Issues

• [Auditbeat] file_integrity on macOS drops all realtime events when recursive is false

  AuditbeatbugTeam:Security-Service Integrations
  elastic/beats#54257 · Filter by author marc-gr opened on Oct 30, 2026
  2

• auditbeat/auditd: immutable is accepted with an auto-detected multicast socket

  AuditbeatTeam:Security-Service Integrations
  elastic/beats#54241 · Filter by author efd6 opened on Oct 29, 2026
  1

• [docs-patrol] Update Buildkite packetbeat docs for new Win 11 arm64 system-test step

  Team:Security-Service Integrations
  elastic/beats#54218 · Filter by author github-actions opened on Oct 29, 2026
  1

• [Flaky Test] github.com/elastic/beats/v7/metricbeat/module/mongodb/collstats TestFetchStandaloneVersions/mongo_4_4

  flaky-testneeds_team
  elastic/beats#54206 · Filter by author elastic-vault-github-plugin-prod opened on Oct 29, 2026
  1

• [Flaky Test] github.com/elastic/beats/v7/metricbeat/module/mongodb/collstats TestFetchStandaloneVersions/mongo_5_0

  flaky-testneeds_team
  elastic/beats#54205 · Filter by author elastic-vault-github-plugin-prod opened on Oct 29, 2026
  1

• [Heartbeat] Browser monitor run hangs when the synthetics results stream is malformed or held open

  bugHeartbeatTeam:obs-ds-hosted-services
  elastic/beats#54196 · Filter by author orestisfl opened on Oct 29, 2026
  1

• Beat receivers collect process-wide system metrics once per receiver (only to discard them)

  Team:Elastic-Agent-Control-Plane
  elastic/beats#54142 · Filter by author blakerouse opened on Oct 28, 2026
  1

  

• [newbie-contributor] New contributor docs review — Packetbeat new-protocol guide points to placeholder pages

  needs_team
  elastic/beats#54122 · Filter by author github-actions opened on Oct 27, 2026
  1

• Flaky test: memqueue TestProduceConsumer data race on the test logger

  flaky-testlibbeatTeam:Elastic-Agent-Data-Plane
  Task

  elastic/beats#54111 · Filter by author marc-gr opened on Oct 27, 2026
  1

• memqueue: ackLoop can block forever on deleteChan after the queue is closed

  buglibbeatTeam:Elastic-Agent-Data-Plane
  Bug

  elastic/beats#54110 · Filter by author marc-gr opened on Oct 27, 2026
  1

• [Otel] Split Beatsauth extension into two different ones: one for Otel components and another for Beats components.

  bugTeam:Elastic-Agent-Data-Plane
  elastic/beats#54094 · Filter by author belimawr opened on Oct 26, 2026
  1

• [Flaky Test] github.com/elastic/beats/v7/x-pack/osquerybeat/ext/osquery-extension/pkg/amcache/registry Test_readFileViaNTFS

  flaky-testOsquerybeatTeam:Security-Service Integrations
  elastic/beats#54070 · Filter by author orestisfl opened on Oct 26, 2026
  1

• [Flaky Test] metricbeat.module.nats.test_nats.TestNats_0 test_connection

  flaky-testneeds_team
  elastic/beats#54064 · Filter by author elastic-vault-github-plugin-prod opened on Oct 26, 2026
  2

• [docs-patrol] Document Elastic Agent tag injection into event tags

  needs_team
  elastic/beats#54023 · Filter by author github-actions opened on Oct 23, 2026
  1

• [streaming] keep_alive.interval >= 3x write_control_deadline is accepted but can never work — silent infinite reconnect loop

  Team:Security-Service Integrations
  elastic/beats#54019 · Filter by author gbocchini opened on Oct 23, 2026
  2

• [Flaky Test] github.com/elastic/beats/v7/x-pack/filebeat/input/entityanalytics TestADIntegration_FullLifecycle

  flaky-testTeam:Security-Service Integrations
  elastic/beats#53987 · Filter by author elastic-vault-github-plugin-prod opened on Oct 22, 2026
  1

• [docs-patrol] Update version-bump pipeline docs for removed block step and timeout change

  needs_team
  elastic/beats#53959 · Filter by author github-actions opened on Oct 21, 2026
  1

• [docs-patrol] Document heartbeatreceiver scheduler_group and run_once incompatibility

  bugHeartbeatTeam:Docs
  elastic/beats#53918 · Filter by author github-actions opened on Oct 20, 2026

• [Heartbeat] Add allowed_hosts to Vault secret store connections

  Heartbeatneeds_team
  elastic/beats#53903 · Filter by author shahzad31 opened on Oct 20, 2026
  1

  

• [Auditbeat] file_integrity: opt-in closed_write event (IN_CLOSE_WRITE) to detect end of writes

  needs_team
  elastic/beats#53823 · Filter by author Vinz2168 opened on Oct 16, 2026
  1

• [Flaky Test] filebeat.tests.system.test_modules.Test test_fileset_file_154_system@module-system

  flaky-testneeds_team
  elastic/beats#53802 · Filter by author elastic-vault-github-plugin-prod opened on Oct 15, 2026
  2

• [Flaky Test] github.com/elastic/beats/v7/auditbeat/module/file_integrity/kprobes Test_Monitor

  flaky-testTeam:Security-Service Integrations
  elastic/beats#53780 · Filter by author elastic-vault-github-plugin-prod opened on Oct 14, 2026
  5

• [Flaky Test] github.com/elastic/beats/v7/auditbeat/module/file_integrity/kprobes Test_Monitor/TestNew

  flaky-testneeds_team
  elastic/beats#53779 · Filter by author elastic-vault-github-plugin-prod opened on Oct 14, 2026
  5

• [OTel] FQDN lookup delays the start of beat receivers by up to a minute

  bugTeam:Elastic-Agent-Control-Plane
  Bug

  elastic/beats#53732 · Filter by author shahzad31 opened on Oct 13, 2026
  3

• [OTel] Building receiver inputs is quadratic in the number of streams of a unit

  bugTeam:Elastic-Agent-Control-Plane
  elastic/beats#53731 · Filter by author shahzad31 opened on Oct 13, 2026
  1