All pull requests

Pull requests

• ci: replace json-watcher with version-bump-dra in the version bump pipeline

  backport-active-allneeds_teamskip-changelog
  #53521·ninalee12 opened Sep 30, 2026Contributor·

  ·
  3

  

• [9.5](backport #53300) add_kubernetes_metadata: enrich /var/log/pods events with container id/runtime

  backportconflictsTeam:Elastic-Agent-Control-Plane
  #53516·mergify[bot] opened Sep 30, 2026Bot·

  ·
  6

  

• [9.4](backport #53300) add_kubernetes_metadata: enrich /var/log/pods events with container id/runtime

  backportconflictsTeam:Elastic-Agent-Control-Plane
  #53515·mergify[bot] opened Sep 30, 2026Bot·

  ·
  6

  

• fix: [Auditbeat] test_file_modified__ebpf, test_non_recursive__ebpf and test_recursive__ebpf: Timeout waiting for condition 'log_contains'. Waited 30 seconds

  :integrationsneeds_team
  #53511·biscout42 opened Sep 30, 2026·

  ·
  5

  

• Add automated GitHub Actions workflow for bumping npcap in elastic/beats

  skip-changelogTeam:Automation
  #53508·dwhyrock opened Sep 30, 2026Contributor·

  ·
  5

  

• Drop ebpfevents as a dependency, move auditbeat FIM to quark

  AuditbeatcleanupdependenciesTeam:Security-Linux Platform
  #53507·christos68k opened Sep 30, 2026Member·

  ·
  2

  

• [8.19](backport #52694) Migrate DRA GCS publishing from Release manager to dra-prep-plugin

  backportconflictsneeds_teamskip-changelog
  #53504·mergify[bot] opened Sep 30, 2026Bot·

  ·
  3

  

• Sync agentic workflow files from elastic/oblt-aw

  backport-active-allchangelog:cineeds_teamoblt-aw/ai/merge-ready
  #53501·elastic-vault-github-plugin-prod[bot] opened Sep 30, 2026Bot·

  ·
  4

• [9.4](backport #53140) autoops_es/node_stats: derive os.cgroup.cpu.usage_percent from CFS quota counters

  backportbugconflictsModule:AutoOps ESTeam:Opex
  #53500·mergify[bot] opened Sep 30, 2026Bot·

  ·
  3

  

• [9.5](backport #53140) autoops_es/node_stats: derive os.cgroup.cpu.usage_percent from CFS quota counters

  backportbugModule:AutoOps ESTeam:Opex
  #53499·mergify[bot] opened Sep 30, 2026Bot·

  ·
  1

  

• packetbeat: add opt-in kernel_tracing process enrichment backend

  PacketbeatTeam:Security-Service Integrations
  #53498·kcreddy opened Sep 30, 2026Contributor·

  ·
  1

  4

  

• [9.5](backport #53419) packetbeat/protos/dhcpv4: fix panic on short OptionTimeOffset value

  backportbugfixPacketbeatTeam:Security-Service Integrations
  #53497·mergify[bot] opened Sep 30, 2026Bot·

  ·
  3

  

• [9.4](backport #53419) packetbeat/protos/dhcpv4: fix panic on short OptionTimeOffset value

  backportbugfixPacketbeatTeam:Security-Service Integrations
  #53496·mergify[bot] opened Sep 30, 2026Bot·

  ·
  2

  

• [8.19](backport #53419) packetbeat/protos/dhcpv4: fix panic on short OptionTimeOffset value

  backportbugfixPacketbeatTeam:Security-Service Integrations
  #53495·mergify[bot] opened Sep 30, 2026Bot·

  ·
  2

  

• share one log input registrar per registry

  backport-9.5bugfixTeam:Elastic-Agent-Data-Plane
  #53492·leehinman opened Sep 30, 2026Contributor·

  ·
  3

  

• packetbeat/amqp: fix nil map panic and zero-body completion

  backport-8.19backport-9.4backport-9.5bugfixPacketbeatTeam:Security-Service Integrations
  #53491·efd6 opened Sep 29, 2026Contributor·

  ·
  3

  

• reuse the read buffer in the UDP and unix datagram inputs

  backport-active-allenhancementTeam:Elastic-Agent-Data-Plane
  #53490·leehinman opened Sep 29, 2026Contributor·

  ·
  5

  

• Reduce per-event allocations in the add_agent_metadata processor

  backport-9.4backport-9.5enhancementTeam:Elastic-Agent-Data-Plane
  #53477·leehinman opened Sep 29, 2026Contributor·

  ·
  4

  

• [9.5](backport #53425) build(deps): bump the aws-sdks group with 28 updates

  backportneeds_team
  #53473·mergify[bot] opened Sep 29, 2026Bot·

  ·
  4

• [8.19](backport #51690) translate_ldap_attribute: fix String race during LDAP init

  backportbugconflictsTeam:Security-Windows Platform
  #53455·mergify[bot] opened Sep 28, 2026Bot·

  ·
  4

  

• [9.4](backport #51690) translate_ldap_attribute: fix String race during LDAP init

  backportbugTeam:Security-Windows Platform
  #53454·mergify[bot] opened Sep 28, 2026Bot·

  ·
  2

  

• [9.5](backport #51690) translate_ldap_attribute: fix String race during LDAP init

  backportbugTeam:Security-Windows Platform
  #53453·mergify[bot] opened Sep 28, 2026Bot·

  ·
  4

  

• filestream: reuse open harvester fingerprints during scans

  backport-skipenhancementFilebeatTeam:Elastic-Agent-Data-Plane
  #53451·orestisfl opened Sep 28, 2026Contributor·4/4·

  ·
  3

  

• filestream: resume reading replacement files with matching fingerprints

  backport-skipbugFilebeatTeam:Elastic-Agent-Data-Plane
  #53450·orestisfl opened Sep 28, 2026Contributor·3/4·

  ·
  1

  5

  

• [8.19](backport #53204) input-cursor: apply default clean timeout to every input

  backportbugconflictsTeam:Elastic-Agent-Data-Plane
  #53443·mergify[bot] opened Sep 28, 2026Bot·

  ·
  4