All pull requests

Pull requests

• [OpenRouter] Add OpenRouter analytics API integration

  #21841·intuibase opened Oct 2, 2026·7 of 9 tasks·

  ·
  11

  

• Add agent skill for LogsDB columnar readiness, with #21258's improvements

  documentationenhancementTeam:Elastic-Agent-Control-Plane
  #21839·mrg-elastic opened Oct 2, 2026Contributor·

  ·
  1

  

• Use links for identical files in the five largest packages

  enhancementTeam:Security-Service Integrations
  #21838·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  4

  

• Use links for identical files in packages with several kinds of sharing

  enhancementTeam:Security-Service Integrations
  #21837·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  2

  

• Use links for fields shared by routing source and destinations

  enhancementTeam:Security-Service Integrations
  #21836·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  2

  

• Use links for files shared by peer data streams

  enhancementTeam:Security-Service Integrations
  #21835·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  4

  

• [aws] Use links for identical fields and input templates

  enhancementTeam:Security-Service Integrations
  #21834·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  2

  

• Link transform and routing destination fields to their source

  enhancementIntegration:armisIntegration:aws_securityhubIntegration:cisco_duoIntegration:cyberarkpasIntegration:cyeraIntegration:entityanalytics_adIntegration:entityanalytics_entra_idIntegration:entityanalytics_oktaIntegration:extrahopIntegration:ibm_qradarIntegration:ironscalesIntegration:jupiter_oneIntegration:m365_defenderIntegration:microsoft_defender_endpointIntegration:microsoft_sentinelIntegration:ping_directoryIntegration:qualys_gavIntegration:qualys_vmdrIntegration:rapid7_insightvmIntegration:snykIntegration:tenable_ioIntegration:ti_abusechIntegration:ti_anomaliIntegration:ti_cif3Integration:ti_crowdstrikeIntegration:ti_customIntegration:ti_cybersixgillIntegration:ti_cyware_intel_exchangeIntegration:ti_eclecticiqIntegration:ti_flashpointIntegration:ti_greynoiseIntegration:ti_mispIntegration:ti_openctiIntegration:ti_rapid7_threat_commandIntegration:ti_recordedfutureIntegration:ti_socradar_feedsIntegration:ti_socradar_taxiiIntegration:ti_striderIntegration:ti_threatconnectIntegration:ti_threatqIntegration:ti_ticuraIntegration:xm_cyberTeam:Security-Service Integrations
  #21833·chrisberkhout opened Oct 2, 2026Contributor·5 tasks·

  ·
  4

  

• Update dependabot config to scan local GitHub actions

  #21832·mrodm opened Oct 2, 2026Collaborator·

  ·
  1

  

• microsoft_intune: add WebSocket transport and processor version settings

  documentationenhancementIntegration:microsoft_intuneTeam:Security-Service Integrations
  #21811·efd6 opened Oct 1, 2026Contributor·5 tasks·

  ·
  8

  

• microsoft_defender_cloud: add WebSocket transport and processor version settings

  documentationenhancementIntegration:microsoft_defender_cloudTeam:Security-Service Integrations
  #21810·efd6 opened Oct 1, 2026Contributor·5 tasks·

  ·
  8

  

• cisa_kevs: add latest transform lookup index and fix fingerprint for catalog updates

  bugfixdocumentationenhancementIntegration:cisa_kevsTeam:Security-Service Integrations
  #21809·clement-fouque opened Oct 1, 2026Contributor·4 of 5 tasks·

  ·
  18

• fix: correct external contributor instructions in ci-comment

  #21808·owvr27 opened Oct 1, 2026·

  ·
  5

• [apache_tomcat] Stop flagging unparseable access URLs as pipeline errors

  bugbugfixIntegration:apache_tomcatTeam:Obs-InfraObs
  #21807·giorgi-imerlishvili-elastic opened Oct 1, 2026Contributor·3 of 7 tasks·

  ·
  1

  3

  

• o365: add script tests for file size field mappings

  Integration:o365
  #21804·kcreddy opened Oct 1, 2026Contributor·5 tasks·

  ·
  1

• [gcp_cloudsql_postgresql_otel] initial dashboards

  documentationNew Integration
  #21803·jakubgalecki0 opened Oct 1, 2026Contributor·5 tasks·

  ·
  3

• [System] Keep journald and systemd fields in auth and syslog data streams

  documentationenhancementIntegration:systemTeam:Obs-InfraObsTeam:Security-Service Integrations
  #21802·staal0 opened Oct 1, 2026Contributor·2 of 7 tasks·

  ·
  1

  2

• [New Integration] NVIDIA OpenShell OCSF audit logs

  documentationNew Integration
  #21801·bryans3c opened Oct 1, 2026Contributor·4 of 10 tasks·

  ·
  14

• Bump go.opentelemetry.io/otel/sdk/log from 0.19.0 to 0.21.0 in /packages/claude_cowork/_dev/deploy/docker/generator

  dependenciesgoIntegration:claude_coworkTeam:Security-Service Integrations
  #21798·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  3

• Test elastic-package#4020 - DO NOT MERGE

  #21796·elastic-vault-github-plugin-prod[bot] opened Oct 1, 2026Bot·

  ·
  2

  

• [hackerone] Fix long report bodies and include cold/frozen tiers in transform

  bugfixdocumentationIntegration:hackeroneTeam:Integration-Experience
  #21783·clement-fouque opened Sep 30, 2026Contributor·7 tasks done·

  ·
  1

  8

• [sublime_security] Set message event event.kind to alert

  bugfixdocumentationIntegration:sublime_security
  #21782·terrancedejesus opened Sep 30, 2026Contributor·3 tasks·

  ·
  3

• [system][windows] Normalize AD FS security audit events

  documentationenhancementIntegration:systemIntegration:windowsTeam:Security-Service Integrations
  #21781·FilipPwn opened Sep 30, 2026·

  ·
  1

  19

• feat(otel-rum-dashboard): improve ESQL queries to include data from more instrumentations

  dashboarddocumentationenhancementIntegration:otel_rum_dashboards
  #21778·david-luna opened Sep 30, 2026Member·4 of 8 tasks·

  ·
  1

  4

• [okta] fix ecs_category_type pipeline failure for Okta event types that are not present in the mapping table

  bugfixIntegration:oktaTeam:SDE-CrestTeam:Security-Service Integrations
  #21777·brijesh-elastic opened Sep 30, 2026Contributor·3 of 5 tasks·

  ·
  1

  8