All pull requests

Pull requests

• sentinel_one: fix threat_event CEL eval error after an empty poll

  bugfixIntegration:sentinel_oneTeam:Security-Service Integrations
  #22042·chemamartinez opened Oct 15, 2026Contributor·2 of 5 tasks·

  ·
  7

  

• [gcp_cloudrun_otel] draft alerts and slos

  Integration:gcp_cloudrun_otel
  #22041·jakubgalecki0 opened Oct 15, 2026Contributor·5 tasks·

  ·
  3

• suricata: avoid source address rename conflicts

  bugfixIntegration:suricataIntegration:systemTeam:Integration-Experience
  #22038·hellqvio86 opened Oct 15, 2026Contributor·6 tasks done·

  ·
  3

• [microsoft_sqlserver] Migrate error logs from logfile to filestream

  bugfixdocumentationIntegration:microsoft_sqlserverTeam:Obs-InfraObs
  #22037·shmsr opened Oct 15, 2026Member·7 tasks done·

  ·
  6

  

• Test elastic-package#4064 - DO NOT MERGE

  #22036·elastic-vault-github-plugin-prod[bot] opened Oct 15, 2026Bot·

  ·
  3

  

• [mysql] Declare LogsDB columnar support

  enhancementIntegration:mysql
  #22033·mrg-elastic opened Oct 15, 2026Contributor·3 of 7 tasks·

  ·
  3

• [nginx] Declare LogsDB columnar support

  enhancementIntegration:nginx
  #22032·mrg-elastic opened Oct 15, 2026Contributor·3 of 7 tasks·

  ·
  3

• [fortinet_fortigate] Declare LogsDB columnar support and sort the log stream by observer.name

  enhancementIntegration:fortinet_fortigate
  #22031·mrg-elastic opened Oct 15, 2026Contributor·3 of 8 tasks·

  ·
  3

• [nginx_otel_integration] access log parse timing values

  documentationenhancementIntegration:nginx_otel_integrationTeam:Obs-InfraObs
  #22000·jakubgalecki0 opened Oct 14, 2026Contributor·5 tasks·

  ·
  3

• [gcp] audit: add host.target.id and full-resource-name entity.target.id

  documentationenhancementIntegration:gcpTeam:Cloud SecurityTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21999·alexreal1314 opened Oct 14, 2026Contributor·1 of 5 tasks·

  ·
  20

  

• [temporal] make it GA (1.0.0)

  enhancementIntegration:temporalTeam:Obs-InfraObs
  #21998·stefans-elastic opened Oct 14, 2026Contributor·3 tasks done·

  ·
  3

• [snowflake] Initial release with access_history, data_transfer_history, and stages data streams

  documentationenhancementIntegration:snowflakeNew IntegrationTeam:SDE-CrestTeam:Security-Service Integrations
  #21995·mohitjha-elastic opened Oct 14, 2026Contributor·5 tasks done·

  ·
  39

  

• [prisma_access] Replace cef.extensions renames with a single script

  enhancementIntegration:prisma_accessTeam:Integration-Experience
  #21980·philippkahr opened Oct 13, 2026Contributor·4 of 5 tasks·

  ·
  14

• [Juniper SRX] Accept hostnames containing underscores in the syslog header

  bugfixIntegration:juniper_srxTeam:Integration-Experience
  #21979·caleb-elastic opened Oct 13, 2026·6 of 8 tasks·

  ·
  6

• [Tenable Security Center] fingerprint asset _id with mutable scan state and add latest transform

  bugfixdocumentationenhancementIntegration:tenable_scTeam:SDE-CrestTeam:Security-Service Integrations
  #21971·moxarth-rathod opened Oct 13, 2026Contributor·1 of 5 tasks·

  ·
  1

  8

  

• [system,windows] Add start_position setting to winlog data streams

  enhancementIntegration:systemIntegration:windows
  #21970·chrisberkhout opened Oct 13, 2026Contributor·3 of 5 tasks·

  ·
  4

  

• [aws] Fix AWS metrics include_linked_accounts false being dropped (7.1 backport)

  bugfixIntegration:awsTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21969·MichaelKatsoulis opened Oct 13, 2026Contributor·2 of 5 tasks·

  ·
  10

• [System] Fix RFC 5424 auth grok pattern by removing spaces

  bugfixIntegration:systemTeam:SDE-CrestTeam:Security-Service Integrations
  #21967·sharad-elastic opened Oct 13, 2026Contributor·1 of 5 tasks·

  ·
  1

  7

  

• [armis] Fix latest-transform namespace mapping and CEL null guards

  bugfixdocumentationIntegration:armisIntegration:openai_chatgpt_enterpriseTeam:Security-Service Integrations
  #21961·muskan-agarwal26 opened Oct 13, 2026Contributor·5 tasks done·

  ·
  12

• [aws] Map GuardDuty Critical severity and handle fractional severities

  bugfixIntegration:awsTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21955·chrisberkhout opened Oct 12, 2026Contributor·2 of 5 tasks·

  ·
  11

  

• [Workday] Preserve Sign-on initial_interval in CEL state so a failed …

  bugfixIntegration:workdayTeam:SDE-CrestTeam:Security-Service Integrations
  #21954·moxarth-rathod opened Oct 12, 2026Contributor·1 of 5 tasks·

  ·
  11

  

• [haproxy] Fix NPE exception when source is missing in log pipeline

  Integration:haproxyTeam:Obs-InfraObs
  #21953·Orabig opened Oct 12, 2026·1 of 7 tasks·

  ·
  1

• [automation] Update required package versions for nginx_otel_integration

  automationenhancementIntegration:nginx_otel_integrationTeam:Obs-InfraObs
  #21947·github-actions[bot] opened Oct 12, 2026Bot·

  ·
  2

• [gcp_gke_otel] Add GKE OpenTelemetry dashboards

  documentationenhancementNew Integration
  #21944·giorgi-imerlishvili-elastic opened Oct 9, 2026Contributor·9 of 11 tasks·

  ·
  3

  

• google_workspace: add users entity data stream

  documentationenhancementIntegration:google_workspaceTeam:Security-Service Integrations
  #21943·chemamartinez opened Oct 9, 2026Contributor·4 of 5 tasks·

  ·
  21