Management tools

edit

This topic covers common troubleshooting issues when using Elastic Security management tools.

Endpoints

edit
Required transform failed

If you encounter a “Required transform failed” notice on the Endpoints page, you can usually resolve the issue by restarting the transform. See Transforming data for more information about transforms.

Endpoints page with Required transform failed notice

To restart a transform that’s not running:

  1. Go to KibanaStack ManagementDataTransforms.
  2. Enter endpoint.metadata_current-default in the search box to find the transform for Endpoint Security.
  3. Click the Actions icon (…​) and do one of the following, depending on the value in the Status column:

    • stopped: Select Start to restart the transform.
    • failed: Select Stop to first stop the transform, and then select Start to restart it.

      Transforms page with Start option selected
  4. On the confirmation message that displays, click Start to restart the transform.
  5. The transform’s status changes to started. Refresh the page if you don’t see the change.