastic defend integra… --- ## [Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-115)](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-115/390088)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 6:45pm UTC](https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-115/390088 "2026-09-01T18:45:04Z")
Uncaught Exception in Kibana Leading to Denial of Service Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only the low-privil… --- ## [False Positive Report — 4K\_Render\_Automation.exe — Malicious (high Confidence)](https://discuss.elastic.co/t/false-positive-report-4k-render-automation-exe-malicious-high-confidence/386586)
**Author:** [@Qu\_c\_Chau](https://discuss.elastic.co/u/Qu_c_Chau)\ **Replies:** 4\ **Last updated:** [June 4, 2026, 2:23pm UTC](https://discuss.elastic.co/t/false-positive-report-4k-render-automation-exe-malicious-high-confidence/386586 "2026-06-04T14:23:14Z")
Reporting a false positive for Elastic's malware detection engine. File: 4K\_Render\_Automation.exe SHA256: 8e8ab81e34a69221ff50b5b94f033cc31969cc39214efd0346f06a48957b991f Detection: Malicious (high Confidence) VT lin… --- ## [Error during agent enrollment](https://discuss.elastic.co/t/error-during-agent-enrollment/384246)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 2\ **Last updated:** [January 9, 2026, 3:15pm UTC](https://discuss.elastic.co/t/error-during-agent-enrollment/384246 "2026-01-09T15:15:32Z")
Hello everyone, I am trying to install Elastic Agent version 8.16.2 on Windows servers. On some servers the installation succeeds, but on others it fails with the error: failed to create new agent info: could not get … --- ## [Fleet Server 8.19.16, 9.3.5, 9.4.2 Security Update (ESA-2026-164)](https://discuss.elastic.co/t/fleet-server-8-19-16-9-3-5-9-4-2-security-update-esa-2026-164/390117)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 10:36pm UTC](https://discuss.elastic.co/t/fleet-server-8-19-16-9-3-5-9-4-2-security-update-esa-2026-164/390117 "2026-09-01T22:36:19Z")
Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via Privilege … --- ## [Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-78)](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-78/389505)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [August 13, 2026, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-9-5-1-security-update-esa-2026-78/389505 "2026-08-13T10:47:20Z")
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific int… [Previous page](https://discuss.elastic.co/top.md?page=8&per_page=50) [Next page](https://discuss.elastic.co/top.md?page=10&per_page=50)