Issues

• [CISCO ISE]: CISE_Administrative_and_Operational_Audit add and remove user messages to parse user.target.name

  Integration:cisco_iseneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22200 · Filter by author jguay opened on Oct 27, 2026
  1

  

• [entityanalytics_ad]: 413 errors when attempting full synchronisation

  Integration:entityanalytics_adneeds:triageTeam:Security-Service Integrations
  elastic/integrations#22199 · Filter by author meganlear opened on Oct 27, 2026
  2

• [ESET PROTECT]: Add an incident data stream for ESET Connect /v2/incidents

  Integration:eset_protectneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22067 · Filter by author Terilia opened on Oct 19, 2026
  2

  

• [Zscaler ZPA]: Adding support for additional datasets

  Integration:zscaler_zpaneeds:triageTeam:Security-Service Integrations
  elastic/integrations#22055 · Filter by author Charelzard opened on Oct 16, 2026
  1

  

• [Palo Alto Prisma Cloud] Host dataset consistently uses offset 10 instead of configured offset 0

  Integration:prisma_cloudneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22051 · Filter by author nathanielgreene-del opened on Oct 16, 2026
  2

  

• [Cloudflare Logpush] Warn when multiple data streams share the same SQS queue URL

  Integration:cloudflare_logpushneeds:triageTeam:Security-Service Integrations
  elastic/integrations#22043 · Filter by author rseldner opened on Oct 15, 2026
  2

• System Integration (Windows): ECS core fields not populated

  Integration:systemneeds:triageTeam:Obs-InfraObs
  elastic/integrations#22034 · Filter by author DylanFHJoyce01 opened on Oct 15, 2026

• [Osquery Manager]: vuln-management pack queries removed opera_extensions table

  bugIntegration:osquery_managerneeds:triageTeam:Defend Workflows
  elastic/integrations#21996 · Filter by author gergoabraham opened on Oct 14, 2026

• [Kibana]: Kibana integration (Elastic Agent) should support API key auth to scrape Kibana metrics (OIDC-only deployments)

  Integration:kibananeeds:triageTeam:Stack Monitoring
  elastic/integrations#21952 · Filter by author alekstoll opened on Oct 12, 2026

• [ESET PROTECT]: SHA-256 values from hash are written to file.hash.sha1 and threat.indicator.file.hash.sha1

  bugIntegration:eset_protectneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#21949 · Filter by author ESET-WesselVeltman opened on Oct 12, 2026
  1

  

• [Azure Functions]: add Flex Consumption plan metrics (OnDemand/AlwaysReady execution counts, CpuPercentage)

  Integration:azure_functionsneeds:triageTeam:Obs-InfraObs
  elastic/integrations#21933 · Filter by author rbanica opened on Oct 9, 2026

• [Azure Functions]: documentation incorrectly states FunctionExecutionCount is Consumption-plan only

  Integration:azure_functionsneeds:triageTeam:Obs-InfraObs
  elastic/integrations#21932 · Filter by author rbanica opened on Oct 9, 2026

• [Azure Functions]: "Function Execution Count" panel filters on HealthCheckStatus, so it is always empty on Consumption and Flex Consumption plans

  Integration:azure_functionsneeds:triageTeam:Obs-InfraObs
  elastic/integrations#21931 · Filter by author rbanica opened on Oct 9, 2026

• Expose “Preserve original event” option for Custom Logs (Filestream) integration

  Integration:filestreamneeds:triageTeam:Elastic-Agent-Data-Plane
  elastic/integrations#21924 · Filter by author suZeroCool opened on Oct 8, 2026
  1

• [Netflo]: Data volume unites for netflow Top-N Dashboard are shown in bytes it should be in MB,GB

  Integration:netflowneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21920 · Filter by author ahsanullah1986 opened on Oct 8, 2026
  2

• [ess_billing]: Rename to Elastic Cloud

  Integration:ess_billingneeds:triageTeam:Obs-InfraObs
  elastic/integrations#21905 · Filter by author demers-eric opened on Oct 8, 2026

• [Integration Name]: Juniper SRX integration doesn't parse the username from the message

  Integration:juniper_srxneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21877 · Filter by author chais0n opened on Oct 6, 2026
  2

• [F5_BIGIP]: ASM: parsed events are in the future

  Integration:f5_bigipneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21861 · Filter by author ash-darin opened on Oct 5, 2026
  2

• [Kubernetest]: k8s version >= 1.34 breaks the Apiserver Watch Events Size per Kind [Metrics Kubernetes] panel

  needs:triageTeam:obs-signals-metrics
  elastic/integrations#21840 · Filter by author osullivandonal opened on Oct 2, 2026
  1

• [Microsoft Exchange Online Message Trace]: Log loss due to out of order/Eventual consistency Message Trace

  Integration:microsoft_exchange_online_message_tracneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21779 · Filter by author ericwong3 opened on Sep 30, 2026
  1

• [Google Cloud Platform]: vpcflow community_id fails with "invalid source port [null]" on dropped-traffic records and aborts the pipeline

  Integration:gcpneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#21761 · Filter by author akfav opened on Sep 30, 2026
  1

  

• [Sublime Security]: map sender.email, sender.display_name, subject, and recipients[].email fields

  Integration:sublime_securitymapping/pipeline issueneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#21702 · Filter by author kayapuskarov opened on Sep 28, 2026
  1

  

• [auditd.log]: Incorrect user.name Population for ADD_USER Events

  Integration:auditdneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21606 · Filter by author bhushanghotekar1399-netizen opened on Sep 24, 2026
  1

• [Integration Name]: PAN-OS event.action should reuse vendor fields instead of custom event.action values

  Integration:panwneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21595 · Filter by author 2gavy opened on Sep 23, 2026
  2

• [Keeper Security]: Add support for pulling events from the Keeper API

  Integration:keepermaintainer:Partnerneeds:triageTeam:Security-Service Integrations
  elastic/integrations#21562 · Filter by author gittihub123 opened on Sep 22, 2026
  2