Issues

• [Otel] Beatsauth extension returns URL with query string, but users do not handle them correctly

  bugTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54040 · Filter by author belimawr opened on Oct 23, 2026
  1

  

• [docs-patrol] Document Elastic Agent tag injection into event tags

  needs_team
  elastic/beats#54023 · Filter by author github-actions opened on Oct 23, 2026
  1

• [streaming] keep_alive.interval >= 3x write_control_deadline is accepted but can never work — silent infinite reconnect loop

  Team:Security-Service Integrations
  elastic/beats#54019 · Filter by author gbocchini opened on Oct 23, 2026
  2

• [module][journald] Pipeline fails on missing journald.process.name (no ignore_missing)

  bugTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54013 · Filter by author ebeahan opened on Oct 22, 2026
  1

  

• [Flaky Test] github.com/elastic/beats/v7/x-pack/filebeat/input/entityanalytics TestADIntegration_FullLifecycle

  flaky-testTeam:Security-Service Integrations
  elastic/beats#53987 · Filter by author elastic-vault-github-plugin-prod opened on Oct 22, 2026
  1

• [docs-patrol] Update version-bump pipeline docs for removed block step and timeout change

  needs_team
  elastic/beats#53959 · Filter by author github-actions opened on Oct 21, 2026
  1

• [docs-patrol] Document heartbeatreceiver scheduler_group and run_once incompatibility

  bugHeartbeatTeam:Docs
  elastic/beats#53918 · Filter by author github-actions opened on Oct 20, 2026

• [Heartbeat] Add allowed_hosts to Vault secret store connections

  Heartbeatneeds_team
  elastic/beats#53903 · Filter by author shahzad31 opened on Oct 20, 2026
  1

  

• [Bug] osquerybeat receiver Shutdown hangs when called right after Start

  bugOsquerybeatTeam:Elastic-Agent-Data-PlaneTeam:Security-Service Integrations
  elastic/beats#53865 · Filter by author khushijain21 opened on Oct 19, 2026
  2

• [Auditbeat] file_integrity: opt-in closed_write event (IN_CLOSE_WRITE) to detect end of writes

  needs_team
  elastic/beats#53823 · Filter by author Vinz2168 opened on Oct 16, 2026
  1

• [Flaky Test] filebeat.tests.system.test_modules.Test test_fileset_file_154_system@module-system

  flaky-testneeds_team
  elastic/beats#53802 · Filter by author elastic-vault-github-plugin-prod opened on Oct 15, 2026
  2

• [Flaky Test] github.com/elastic/beats/v7/auditbeat/module/file_integrity/kprobes Test_Monitor

  flaky-testTeam:Security-Service Integrations
  elastic/beats#53780 · Filter by author elastic-vault-github-plugin-prod opened on Oct 14, 2026
  5

• [Flaky Test] github.com/elastic/beats/v7/auditbeat/module/file_integrity/kprobes Test_Monitor/TestNew

  flaky-testneeds_team
  elastic/beats#53779 · Filter by author elastic-vault-github-plugin-prod opened on Oct 14, 2026
  5

• [OTel] FQDN lookup delays the start of beat receivers by up to a minute

  bugTeam:Elastic-Agent-Control-Plane
  elastic/beats#53732 · Filter by author shahzad31 opened on Oct 13, 2026
  2

• [OTel] Building receiver inputs is quadratic in the number of streams of a unit

  bugTeam:Elastic-Agent-Control-Plane
  elastic/beats#53731 · Filter by author shahzad31 opened on Oct 13, 2026
  1

• [OTel] Group status reporter is quadratic in the number of inputs of a receiver

  bugTeam:Elastic-Agent-Control-Plane
  elastic/beats#53730 · Filter by author shahzad31 opened on Oct 13, 2026
  1

• getFDStats treats os.ErrNotExist as fatal, causing spurious errors when a process exits during enumeration

  needs_team
  elastic/beats#53722 · Filter by author jguay opened on Oct 13, 2026
  1

• [Meta] osquerybeat receiver stays FAILED after output outages on the OTel runtime

  metaOsquerybeatTeam:Elastic-Agent-Data-PlaneTeam:Security-Service Integrations
  Meta

  elastic/beats#53698 · Filter by author ShourieG opened on Oct 12, 2026
  2

• [osquerybeat] Scheduled-query profiling deadlocks on osquery_schedule inside the logger callback

  bugOsquerybeatTeam:Security-Service Integrations
  elastic/beats#53697 · Filter by author ShourieG opened on Oct 12, 2026
  1

  

• [libbeat] One receiver can fill the shared slabqueue pool and block every other receiver

  enhancementTeam:Elastic-Agent-Data-Plane
  Enhancement

  elastic/beats#53696 · Filter by author ShourieG opened on Oct 12, 2026
  3

• packetbeat/pgsql: DataRow columns in binary format are never skipped, so the response fails to parse

  bugPacketbeatTeam:Security-Service Integrations
  elastic/beats#53674 · Filter by author ShourieG opened on Oct 9, 2026
  1

• packetbeat/pgsql: a failed response parse permanently mis-pairs queries with responses on that connection

  bugPacketbeatTeam:Security-Service Integrations
  elastic/beats#53673 · Filter by author ShourieG opened on Oct 9, 2026
  1

• [Filebeat][gcs] All records decoded by a codec (CSV) get the same _id, only the first line of each object is indexed

  FilebeatTeam:Security-Service Integrations
  elastic/beats#53659 · Filter by author Lucas-Feat opened on Oct 8, 2026
  1

• filestream: resuming a GZIP file re-ingests data when buffer_size isn't a divisor of 32 KiB or the file has multiple gzip members

  bugFilebeatTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#53657 · Filter by author orestisfl opened on Oct 8, 2026
  1

• packetbeat: process enrichment rescans all of /proc on every lookup miss, saturating the sniffer

  bugPacketbeatTeam:Security-Service Integrations
  Bug

  elastic/beats#53656 · Filter by author ShourieG opened on Oct 8, 2026
  1