All pull requests

Pull requests

• [Threat Intel] Remove redundant ECS field definitions from transform destination indices - section D

  enhancementIntegration:ti_maltiverseIntegration:ti_socradar_taxiiIntegration:ti_striderTeam:SDE-CrestTeam:Security-Service Integrations
  #21625·brijesh-elastic opened Sep 24, 2026Contributor·

  ·
  6

  

• [Threat Intel] Remove redundant ECS field definitions from transform destination indices - section C

  enhancementIntegration:ti_abusechIntegration:ti_customIntegration:ti_otxIntegration:ti_threatconnectTeam:SDE-CrestTeam:Security-Service Integrations
  #21624·brijesh-elastic opened Sep 24, 2026Contributor·

  ·
  6

  

• [gcp] Audit: orchestrator resource-path extraction best-effort

  #21605·vatsaldesai93 opened Sep 23, 2026Contributor·

  ·
  5

• [ti_eset] Add new data streams

  #21604·polakovicp opened Sep 23, 2026Contributor·

  ·
  4

• update options for custom journald integration

  enhancementTeam:Elastic-Agent-Data-Plane
  #21603·leehinman opened Sep 23, 2026Contributor·

  ·
  4

• o365: stop unfetchable content items stalling audit collection

  bugfixIntegration:o365Team:Security-Service Integrations
  #21602·chemamartinez opened Sep 23, 2026Contributor·

  ·
  6

  

• [Workday] Add default ILM policy to user data stream to fix snapshot fingerprint conflicts

  enhancementIntegration:entityanalytics_adTeam:Cloud SecurityTeam:Security-Service Integrations
  #21600·alexreal1314 opened Sep 23, 2026Contributor·

  ·
  1

  15

• [docker] Transfer package ownership to obs-signals-metrics team

  Integration:dockerTeam:obs-ds-hosted-services
  #21598·mariapoutachidou opened Sep 23, 2026Contributor·

  ·
  3

• [Cloud Security] Sync CIS rule templates

  enhancementIntegration:cloud_security_postureTeam:Cloud Security
  #21597·elastic-vault-github-plugin-prod[bot] opened Sep 23, 2026Bot·

  ·
  4

• [gcp_cloudrun_otel] initial draft of GCP Cloud Run assets

  documentationNew Integration
  #21593·jakubgalecki0 opened Sep 23, 2026Contributor·

  ·
  3

• [nozomi_networks] Set observer.product ECS derived from Configured API URL

  breaking changedocumentationIntegration:nozomi_networksTeam:SDE-CrestTeam:Security-Service Integrations
  #21592·mohitjha-elastic opened Sep 23, 2026Contributor·

  ·
  1

  10

  

• [sublime_security] Map attack_score_verdict in the message_event datastream

  documentationenhancementIntegration:sublime_securityTeam:SDE-CrestTeam:Security-Service Integrations
  #21591·moxarth-rathod opened Sep 23, 2026Contributor·

  ·
  1

  8

  

• Azure: fix uri_parts pipeline error on PII-tagged requestUri

  bugfixIntegration:azureTeam:Security-Service Integrations
  #21590·chemamartinez opened Sep 23, 2026Contributor·

  ·
  10

  

• Test branch package-spec#1265 - DO NOT MERGE

  #21588·elastic-vault-github-plugin-prod[bot] opened Sep 23, 2026Bot·

  ·
  4

  

• microsoft_defender_endpoint: fix httpjson cursor never advancing in log data stream

  bugfixIntegration:microsoft_defender_endpointTeam:Security-Service Integrations
  #21575·efd6 opened Sep 22, 2026Contributor·

  ·
  1

  8

  

• feat: first version of the HarfangLab integration

  documentationNew Integration
  #21574·Robert-HarfangLab opened Sep 22, 2026·

  ·
  4

• changelog: aws 7.1.4 (backport sync from PR #21491)

  backport:sync-changelogchangelog-link-check:skipIntegration:awsTeam:obs-ds-hosted-services
  #21566·github-actions[bot] opened Sep 22, 2026Bot·

  ·
  2

  

• [temporal] fix: query parameters in Metrics Path are percent-encoded (%3F), returning no data

  bugfixdocumentationenhancementIntegration:temporalTeam:Obs-InfraObs
  #21565·stefans-elastic opened Sep 22, 2026Contributor·

  ·
  3

• [prometheus_input_otel] add params variable for Prometheus scrape query parameters

  bugfixIntegration:prometheus_input_otelTeam:Obs-InfraObs
  #21564·stefans-elastic opened Sep 22, 2026Contributor·

  ·
  8

• [LotL] Update problemchild inference pipeline and remove support for endgame

  documentationenhancementIntegration:problemchild
  #21511·sodhikirti07 opened Sep 21, 2026Contributor·

  ·
  4

• Cisco secure email gateway rest api data streams

  dashboardIntegration:cisco_secure_email_gatewayTeam:Integration-Experience
  #21501·fred-maussion opened Sep 21, 2026·

  ·
  1

  22

• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.43.0 to 1.45.0 in /packages/kafka_input_otel/_dev/deploy/docker/generator

  dependenciesgoIntegration:kafka_input_otelTeam:obs-ds-intake-services
  #21479·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  1

• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.19.0 to 0.21.0 in /packages/kafka_input_otel/_dev/deploy/docker/generator

  dependenciesgoIntegration:kafka_input_otelTeam:obs-ds-intake-services
  #21478·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  2

• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.43.0 to 1.45.0 in /packages/kafka_input_otel/_dev/deploy/docker/generator

  dependenciesgoIntegration:kafka_input_otelTeam:obs-ds-intake-services
  #21477·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  1

• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.43.0 to 1.45.0 in /packages/kafka_input_otel/_dev/deploy/docker/generator

  dependenciesgoIntegration:kafka_input_otelTeam:obs-ds-intake-services
  #21476·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  1