All pull requests

Pull requests

• [tychon] Share the default pipeline and field files between data streams and transforms

  documentationenhancementIntegration:tychonTeam:Security-Service Integrations
  #21922·chrisberkhout opened Oct 8, 2026Contributor·1 of 5 tasks·

  ·
  4

  

• changelog: aws 7.1.5 (backport sync from PR #21898)

  backport:sync-changelogchangelog-link-check:skipIntegration:awsTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21921·github-actions[bot] opened Oct 8, 2026Bot·

  ·
  3

  

• [aws_bedrock_agentcore] Make agentless the default deployment mode

  enhancementIntegration:aws_bedrock_agentcore
  #21918·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  4

• [aws_bedrock] Make agentless the default deployment mode

  documentationenhancementIntegration:aws_bedrock
  #21917·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  4

• [aws_mq] Make agentless the default deployment mode

  documentationenhancementIntegration:aws_mq
  #21916·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• [aws] Enable agentless by default for AWS Usage metrics

  enhancementIntegration:aws
  #21915·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• [aws] Enable agentless by default for Amazon VPN metrics

  enhancementIntegration:aws
  #21914·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• [aws] Enable agentless by default for AWS NAT Gateway metrics

  enhancementIntegration:aws
  #21913·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• [aws] Enable agentless by default for Amazon S3 Storage Lens metrics

  enhancementIntegration:aws
  #21912·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• Use links for files that differ only in descriptions

  documentationenhancementIntegration:axoniusIntegration:azureIntegration:beyondtrust_epmIntegration:cyeraIntegration:darktraceIntegration:google_workspaceIntegration:sentinel_oneIntegration:ti_anyrunIntegration:ti_cyware_intel_exchangeIntegration:ti_socradar_feedsTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21911·chrisberkhout opened Oct 8, 2026Contributor·1 of 5 tasks·

  ·
  4

  

• [aws] Enable agentless by default for Amazon Redshift metrics

  enhancementIntegration:aws
  #21910·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• [aws] Enable agentless by default for Amazon Kinesis Data Stream metrics

  enhancementIntegration:aws
  #21909·stefans-elastic opened Oct 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• Use links for files that differ only in formatting

  enhancementIntegration:cloudflare_logpushIntegration:qualys_vmdrIntegration:ti_cybersixgillIntegration:ti_mispIntegration:ti_recordedfutureIntegration:ti_threatqTeam:Security-Service Integrations
  #21908·chrisberkhout opened Oct 8, 2026Contributor·1 of 5 tasks·

  ·
  4

  

• Use links for more identical files

  enhancementIntegration:cisa_kevsIntegration:first_epssIntegration:iruIntegration:network_trafficTeam:Security-Service Integrations
  #21907·chrisberkhout opened Oct 8, 2026Contributor·5 tasks·

  ·
  3

  

• [ti_eset] Map valid_from and link shared files

  documentationenhancementIntegration:ti_esetTeam:Security-Service Integrations
  #21906·chrisberkhout opened Oct 8, 2026Contributor·1 of 5 tasks·

  ·
  5

  

• [openai_chatgpt_enterprise] Reduce default poll interval to 15m and add rate-limit/retry settings

  documentationenhancementIntegration:openai_chatgpt_enterpriseTeam:SDE-CrestTeam:Security-Service Integrations
  #21902·muskan-agarwal26 opened Oct 8, 2026Contributor·5 tasks done·

  ·
  1

  8

  

• Test branch package-spec#1215 - DO NOT MERGE

  #21901·elastic-vault-github-plugin-prod[bot] opened Oct 8, 2026Bot·

  ·
  3

  

• [microsoft_dhcp, microsoft_exchange_server] Copy IP and user fields into related

  documentationenhancementIntegration:microsoft_dhcpIntegration:microsoft_exchange_serverTeam:SDE-CrestTeam:Security-Service Integrations
  #21899·muskan-agarwal26 opened Oct 8, 2026Contributor·5 tasks done·

  ·
  2

  9

  

• [ngix_otel] rename attributes http.version and log.level

  documentationenhancementIntegration:nginx_otelTeam:Obs-InfraObs
  #21891·jakubgalecki0 opened Oct 7, 2026Contributor·5 tasks·

  ·
  4

• Code ownership changes from integration-experience to service-integrations

  enhancementIntegration:anthropicIntegration:arista_ngfwIntegration:atlassian_cloudIntegration:backstageIntegration:barracuda_cloudgen_firewallIntegration:barracudaIntegration:bluecoatIntegration:cato_networksIntegration:cefIntegration:checkpointIntegration:cilium_tetragonIntegration:cisco_aironetIntegration:cisco_asaIntegration:cisco_ftdIntegration:cisco_iosIntegration:cisco_iseIntegration:cisco_merakiIntegration:cisco_nexusIntegration:cisco_secure_email_gatewayIntegration:cisco_umbrellaIntegration:citrix_wafIntegration:corelightIntegration:criblIntegration:cursorIntegration:endaceIntegration:f5_bigipIntegration:falcoIntegration:fireeyeIntegration:forcepoint_webIntegration:forescoutIntegration:fortinet_forticlientIntegration:fortinet_fortiedrIntegration:fortinet_fortigateIntegration:fortinet_fortimailIntegration:fortinet_fortimanagerIntegration:fortinet_fortiproxyIntegration:gigamonIntegration:goflow2Integration:hackeroneIntegration:hashicorp_vaultIntegration:hpe_aruba_cxIntegration:impervaIntegration:infoblox_niosIntegration:infoblox_threat_defenseIntegration:iptablesIntegration:juniper_junosIntegration:juniper_netscreenIntegration:juniper_srxIntegration:kolideIntegration:modsecurityIntegration:netflowIntegration:netscoutIntegration:panwIntegration:pfsenseIntegration:prisma_accessIntegration:proxysgIntegration:pulse_connect_secureIntegration:qnap_nasIntegration:radwareIntegration:snortIntegration:sonicwall_firewallIntegration:sophosIntegration:squidIntegration:stormshieldIntegration:suricataIntegration:symantec_endpointIntegration:syslog_routerIntegration:tcpIntegration:threat_mapIntegration:udpIntegration:watchguard_fireboxIntegration:zeek
  #21889·qcorporation opened Oct 7, 2026Contributor·

  ·
  6

• [aws] Make agentless the default for metrics policy templates

  enhancementIntegration:aws
  #21887·stefans-elastic opened Oct 7, 2026Contributor·3 of 5 tasks·

  ·
  4

• [snyk] stop error-only events from the agent at the start of the ingest pipelines

  bugfixIntegration:snykTeam:SDE-CrestTeam:Security-Service Integrations
  #21886·brijesh-elastic opened Oct 7, 2026Contributor·1 of 5 tasks·

  ·
  1

  6

  

• [snowflake] Initial release with login_history, sessions, and grants_to_users Data Streams

  dashboarddocumentationenhancementIntegration:snowflakeNew IntegrationTeam:SDE-CrestTeam:Security-Service Integrations
  #21885·mohitjha-elastic opened Oct 7, 2026Contributor·5 tasks done·

  ·
  16

  

• [cato_networks] Add max_executions option to the event data stream

  documentationenhancementIntegration:cato_networksTeam:Integration-Experience
  #21876·Niceplace opened Oct 6, 2026Contributor·

  ·
  18

• [o365] Convert stringified numbers back to numbers in the audit pipeline

  breaking changeIntegration:o365Team:Security-Service Integrations
  #21875·chrisberkhout opened Oct 6, 2026Contributor·5 tasks done·

  ·
  8