All pull requests

Pull requests

• crowdstrike: remove FDR ingest-time cache enrichment

  breaking changedocumentationenhancementIntegration:crowdstrikeTeam:Security-Service Integrations
  #22243·kcreddy opened Oct 30, 2026Contributor·1 of 5 tasks·

  ·
  1

  8

  

• [snowflake] Enable Agentless Deployment and Update Readme Doc

  documentationenhancementIntegration:snowflakeTeam:SDE-CrestTeam:Security-Service Integrations
  #22242·mohitjha-elastic opened Oct 30, 2026Contributor·1 of 5 tasks·

  ·
  1

  10

  

• [cato_networks] Add Filters setting to the event data stream

  documentationenhancementIntegration:cato_networks
  #22239·Niceplace opened Oct 30, 2026Contributor·4 tasks done·

  ·
  4

• [New Integration] Add HoneyLabs threat intelligence integration

  documentationenhancementNew Integration
  #22238·honeylabshq opened Oct 29, 2026·4 of 7 tasks·

  ·
  25

• [fortinet_fortigate] Fix email fields, RFC 5424 @timestamp and FortiExtender signal values

  bugfixdocumentationIntegration:fortinet_fortigateTeam:Security-Service Integrations
  #22237·ilyannn opened Oct 29, 2026Contributor·5 tasks done·

  ·
  5

• [vsphere] Add system test variants for vSphere 8.0 and 9.0 API versions

  enhancementIntegration:vsphere
  #22236·giorgi-imerlishvili-elastic opened Oct 29, 2026Contributor·1 of 8 tasks·

  ·
  

• Draft: Okta example of writing relationship entity ids at ingest

  documentationenhancementIntegration:entityanalytics_okta
  #22232·m-adams opened Oct 29, 2026·2 of 5 tasks·

  ·
  3

• [slack] Add user data stream.

  documentationenhancementIntegration:slack
  #22231·muskan-agarwal26 opened Oct 29, 2026Contributor·5 tasks done·

  ·
  1

  14

• [Trivy] Add Trivy vulnerability findings integration

  documentationenhancementNew IntegrationTeam:Security-Service Integrations
  #22230·WildDogOne opened Oct 29, 2026Contributor·5 of 10 tasks·

  ·
  1

• [cisco_asa] Fix padded-duration teardowns and parse 302303 built connections

  bugfixIntegration:cisco_asaTeam:SDE-CrestTeam:Security-Service Integrations
  #22229·moxarth-rathod opened Oct 29, 2026Contributor·1 of 5 tasks·

  ·
  12

  

• feat: increase process.command_line and process.args limits at cloud-defend

  bugfixdocumentationenhancementIntegration:cloud_defend
  #22228·biscout42 opened Oct 28, 2026Contributor·

  ·
  7

• [Enhancement] [akamai] Add Amazon S3 and SQS collection support for SIEM logs

  documentationenhancementIntegration:akamaiTeam:Security-Service Integrations
  #22223·eddxavier-elastic opened Oct 28, 2026Contributor·9 of 11 tasks·

  ·
  49

• [checkpoint] Add conditional checks for timestamp renaming to avoid pipeline failures on existing timestamps

  enhancementIntegration:checkpoint
  #22221·xpac1985 opened Oct 28, 2026·2 of 6 tasks·

  ·
  8

• chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /packages/claude_cowork/_dev/deploy/docker/generator

  dependenciesgoIntegration:claude_coworkTeam:Security-Service Integrations
  #22220·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  5

• [nginx] Remove nginx group from content, input and ingress controller packages

  enhancementIntegration:nginx_ingress_controller_otelIntegration:nginx_ingress_controllerIntegration:nginx_otel_inputIntegration:nginx_otelIntegration:nginxTeam:obs-ds-hosted-services
  #22219·kpollich opened Oct 28, 2026Member·2 of 5 tasks·

  ·
  5

  

• Test branch package-spec#1273 - DO NOT MERGE

  #22217·elastic-vault-github-plugin-prod[bot] opened Oct 28, 2026Bot·

  ·
  4

  

• [cloudflare_logpush] Add Browser Isolation User Actions and Email Security Post Delivery Events data streams

  documentationenhancementIntegration:cloudflare_logpushTeam:SDE-CrestTeam:Security-Service Integrations
  #22216·brijesh-elastic opened Oct 28, 2026Contributor·1 of 5 tasks·

  ·
  3

  

• [sublime_security] Map sender, subject, and recipients from data.message in message_event data stream

  documentationenhancementIntegration:sublime_securityTeam:SDE-CrestTeam:Security-Service Integrations
  #22215·mohitjha-elastic opened Oct 28, 2026Contributor·1 of 5 tasks·

  ·
  1

  7

  

• [salesforce] Fix Login/Logout EventLogFile collection in orgs without Event Monitoring

  bugfixdocumentationIntegration:salesforce
  #22213·shmsr opened Oct 28, 2026Member·7 of 8 tasks·

  ·
  4

  

• [System] Fix system.auth IAM events event.outcome

  bugfixIntegration:systemTeam:SDE-CrestTeam:Security-Service Integrations
  #22212·moxarth-rathod opened Oct 28, 2026Contributor·1 of 5 tasks·

  ·
  1

  11

  

• [Palo Alto Prisma Cloud] Fix host data stream stuck on a stale pagination offset

  bugfixIntegration:prisma_cloudTeam:SDE-CrestTeam:Security-Service Integrations
  #22210·sharad-elastic opened Oct 28, 2026Contributor·1 of 5 tasks·

  ·
  1

  8

  

• [AWS Bedrock Agentcore] Add support for code_interpreter_application_logs and runtime_logs events

  documentationenhancementIntegration:aws_bedrock_agentcoreTeam:SDE-CrestTeam:Security-Service Integrations
  #22209·moxarth-rathod opened Oct 28, 2026Contributor·1 of 5 tasks·

  ·
  1

  23

  

• [aws_cloudwatch_input_otel] Add the Identity Federation setup option for Elastic Managed deployments

  documentationenhancementIntegration:aws_cloudwatch_input_otel
  #22206·jeniawhite opened Oct 27, 2026Contributor·4 of 10 tasks·

  ·
  4

• [gcp_bigquery_otel] draft alerts

  documentationenhancementIntegration:gcp_bigquery_otel
  #22203·jakubgalecki0 opened Oct 27, 2026Contributor·5 tasks·

  ·
  14

• [gcp_cloudsql_mysql_otel] Add Alerting v2 rule templates and an SLO template

  documentationenhancementIntegration:gcp_cloudsql_mysql_otel
  #22202·giorgi-imerlishvili-elastic opened Oct 27, 2026Contributor·2 of 9 tasks·

  ·
  23