All pull requests

Pull requests

• [windows] Fix Sysmon registry QWORD value computation

  bugfixIntegration:windowsTeam:Elastic-Agent-Data-PlaneTeam:Security-Service Integrations
  #22444·TT5H opened Nov 13, 2026·7 of 8 tasks·

  ·
  7

• [ti_flashpoint] Send vulnerability cursor with a trailing Z

  bugfixIntegration:ti_flashpointTeam:Security-Service Integrations
  #22442·marc-gr opened Nov 13, 2026Contributor·1 of 2 tasks·

  ·
  8

• island_browser: parse internalIpAddress values with an adapter prefix

  bugfixIntegration:island_browserTeam:Security-Service Integrations
  #22441·marc-gr opened Nov 13, 2026Contributor·5 tasks done·

  ·
  7

• [aws] Remove package-level agent version condition (7.1 backport)

  Integration:awsTeam:obs-ds-hosted-servicesTeam:Security-Service Integrations
  #22440·MichaelKatsoulis opened Nov 13, 2026Contributor·

  ·
  8

• projectdiscovery: add ProjectDiscovery Cloud Platform integration

  documentationenhancementNew Integration
  #22439·clement-fouque opened Nov 13, 2026Contributor·13 tasks done·

  ·
  3

• bitdefender: add GravityZone patch and phasr posture data streams

  documentationenhancementIntegration:bitdefenderTeam:Security-Service Integrations
  #22437·jonny-mcc opened Nov 13, 2026Contributor·3 tasks done·

  ·
  11

• bitdefender: add GravityZone quarantine and blocklist data streams

  documentationenhancementIntegration:bitdefenderTeam:Security-Service Integrations
  #22436·jonny-mcc opened Nov 13, 2026Contributor·3 tasks done·

  ·
  11

• bitdefender: add GravityZone endpoint and account entity data streams

  documentationenhancementIntegration:bitdefenderTeam:Security-Service Integrations
  #22435·jonny-mcc opened Nov 13, 2026Contributor·3 tasks done·

  ·
  9

• bitdefender: add GravityZone incident and incident_alert data streams

  documentationenhancementIntegration:bitdefenderTeam:Security-Service Integrations
  #22434·jonny-mcc opened Nov 13, 2026Contributor·3 tasks done·

  ·
  22

• [updatecli] Update latest snapshot to 8.19.26-SNAPSHOT

  automation
  #22429·github-actions[bot] opened Nov 13, 2026Bot·

  ·
  2

• [chargeback] Self-contained CEL collection, per-data-stream UI config, and ESS/ES symlink aliases (0.6.0)

  documentationenhancement
  #22427·JohannesMahne opened Nov 12, 2026·8 tasks done·

  ·
  237

• [aws] Enable Elastic Managed deployment by default for Amazon EMR

  enhancementIntegration:aws
  #22426·stefans-elastic opened Nov 12, 2026Contributor·3 of 4 tasks·

  ·
  3

• [aws] Enable Elastic Managed deployment by default for AWS API Gateway

  enhancementIntegration:aws
  #22425·stefans-elastic opened Nov 12, 2026Contributor·3 of 4 tasks·

  ·
  3

• [aws] Enable Elastic Managed deployment by default for Amazon MSK metrics

  enhancementIntegration:aws
  #22424·stefans-elastic opened Nov 12, 2026Contributor·3 of 4 tasks·

  ·
  3

• [azure] Write azure.tenant_id in the streams that lack it

  enhancementIntegration:azureTeam:obs-ds-hosted-servicesTeam:Security-Service Integrations
  #22420·stefans-elastic opened Nov 12, 2026Contributor·5 of 6 tasks·

  ·
  9

• [ess_billing] Populate Serverless project names in ess.billing.deployment_name

  bugfixIntegration:ess_billing
  #22419·JohannesMahne opened Nov 12, 2026·8 tasks done·

  ·
  2

  8

• [ess_billing] Fix Traffic (Ingress and Egress) dashboard panels for Serverless projects

  bugfixIntegration:ess_billing
  #22418·JohannesMahne opened Nov 12, 2026·7 tasks done·

  ·
  1

  8

• Rename Elastic Connectors to Elastic Crawlers

  documentationenhancementIntegration:elastic_connectors
  #22413·sophiec20 opened Nov 11, 2026·5 tasks·

  ·
  3

• [cloudflare_logpush] Add MCP Portal Logs and Magic Network Monitoring Flow Logs data streams

  documentationenhancementIntegration:cloudflare_logpushTeam:SDE-CrestTeam:Security-Service Integrations
  #22411·brijesh-elastic opened Nov 11, 2026Contributor·1 of 5 tasks·

  ·
  4

  

• google_workspace: document duplicate events across index rollover

  documentationenhancementIntegration:google_workspaceTeam:Security-Service Integrations
  #22399·kcreddy opened Nov 11, 2026Contributor·1 of 5 tasks·

  ·
  17

  

• [tenable_sc] Add support for the Vulnerability Findings page and Alert/Entity flyouts

  breaking changeCategory: CDRdocumentationenhancementIntegration:tenable_scTeam:SDE-CrestTeam:Security-Service Integrations
  #22398·brijesh-elastic opened Nov 11, 2026Contributor·1 of 5 tasks·

  ·
  1

  44

  

• [azure_billing] Remove package-level agent version condition

  bugfixIntegration:azure_billing
  #22392·mrg-elastic opened Nov 11, 2026Contributor·1 of 4 tasks·

  ·
  6

• [aws_mq][aws_bedrock_agentcore] Remove package-level agent version condition

  bugfixIntegration:aws_bedrock_agentcoreIntegration:aws_mq
  #22391·mrg-elastic opened Nov 11, 2026Contributor·1 of 4 tasks·

  ·
  8

• [aws_logs] Add native Parquet codec options to S3 input

  documentationenhancementIntegration:aws_logsTeam:obs-ds-hosted-services
  #22390·JohannesMahne opened Nov 11, 2026·

  ·
  6

• [eset_protect] Fix SHA-256 hashes written to SHA-1 fields

  bugfixdocumentationIntegration:eset_protectTeam:SDE-CrestTeam:Security-Service Integrations
  #22389·moxarth-rathod opened Nov 11, 2026Contributor·1 of 5 tasks·

  ·
  1

  15