All pull requests

Pull requests

• [cato_networks] Add max_executions option to the event data stream

  documentationenhancementIntegration:cato_networks
  #21876·Niceplace opened Oct 6, 2026Contributor·

  ·
  5

• [o365] Convert stringified numbers back to numbers in the audit pipeline

  bugfixIntegration:o365Team:Security-Service Integrations
  #21875·chrisberkhout opened Oct 6, 2026Contributor·5 tasks done·

  ·
  5

  

• Rename obs-infraobs-integrations to obs-signals-integrations-approvers

  #21874·emma-raffenne opened Oct 6, 2026·2 tasks·

  ·
  3

• build(deps): bump github.com/elastic/package-registry from 1.40.0 to 1.41.0

  automation
  #21872·dependabot[bot] opened Oct 6, 2026Bot·

  ·
  3

• build(deps): bump golang.org/x/tools from 0.50.0 to 0.51.0

  automation
  #21871·dependabot[bot] opened Oct 6, 2026Bot·

  ·
  6

• [aws-cloudtrail]: align user.id and host targets with Cloud Asset Inventory

  Integration:awsTeam:Cloud SecurityTeam:Security-Service Integrations
  #21870·alexreal1314 opened Oct 6, 2026Contributor·2 of 10 tasks·

  ·
  5

  

• [gcp_bigquery_otel] initial draft of dashboard assets

  documentationNew Integration
  #21869·jakubgalecki0 opened Oct 6, 2026Contributor·5 tasks·

  ·
  3

• [o365] Add explicit ECS mapping for file.size

  bugfixdocumentationIntegration:o365Team:Security-Service Integrations
  #21868·chrisberkhout opened Oct 6, 2026Contributor·5 tasks done·

  ·
  1

  5

  

• rapid7_insightvm: improve Fleet UI for asset deprecation and inputs

  documentationenhancementIntegration:rapid7_insightvmTeam:Security-Service Integrations
  #21867·kcreddy opened Oct 6, 2026Contributor·1 of 5 tasks·

  ·
  6

  

• [cloudflare_logpush] Add DEX Application Tests and Device State Events data streams

  Category: Integration qualitydocumentationenhancementIntegration:cloudflare_logpushTeam:SDE-CrestTeam:Security-Service Integrations
  #21862·brijesh-elastic opened Oct 5, 2026Contributor·1 of 5 tasks·

  ·
  3

  

• Document source data stream retention for stateful and Serverless deployments

  documentationenhancementIntegration:armisIntegration:awsIntegration:axoniusIntegration:cyeraIntegration:extrahopIntegration:ironscalesIntegration:island_browserIntegration:jupiter_oneIntegration:m365_defenderIntegration:microsoft_defender_cloudIntegration:microsoft_defender_endpointIntegration:ping_directoryIntegration:qualys_gavIntegration:sentinel_oneIntegration:ti_abusechIntegration:ti_anomaliIntegration:ti_anyrunIntegration:ti_cif3Integration:ti_crowdstrikeIntegration:ti_customIntegration:ti_cybersixgillIntegration:ti_cyware_intel_exchangeIntegration:ti_domaintoolsIntegration:ti_esetIntegration:ti_maltiverseIntegration:ti_mispIntegration:ti_openctiIntegration:ti_otxIntegration:ti_rapid7_threat_commandIntegration:ti_recordedfutureIntegration:ti_socradar_feedsIntegration:ti_socradar_taxiiIntegration:ti_striderIntegration:ti_threatconnectIntegration:ti_threatqIntegration:vectra_ruxIntegration:xm_cyberTeam:obs-ds-hosted-servicesTeam:Security-Service Integrations
  #21858·kcreddy opened Oct 5, 2026Contributor·1 of 5 tasks·

  ·
  58

  

• [Slack] Fix handling of empty details.previous_ip_address

  bugfixIntegration:slackTeam:SDE-CrestTeam:Security-Service Integrations
  #21857·sharad-elastic opened Oct 5, 2026Contributor·4 of 8 tasks·

  ·
  1

  5

  

• Bump go.opentelemetry.io/otel/sdk/log from 0.19.0 to 0.21.0 in /packages/kafka_input_otel/_dev/deploy/docker/generator

  dependenciesgoIntegration:kafka_input_otelTeam:obs-ds-intake-services
  #21856·dependabot[bot] opened Oct 5, 2026Bot·

  ·
  2

• [azure] consolidate shared ARM resource ID pipelines; make parsing case-insensitive (azure 1.40.3)

  enhancementIntegration:azureTeam:obs-ds-hosted-servicesTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21855·stefans-elastic opened Oct 5, 2026Contributor·4 tasks done·

  ·
  1

  7

• [ti_custom] Document IsMalicious TAXII authentication and collection setup

  documentationenhancementIntegration:ti_customneeds CLATeam:Security-Service Integrations
  #21849·hexablob opened Oct 3, 2026·8 of 9 tasks·

  ·
  1

  11

• [Context Engine] Add exporting traces instructions to Claude Code integration

  documentationenhancementIntegration:claude_code
  #21846·meghanmurphy1 opened Oct 2, 2026Contributor·3 of 5 tasks·

  ·
  4

• docs: add profiling receiver standalone execution

  documentationIntegration:profiling_otel
  #21845·rogercoll opened Oct 2, 2026Contributor·5 tasks·

  ·
  1

  3

• [first_epss] Add latest transform for ES|QL LOOKUP JOIN enrichment

  documentationenhancementIntegration:cisa_kevsIntegration:first_epssTeam:Security-Service Integrations
  #21843·clement-fouque opened Oct 2, 2026Contributor·5 tasks done·

  ·
  23

• [gcp_cloudsql_sqlserver_otel] draft of the initial dashboard assets

  documentationNew Integration
  #21842·jakubgalecki0 opened Oct 2, 2026Contributor·5 tasks·

  ·
  3

• [OpenRouter] Add OpenRouter analytics API integration

  documentationNew Integration
  #21841·intuibase opened Oct 2, 2026·7 of 9 tasks·

  ·
  40

  

• Add agent skill for LogsDB columnar readiness, with #21258's improvements

  documentationenhancementTeam:Elastic-Agent-Control-Plane
  #21839·mrg-elastic opened Oct 2, 2026Contributor·

  ·
  1

  

• Use links for identical files in the five largest packages

  enhancementIntegration:axoniusIntegration:githubIntegration:ti_esetIntegration:ti_google_threat_intelligenceIntegration:tychonTeam:Security-Service Integrations
  #21838·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  4

  

• Use links for identical files in packages with several kinds of sharing

  enhancementIntegration:cloudflare_logpushIntegration:google_sccIntegration:google_workspaceIntegration:macosIntegration:microsoft_defender_cloudIntegration:network_trafficIntegration:prisma_cloudIntegration:sentinel_oneIntegration:wizTeam:Security-Service Integrations
  #21837·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  2

  

• Use links for fields shared by routing source and destinations

  enhancementIntegration:amazon_security_lakeIntegration:island_browserIntegration:proofpoint_essentialsIntegration:sentinel_one_cloud_funnelTeam:Security-Service Integrations
  #21836·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  2

  

• Use links for files shared by peer data streams

  enhancementIntegration:awsIntegration:azureIntegration:beyondtrust_epmIntegration:checkpoint_harmony_endpointIntegration:darktraceIntegration:gcpIntegration:gitlabIntegration:jamf_protectIntegration:lite_llmIntegration:microsoft_exchange_serverIntegration:microsoft_intuneIntegration:netskopeIntegration:sublime_securityIntegration:swimlaneIntegration:taniumIntegration:tencent_cloudIntegration:ti_domaintoolsIntegration:zscaler_ziaIntegration:zscaler_zpaTeam:Security-Service Integrations
  #21835·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  7