IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Detection rules Release notes »
Elastic Docs ›Elastic Security Solution [7.15] ›Troubleshooting

Management tools

edit

Management tools

edit

This topic covers common troubleshooting issues when using Elastic Security management tools.

Endpoints

edit
Required transform failed

If you encounter a “Required transform failed” notice on the Endpoints page, you can usually resolve the issue by restarting the transform. See Transforming data for more information about transforms.

Endpoints page with Required transform failed notice

To restart a transform that’s not running:

  1. Go to Kibana → Stack Management → Data → Transforms.
  2. Enter endpoint.metadata_current-default in the search box to find the transform for Endpoint Security.

  3. Click the Actions icon (…​) and do one of the following, depending on the value in the Status column:

    • stopped: Select Start to restart the transform.

    • failed: Select Stop to first stop the transform, and then select Start to restart it.

      Transforms page with Start option selected
  4. On the confirmation message that displays, click Start to restart the transform.
  5. The transform’s status changes to started. Refresh the page if you don’t see the change.
« Detection rules Release notes »