All pull requests

Pull requests

• [PingDirectory] Add support of Kibana 9.5.4 for ILM delete permission

  enhancementIntegration:ping_directoryTeam:SDE-CrestTeam:Security-Service Integrations
  #21654·muskan-agarwal26 opened Sep 25, 2026Contributor·

  ·
  5

  

• atlassian_confluence: extract IDs from Cloud audit group names

  enhancementIntegration:atlassian_confluenceTeam:Security-Service Integrations
  #21653·kcreddy opened Sep 25, 2026Contributor·

  ·
  3

  

• cloudflare_logpush: declare start_timestamp and ignore_older for http_request

  #21652·staal0 opened Sep 25, 2026·

  ·
  2

• Fix script tests blocked by the MinIO image and LogsDB source shape.

  bugfixflaky-testIntegration:amazon_security_lakeIntegration:sentinel_one_cloud_funnelIntegration:ti_abusechTeam:SDE-CrestTeam:Security-Service Integrations
  #21651·muskan-agarwal26 opened Sep 25, 2026Contributor·

  ·
  9

  6

  

• [XM Cyber] Require Kibana 8.19.23, 9.4.8 or 9.5.5 for ILM delete permission

  enhancementIntegration:xm_cyberTeam:SDE-Crest
  #21644·muskan-agarwal26 opened Sep 25, 2026Contributor·

  ·
  7

  

• [automation] Update required package versions for temporal

  automation
  #21642·github-actions[bot] opened Sep 25, 2026Bot·

  ·
  2

• [atlassian_confluence] Fix unconditional date processor in self-hosted…

  bugfixIntegration:atlassian_confluencesource:integration_sentinelTeam:Service-Integrations
  #21640·ie-ops opened Sep 24, 2026Contributor·

  ·
  7

  

• Fix AWS metrics include_linked_accounts false being dropped

  #21639·MichaelKatsoulis opened Sep 24, 2026Contributor·

  ·
  6

• [cisco_ise] Add ECS category/type/outcome for Administrative and Operational Audit events

  bugIntegration:cisco_iseTeam:Integration-Experience
  #21638·Niceplace opened Sep 24, 2026Contributor·

  ·
  15

• [temporal_otel] address dashboard design review notes (observability-dev#6215)

  #21633·stefans-elastic opened Sep 24, 2026Contributor·

  ·
  3

• Fix AWS metrics include_linked_accounts false being dropped

  Integration:awsTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21631·MichaelKatsoulis opened Sep 24, 2026Contributor·

  ·
  1

  10

• [gcp_cloudstorage_otel] initial draft of GCP Cloud Storage assets

  documentationenhancementNew Integration
  #21630·giorgi-imerlishvili-elastic opened Sep 24, 2026Contributor·

  ·
  3

  

• [azure] align metadata fields to OTel semantic conventions (azure 1.41.0)

  dashboarddocumentationIntegration:azure
  #21629·stefans-elastic opened Sep 24, 2026Contributor·

  ·
  3

• [armis] Add GA readiness tests, benchmarks, and dashboard links.

  dashboarddocumentationenhancementIntegration:armisTeam:SDE-CrestTeam:Security-Service Integrations
  #21628·muskan-agarwal26 opened Sep 24, 2026Contributor·

  ·
  6

  

• [Threat Intel] Remove redundant ECS field definitions from transform destination indices - section D

  enhancementIntegration:ti_maltiverseIntegration:ti_socradar_taxiiIntegration:ti_striderTeam:SDE-CrestTeam:Security-Service Integrations
  #21625·brijesh-elastic opened Sep 24, 2026Contributor·

  ·
  6

  

• [Threat Intel] Remove redundant ECS field definitions from transform destination indices - section C

  enhancementIntegration:ti_abusechIntegration:ti_customIntegration:ti_otxIntegration:ti_threatconnectTeam:SDE-CrestTeam:Security-Service Integrations
  #21624·brijesh-elastic opened Sep 24, 2026Contributor·

  ·
  6

  

• [gcp] Audit: make orchestrator resource-path extraction best-effort

  bugfixIntegration:gcpTeam:Security-Service Integrations
  #21605·vatsaldesai93 opened Sep 23, 2026Contributor·

  ·
  9

• [ti_eset] Add new data streams

  documentationenhancementIntegration:ti_esetTeam:Security-Service Integrations
  #21604·polakovicp opened Sep 23, 2026Contributor·

  ·
  7

• o365: stop unfetchable content items stalling audit collection

  bugfixdocumentationIntegration:o365Team:Security-Service Integrations
  #21602·chemamartinez opened Sep 23, 2026Contributor·

  ·
  10

  

• [Workday] Add default ILM policy to user data stream to fix snapshot fingerprint conflicts

  enhancementIntegration:workdayTeam:Cloud SecurityTeam:Security-Service Integrations
  #21600·alexreal1314 opened Sep 23, 2026Contributor·

  ·
  1

  15

• [Cloud Security] Sync CIS rule templates

  enhancementIntegration:cloud_security_postureTeam:Cloud Security
  #21597·elastic-vault-github-plugin-prod[bot] opened Sep 23, 2026Bot·

  ·
  4

• Azure: fix uri_parts pipeline error on PII-tagged requestUri

  bugfixIntegration:azureTeam:Security-Service Integrations
  #21590·chemamartinez opened Sep 23, 2026Contributor·

  ·
  12

  

• Test branch package-spec#1265 - DO NOT MERGE

  #21588·elastic-vault-github-plugin-prod[bot] opened Sep 23, 2026Bot·

  ·
  4

  

• microsoft_defender_endpoint: fix httpjson cursor never advancing in log data stream

  bugfixIntegration:microsoft_defender_endpointTeam:Security-Service Integrations
  #21575·efd6 opened Sep 22, 2026Contributor·

  ·
  1

  8

  

• feat: first version of the HarfangLab integration

  documentationNew Integration
  #21574·Robert-HarfangLab opened Sep 22, 2026·

  ·
  4