Elastic Stack 9.4.7 delivers targeted fixes across Elasticsearch, Kibana, Fleet Server, Logstash, Elastic Observability, and Elastic Security. Elasticsearch improves memory protection, ES|QL correctness, kNN filtering, vector compatibility, and data-stream auto-sharding. Kibana addresses issues across dashboards, alerting, Fleet, and platform stability, while Fleet Server fixes version-specific agent re-enrollment, upgrade tracking, and secret-key handling.
Logstash 9.4.7 contains no user-facing changes, but updates plugins to improve dependency compatibility and reduce out-of-memory risk when processing large JDBC tables. Elastic Observability fixes grouped threshold alerts, AWS infrastructure tooltips, SLO summary-index mappings, and Synthetics configuration synchronization. In Elastic Security, alert bulk actions, detection-rule searches, Automatic Import, and Elastic Defend receive reliability and performance fixes, including reduced Linux endpoint resource contention.
Overall, 9.4.7 focuses on making everyday operations more dependable across the stack. For the complete list of changes, see the official Elastic 9.4.7 release notes.
List of updated packages
The following packages have been updated for NetEye 4.49:
elastic-agent, elastic-agent-autosetup, elastic-agent-neteye-config, elastic-stack-configurator, elasticsearch, elasticsearch-autosetup, elasticsearch-neteye-config, elasticsearch-xpack-license, all to version 9.4.7_neteye3.103.9-1
Disclaimer: The security issues referenced below do not yet have publicly disclosed CVE identifiers, so they are referenced by GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga 2 security update Type/Severity NetEye Product Read More
Disclaimer: The security issues below do not yet have publicly disclosed CVE identifiers, so details regarding their severity, impact, and potential attack vectors are not fully available at this time. This post will be updated as soon as additional information Read More
Disclaimer: The CVEs referenced below have not yet been publicly disclosed, so details regarding their severity, impact, and potential attack vectors are not available at this time. This post will be updated as soon as additional information becomes publicly available. Read More
Asset Management: GLPI agent inventory submissions through satellites now work with the glpiinventory plugin On NetEye satellites, nginx proxies GLPI inventory submissions from agents to the GLPI instance running on the master. Until now, the proxy covered only one endpoint, Read More
NagVis: honor recognize_services and exclude_members for Icinga DB hostgroups When NagVis renders a hostgroup summary object, two map options control which member states may influence the icon: recognize_services: if disabled, only the host states matter for the group icon; exclude_members: Read More
