Troubleshooting
This section contains troubleshooting resources and guidance to help you resolve issues with Elastic products.
If you can't find your issue here, explore the additional resources or contact us.
You might need to review troubleshooting content for more than one product or topic area. Most Elastic deployments use multiple components from the Elastic Stack, plus a deployment orchestrator. Check all topics relevant to your infrastructure.
- Elasticsearch
- Kibana
- Elastic Observability
- Elastic Security
- Ingest tools
- Elastic Cloud
- Elastic Cloud Enterprise
- Elastic Cloud on Kubernetes
Find additional troubleshooting articles in the Elastic Support Portal.
You can access the Support Portal using your Elastic Cloud account. Elastic Cloud accounts are free and do not require an active subscription.
Visit the Elastic community forums to get answers from experts in the community, including Elastic team members.
Use the top bar to search all docs for your issue. Some troubleshooting content appears in other sections of the Elastic documentation.
If you have an Elastic subscription, you can contact Elastic support for assistance. You can reach us in the following ways:
Through the Elastic Support Portal: The Elastic Support Portal is the central place where you can access all of your cases, subscriptions, and licenses. Within a few hours after subscribing, you'll receive an email with instructions on how to log in to the Support Portal, where you can track both current and archived cases.
You can access the portal directly or by clicking the life preserver icon on any Elastic Cloud page.
By email: support@elastic.co
TipIf you contact us by email, use the email address you registered with so we can help you more quickly. If your registered email is a distribution list, you can register a second email address with us. Just open a case to let us know the name and email address you want to add.
WarningAll cases opened by email default to a normal severity level. For incidents, open a case through the Elastic Support Portal and select the appropriate severity.
When you open a support case:
Describe the problem with context about the situation and its business severity, as described in What should I say in my case?.
If an error message was encountered, include the full error message and the timezone-designated timestamp of when the problem occurred.
If the problem is UI-related and can't be replicated using API calls, pull a browser network log.
Upload the related product's diagnostics and debug logs:
If hosting on Elastic Cloud Serverless or Elastic Cloud Hosted, Support can pull diagnostics on your behalf as long as you include resource IDs:
- Elastic Cloud Serverless Project ID or Kibana URL
- Elastic Cloud Hosted Deployment ID or Kibana URL
If hosting on Elastic Cloud Enterprise or Elastic Cloud on Kubernetes:
- Elastic Cloud Enterprise diagnostic flagging
--deployments
as applicable - Elastic Cloud on Kubernetes diagnostic
- Elastic Cloud Enterprise diagnostic flagging
If self-hosting:
Elasticsearch diagnostic and debug logs
Kibana and Fleet diagnostic and debug logs
Ingest tools:
- Logstash diagnostic and debug logs
- Elastic Agent diagnostic and debug logs
TipThe Elasticsearch cluster maintains an advanced task management system, while other products use a simpler polling mechanism. Because of this, some issues appear only in their start-up debug logs. Later logs may note only that the subprocess has stopped or that it has not changed state from an earlier error.
WarningDiagnostics and logs mainly emit product metadata and settings, but they may expose sensitive data which needs to be redacted before being shared outside of your organization. Refer to each product's diagnostics page for information on sanitizing output.