Issues

• [cloudflare_logpush] Fix AWS S3 [S3] Interval setting being ignored

  bugfixCategory: Integration qualityIntegration:cloudflare_logpushTeam:SDE-CrestTeam:Security-Service Integrations
  Unread
  elastic/integrations#22250·brijesh-elastic opened Oct 30, 2026 · Updated Oct 30, 2026
  9

  

• [ti_*] Add is_ioc_transform_source label so Threat Intel rules skip raw indices

  bugfixdocumentationIntegration:ti_cyware_intel_exchangeIntegration:ti_flashpointIntegration:ti_google_threat_intelligenceIntegration:ti_greynoiseTeam:SDE-CrestTeam:Security-Service Integrations
  Unread
  elastic/integrations#22249·sharad-elastic opened Oct 30, 2026 · Updated Oct 30, 2026
  10

  

• [windows] Fix PowerShell 4103 ContextInfo parsing of script lines and localized keys

  bugfixIntegration:windowsTeam:Elastic-Agent-Data-PlaneTeam:Security-Service Integrations
  Unread
  elastic/integrations#22248·chrisberkhout opened Oct 30, 2026 · Updated Oct 30, 2026
  10

  

• [mongodb_atlas] Include alert updated timestamp and status in alert document ID

  bugbugfixIntegration:mongodb_atlas
  Unread
  elastic/integrations#22246·shmsr opened Oct 30, 2026 · Updated Oct 30, 2026
  5

  

• [fortinet_fortigate] Fix email fields, RFC 5424 @timestamp and FortiExtender signal values

  bugfixdocumentationIntegration:fortinet_fortigateTeam:Security-Service Integrations
  Unread
  elastic/integrations#22237·ilyannn opened Oct 29, 2026 · Updated Oct 29, 2026·Draft
  5

• [cisco_asa] Fix padded-duration teardowns and parse 302303 built connections

  bugfixIntegration:cisco_asaTeam:SDE-CrestTeam:Security-Service Integrations
  Unread
  elastic/integrations#22229·moxarth-rathod opened Oct 29, 2026 · Updated Oct 30, 2026
  12

  

• feat: increase process.command_line and process.args limits at cloud-defend

  bugfixdocumentationenhancementIntegration:cloud_defend
  Unread
  elastic/integrations#22228·biscout42 opened Oct 28, 2026 · Updated Oct 29, 2026·Draft
  7

• [salesforce] Fix Login/Logout EventLogFile collection in orgs without Event Monitoring

  bugfixdocumentationIntegration:salesforce
  Unread
  elastic/integrations#22213·shmsr opened Oct 28, 2026 · Updated Oct 28, 2026·Draft
  4

  

• [System] Fix system.auth IAM events event.outcome

  bugfixIntegration:systemTeam:SDE-CrestTeam:Security-Service Integrations
  Unread
  elastic/integrations#22212·moxarth-rathod opened Oct 28, 2026 · Updated Oct 30, 2026
  11

  

• [Palo Alto Prisma Cloud] Fix host data stream stuck on a stale pagination offset

  bugfixIntegration:prisma_cloudTeam:SDE-CrestTeam:Security-Service Integrations
  Unread
  elastic/integrations#22210·sharad-elastic opened Oct 28, 2026 · Updated Oct 30, 2026
  8

  

• network_traffic: remove map_to_ecs and original field mappings

  breaking changebugfixdocumentationenhancementIntegration:network_trafficTeam:Security-Service Integrations
  Unread
  elastic/integrations#22186·efd6 opened Oct 26, 2026 · Updated Oct 29, 2026
  23

  

• [cisco_asa] Fix 338301 client and server port types

  bugfixIntegration:cisco_asaTeam:Security-Service Integrations
  Unread
  elastic/integrations#22171·AyobamiH opened Oct 25, 2026 · Updated Oct 30, 2026
  14

• [proofpoint_on_demand] Fix WebSocket keep-alive timeouts

  bugfixdocumentationenhancementIntegration:proofpoint_on_demandTeam:Security-Service Integrations
  Unread
  elastic/integrations#22170·AyobamiH opened Oct 25, 2026 · Updated Oct 28, 2026
  13

• [cloudflare_logpush] Add audit_logs_v2 data stream

  bugfixdashboarddocumentationenhancementIntegration:cloudflare_logpushTeam:SDE-CrestTeam:Security-Service Integrations
  Unread
  elastic/integrations#22101·brijesh-elastic opened Oct 21, 2026 · Updated Oct 30, 2026
  34

  

• [nvidia_gpu] Bugfix: Improve handling of hostname field

  bugfixIntegration:nvidia_gpuTeam:Obs-InfraObs
  Unread
  elastic/integrations#22072·xpac1985 opened Oct 19, 2026 · Updated Oct 19, 2026
  3

• suricata: preserve existing source.address and handle invalid address values

  bugfixdocumentationIntegration:suricataIntegration:systemTeam:Integration-ExperienceTeam:Security-Service Integrations
  Unread
  elastic/integrations#22038·hellqvio86 opened Oct 15, 2026 · Updated Oct 29, 2026
  36

• [Juniper SRX] Accept hostnames containing underscores in the syslog header

  bugfixIntegration:juniper_srxTeam:Integration-Experience
  Unread
  elastic/integrations#21979·caleb-elastic opened Oct 13, 2026 · Updated Oct 13, 2026
  6

• [sublime_security] Set message event event.kind to alert

  bugfixdocumentationIntegration:sublime_securityTeam:Security-Service Integrations
  Unread
  elastic/integrations#21782·terrancedejesus opened Sep 30, 2026 · Updated Oct 7, 2026
  9

• [draft] remove condition.agent.version and use workaround

  bugfixenhancementIntegration:aws_bedrock_agentcoreIntegration:aws_bedrockIntegration:aws_logsIntegration:aws_mqIntegration:aws_securityhubIntegration:awsIntegration:azure_billingIntegration:elastic_securityIntegration:entityanalytics_adIntegration:entityanalytics_entra_idIntegration:entityanalytics_okta
  Unread
  elastic/integrations#21733·teresaromero opened Sep 29, 2026 · Updated Oct 23, 2026·Draft
  4

• auditd: migrate log data stream from logfile to filestream

  bugfixdocumentationenhancementIntegration:auditdTeam:Security-Service Integrations
  Unread
  elastic/integrations#21281·efd6 opened Sep 16, 2026 · Updated Oct 25, 2026
  13

  

• [azure] Consolidate shared pipeline and align metadata fields across data streams

  bugfixdocumentationenhancementIntegration:azureStalled
  Unread
  elastic/integrations#21261·stefans-elastic opened Sep 15, 2026 · Updated Oct 16, 2026·Draft
  6

• gigamon: update dashboard queries and SSL parsing

  bugfixdocumentationenhancementIntegration:gigamonTeam:Integration-ExperienceTeam:Security-Service Integrations
  Unread
  elastic/integrations#21200·sanjay-2307 opened Sep 12, 2026 · Updated Oct 26, 2026
  27

• Add apt retry option to Dockerfiles to fix intermittent network failures

  bugfixStalled
  Unread
  elastic/integrations#20897·mjwolf opened Aug 25, 2026 · Updated Oct 2, 2026
  4

  

• elasticsearch: Codec and Index mode

  bugfixdocumentationenhancementIntegration:elasticsearchTeam:Stack Monitoring
  Unread
  elastic/integrations#20805·JohannesMahne opened Aug 19, 2026 · Updated Oct 18, 2026
  14

• [falco] Fix NPE in @timestamp script for internal events.

  bugfixIntegration:falcosource:integration_sentinelStalledTeam:Integration-Experience
  Unread
  elastic/integrations#20630·ie-ops opened Aug 10, 2026 · Updated Oct 21, 2026
  11