Issues

• [tenable_sc]: Update Tenable Security Center integration for compatibility with the vulnerability view and Alert/Entity flyouts

  Category: CDRenhancementIntegration:tenable_scTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22245 · Filter by author jamiehynds opened on Oct 30, 2026
  1

• [crowdstrike] FDR logfile stream ignores "Enrich Host and User Metadata"

  bugIntegration:crowdstrikeTeam:Security-Service Integrations
  elastic/integrations#22244 · Filter by author kcreddy opened on Oct 30, 2026
  1

  

• [cloudflare_logpush] AWS S3 [S3] Interval setting is ignored for 21 data streams

  bugCategory: Integration qualityIntegration:cloudflare_logpushTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22241 · Filter by author kcreddy opened on Oct 30, 2026
  1

• [armis] Null-timestamp cursor guards, vulnerability cursor ordering, and dashboard/ECS follow-ups

  bugenhancementIntegration:armisTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22240 · Filter by author kcreddy opened on Oct 30, 2026
  1

  

• [MongoDB Atlas] Alert state changes rejected with 409 because _id only uses alert ID

  Integration:mongodb_atlas
  elastic/integrations#22233 · Filter by author dvallejo89 opened on Oct 29, 2026

• [Microsoft Intune] Consolidate to a single Event Hub input and route by category

  breaking changeIntegration:microsoft_intuneTeam:Security-Service Integrations
  elastic/integrations#22227 · Filter by author jamiehynds opened on Oct 28, 2026
  1

• [Microsoft Intune] Add client ID and tenant ID authentication for Event Hub input

  enhancementIntegration:microsoft_intuneTeam:Security-Service Integrations
  elastic/integrations#22226 · Filter by author jamiehynds opened on Oct 28, 2026
  1

• [gen_ai] ECS GenAI Field Support for detections: tool-call event conventions

  Team:Security-Service Integrations
  elastic/integrations#22225 · Filter by author angelosoliveira opened on Oct 28, 2026
  1

• [gen_ai] ECS GenAI Field Support for detections: canonical provider and operation values

  Team:Security-Service Integrations
  elastic/integrations#22224 · Filter by author angelosoliveira opened on Oct 28, 2026
  1

• [snowflake] Add Agentless Deployment Support

  enhancementIntegration:snowflakeTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22218 · Filter by author kcreddy opened on Oct 28, 2026
  1

  

• [Subscription basic] [auditd_manager] Failing test daily: system test: default in auditd_manager.auditd

  automationflaky-testIntegration:auditd_managerTeam:Security-Service Integrations
  elastic/integrations#22214 · Filter by author elastic-vault-github-plugin-prod opened on Oct 28, 2026

• [Stack 8.19.24-SNAPSHOT] [websphere_application_server] Failing test daily: system test: jdbc in websphere_application_server.jdbc

  automationflaky-testIntegration:websphere_application_server
  elastic/integrations#22208 · Filter by author elastic-vault-github-plugin-prod opened on Oct 28, 2026

• [ Akamai SIEM ] Add support to get data from S3 + SQS

  Integration:akamaiTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22205 · Filter by author leandrojmp opened on Oct 27, 2026
  4

• [cloudflare_logpush][entityanalytics_ad][f5_bigip][gcp][symantec_endpoint_security] Pipeline tests fail on 9.6/9.7: arrays built from a Painless Set come back in a different order

  bugIntegration:cloudflare_logpushIntegration:entityanalytics_adIntegration:f5_bigipIntegration:gcpIntegration:symantec_endpoint_securityTeam:Security-Service Integrations
  elastic/integrations#22201 · Filter by author teresaromero opened on Oct 27, 2026

• [CISCO ISE]: CISE_Administrative_and_Operational_Audit add and remove user messages to parse user.target.name

  Integration:cisco_iseneeds:triageTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22200 · Filter by author jguay opened on Oct 27, 2026
  1

  

• [entityanalytics_ad]: 413 errors when attempting full synchronisation

  Integration:entityanalytics_adneeds:triageTeam:Security-Service Integrations
  elastic/integrations#22199 · Filter by author meganlear opened on Oct 27, 2026
  2

• Ineffective foreach inner-processor guards on ctx._ingest._value silently skip conversion

  Team:Security-Service Integrations
  Bug

  elastic/integrations#22190 · Filter by author sharad-elastic opened on Oct 27, 2026
  1

• [Stack 9.7.0-SNAPSHOT] Too many packages failing in daily job

  automationflaky-testTeam:Ecosystem
  elastic/integrations#22189 · Filter by author elastic-vault-github-plugin-prod opened on Oct 27, 2026
  9

• [Stack 8.19.24-SNAPSHOT] [zeek] Failing test daily: system test: logs in zeek.smb_cmd

  automationflaky-testIntegration:zeekTeam:Security-Service Integrations
  elastic/integrations#22188 · Filter by author elastic-vault-github-plugin-prod opened on Oct 27, 2026

• [kafka_input_otel] Collector rejects removed kafkareceiver keys (group_rebalance_strategy, resolve_canonical_bootstrap_servers_only)

  Integration:kafka_input_otelTeam:obs-ds-intake-services
  elastic/integrations#22185 · Filter by author mrodm opened on Oct 26, 2026

• [ssi integrations] Fix drift between files that should be identical

  elastic/integrations#22183 · Filter by author chrisberkhout opened on Oct 26, 2026
  

• sentinel_one: several polled data streams re-send the most recent document on every poll

  bugIntegration:sentinel_oneTeam:Security-Service Integrations
  elastic/integrations#22174 · Filter by author efd6 opened on Oct 25, 2026
  1

• [Google Threat Intelligence] Discussion: replace the package's detection rules with Elastic's built-in Threat Intel Indicator Match rules

  discussIntegration:ti_google_threat_intelligenceTeam:Security-Service Integrations
  elastic/integrations#22150 · Filter by author kcreddy opened on Oct 23, 2026
  1

• [Google Threat Intelligence] Document the overlap between package detection rules and Elastic's built-in Threat Intel Indicator Match rules

  documentationIntegration:ti_google_threat_intelligenceTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22149 · Filter by author kcreddy opened on Oct 23, 2026
  1

  

• [Google Threat Intelligence] Align package detection rule mappings with Elastic's built-in Threat Intel Indicator Match rules

  enhancementIntegration:ti_google_threat_intelligenceTeam:SDE-CrestTeam:Security-Service Integrations
  elastic/integrations#22148 · Filter by author kcreddy opened on Oct 23, 2026
  1