Issues

• [docs-patrol] Update obs-aw schedule workflow docs for @v0 ref and weekly lane

  needs_team
  elastic/beats#54659 · Filter by author github-actions opened on Nov 12, 2026
  1

• auditbeat/auditd: New leaks the control client when creating the data client fails

  AuditbeatTeam:Security-Service Integrations
  elastic/beats#54644 · Filter by author efd6 opened on Nov 12, 2026
  1

  

• Filebeat disk queue with max_size: 0 causes monitoring metrics and /stats to fail

  Team:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54639 · Filter by author wokis opened on Nov 11, 2026
  1

• [Flaky Test] github.com/elastic/beats/v7/pkg/periodic TestRateLimitedLogger

  flaky-testneeds_team
  elastic/beats#54624 · Filter by author elastic-vault-github-plugin-prod opened on Nov 11, 2026
  1

• [Flaky Test] github.com/elastic/beats/v7/pkg/periodic TestRateLimitedLogger/AddN

  flaky-testneeds_team
  elastic/beats#54623 · Filter by author elastic-vault-github-plugin-prod opened on Nov 11, 2026
  1

• [Flaky Test] filebeat.tests.system.test_modules.Test test_fileset_file_009_system@module-system

  flaky-testneeds_team
  elastic/beats#54622 · Filter by author elastic-vault-github-plugin-prod opened on Nov 11, 2026
  1

• [filestream] Provide metrics indicating how many bytes of data each input has yet to ingest

  Team:Elastic-Agent-Data-Plane
  Enhancement

  elastic/beats#54619 · Filter by author cmacknz opened on Nov 10, 2026
  1

• filestream splits multiline events whose lines are written a few seconds apart

  bugFilebeatregressionTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54599 · Filter by author orestisfl opened on Nov 9, 2026
  2

  

• [libbeat] diskqueue: data race on segment frameCount at shutdown with a write in flight

  buglibbeatTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54565 · Filter by author marc-gr opened on Nov 9, 2026
  1

• [Heartbeat] Pass APM trace URLs from browser monitor config to the synthetics runner

  Heartbeatneeds_team
  elastic/beats#54564 · Filter by author shahzad31 opened on Nov 9, 2026
  1

• [docs-patrol] Update bump-npcap docs for Debian 11 crossbuild tag

  Team:Security-Service Integrations
  elastic/beats#54533 · Filter by author github-actions opened on Nov 6, 2026
  1

• [Metricbeat] Input metrics expose credentials from the configured host

  Team:Obs-InfraObs
  elastic/beats#54522 · Filter by author shmsr opened on Nov 6, 2026

• Allow the Oracle driver in FIPS builds of Metricbeat

  Team:Obs-InfraObs
  elastic/beats#54520 · Filter by author shmsr opened on Nov 6, 2026
  

• Change Wiz Integration behavior to not specify index shard settings on install / upgrade

  needs_team
  elastic/beats#54519 · Filter by author clintonjimmie opened on Nov 5, 2026
  2

• [Metricbeat][IIS] webserver: worker_process_count not reported when exactly one w3wp process is running

  needs_team
  elastic/beats#54508 · Filter by author adamlevi87 opened on Nov 5, 2026
  1

• [docs-patrol] Update workflow docs for recent matrix and action pin changes

  needs_team
  elastic/beats#54507 · Filter by author github-actions opened on Nov 5, 2026
  1

• x-pack/filebeat/input/entityanalytics: legacy providers do not retry a failed full sync, and a panic ends the input

  bugFilebeatinput:entityanalyticsTeam:Security-Service Integrations
  elastic/beats#54495 · Filter by author efd6 opened on Nov 5, 2026
  1

• Beat receivers leak OTel instruments and their meter on shutdown

  BeatReceiver:MakeItRightbugTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54491 · Filter by author swiatekm opened on Nov 4, 2026
  5

  

• [Flaky Test] auditbeat.tests.system.test_file_integrity.Test test_recursive__ebpf

  flaky-testTeam:Security-Service Integrations
  elastic/beats#54463 · Filter by author elastic-vault-github-plugin-prod opened on Nov 4, 2026
  7

• [Flaky Test] auditbeat.tests.system.test_file_integrity.Test test_file_modified__ebpf

  flaky-testTeam:Security-Service Integrations
  elastic/beats#54462 · Filter by author elastic-vault-github-plugin-prod opened on Nov 4, 2026
  7

• x-pack/filebeat/input/entityanalytics: bump entcollect for Entra ID, Okta and AD fixes

  Filebeatinput:entityanalyticsTeam:Security-Service Integrations
  elastic/beats#54443 · Filter by author efd6 opened on Nov 4, 2026
  1

• docs: entity analytics input reference corrections before GA

  docsFilebeatinput:entityanalyticsTeam:Security-Service Integrations
  elastic/beats#54442 · Filter by author efd6 opened on Nov 4, 2026
  1

• x-pack/filebeat/input/entityanalytics/provider/activedirectory: ssl silently ignored with ldap:// URLs

  bugFilebeatinput:entityanalyticsTeam:Security-Service Integrations
  elastic/beats#54441 · Filter by author efd6 opened on Nov 4, 2026
  1

• x-pack/filebeat/input/entityanalytics/provider/activedirectory: legacy provider LDAP timeout, cursor, leak and paging fixes

  bugFilebeatinput:entityanalyticsTeam:Security-Service Integrations
  elastic/beats#54440 · Filter by author efd6 opened on Nov 4, 2026
  1

• x-pack/filebeat/input/entityanalytics/provider/okta: legacy provider correctness fixes

  bugFilebeatinput:entityanalyticsTeam:Security-Service Integrations
  elastic/beats#54439 · Filter by author efd6 opened on Nov 4, 2026
  1