{
  "meta": {
    "version": "v1",
    "pricing": {
      "public": {
        "label": "Public",
        "description": "Read-only API access for lightweight status checks and public integrations."
      },
      "premium": {
        "label": "Premium",
        "description": "API keys with higher hourly quotas, plus Slack, Teams, Discord, webhook, and email outage alerts across your vendor stack."
      }
    },
    "generatedAt": "2026-08-18T20:06:56.004Z"
  },
  "data": {
    "id": "incident_statuspage_elastic_qcs4jty0rc8d",
    "slug": "elastic-elasticsearch-9-5-1-false-positive-matches-in-certain-boolean-queries-2026-08-14",
    "title": "Elasticsearch 9.5.1: false-positive matches in certain boolean queries",
    "summary": "Elasticsearch 9.5.1: false-positive matches in certain boolean queries",
    "status": "identified",
    "severity": "major",
    "startedAt": "2026-08-14T09:22:03.972+00:00",
    "updatedAt": "2026-08-14T09:22:04.047+00:00",
    "resolvedAt": null,
    "provider": {
      "slug": "elastic",
      "name": "Elastic Cloud"
    },
    "affectedServices": [],
    "links": {
      "html": "/incidents/elastic-elasticsearch-9-5-1-false-positive-matches-in-certain-boolean-queries-2026-08-14",
      "api": "/api/v1/incidents/elastic-elasticsearch-9-5-1-false-positive-matches-in-certain-boolean-queries-2026-08-14",
      "providerHtml": "/providers/elastic",
      "alerts": "https://outagedeck.com/account?stack=elastic&utm_source=api&utm_medium=response&utm_campaign=api_alerts&utm_content=incident"
    },
    "impactSummary": "Elastic Cloud reported a major event for the affected tracked services.",
    "source": {
      "id": "source_elastic_status",
      "kind": "official_api",
      "name": "Elastic Cloud Status",
      "checkedAt": "2026-08-18T20:05:01.973+00:00",
      "officialUrl": "https://status.elastic.co",
      "statusPageUrl": "https://status.elastic.co"
    },
    "updates": [
      {
        "id": "update_statuspage_elastic_qcs4jty0rc8d_9qctfsnqtbnk",
        "status": "identified",
        "body": "Elasticsearch 9.5.1 contains a known issue where boolean queries containing a must, filter, or should clause using a multi-value terms query, alongside a must_not clause on fields with disabled indexing, can still return false-positive matches.\n\nWhile the patch in 9.5.1 (https://github.com/elastic/elasticsearch/pull/155936) resolved the bulk-scorer defect for term and range query paths; multi-value terms queries utilize a different Lucene query type that was not covered by that fix.\n\nTime Series Data Streams (TSDB) and columnar indices/data streams remain affected for this query pattern, as indexing is disabled by default on those fields.\n\nAffected terms queries may return false-positive matches (including documents that should have been excluded) and report higher document counts than expected. No error is raised, so queries will appear to complete successfully.\n\nWhat you can do:\n- If you have not yet upgraded to 9.5.*, we recommend deferring the upgrade until version 9.5.2 is available.\n- If you are already running 9.5.*, contact Elastic Support if you need help determining whether your searches are affected.\n\nWe have identified the root cause, a fix is in progress, and we are preparing a patch release. We will provide a further update when the fix is ready.",
        "createdAt": "2026-08-14T09:22:04.044+00:00"
      }
    ],
    "access": {
      "plan": "public",
      "keyed": false
    }
  }
}