All pull requests

Pull requests

• [Entity Analytics] Wait for the dual-process flag override to reach every Kibana instance

  backport:skipflaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #296990·kibanamachine opened Oct 12, 2026Contributor·

  ·
  1

  5

• [Connectors] Add additional request body setting to OpenAI-compatible connector

  backport:skiprelease_note:enhancementTeam:Security Generative AIv9.6.0
  #296989·patrykkopycinski opened Oct 11, 2026Contributor·2 of 3 tasks·

  ·
  1

  6

• [Lens as Code] Align as-code API serialization with schema defaults so dashboards do not load with unsaved changes

  #296988·nickofthyme opened Oct 11, 2026Contributor·4 of 7 tasks·

  ·
  1

• [Nightshift] Compact paused and run-limits callouts (size s, inline)

  backport:skipFeature: Nightshift UXrelease_note:skipTeam:nightshift-ux
  #296984·ek-so opened Oct 11, 2026Contributor·10 of 15 tasks·

  ·
  4

  

• [Security evals] Trajectory: classify Agent Builder tools with the shared classifier

  #296983·patrykkopycinski opened Oct 11, 2026Contributor·

  ·
  3

• [kbn-evals] Trajectory: classify Agent Builder tools, unknown tool -> N/A

  #296982·patrykkopycinski opened Oct 11, 2026Contributor·

  ·
  4

• Migrate Renovate config

  backport:all-openrelease_note:skip
  #296981·elastic-renovate-prod[bot] opened Oct 11, 2026Bot·

  ·
  2

• [AlertZero] TPSuppressedByTuning safety gate for Rule Tuning (stacked on #293963)

  backport:skiprelease_note:skipTeam:Security
  #296980·patrykkopycinski opened Oct 11, 2026Contributor·

  ·
  8

• [Security Solution][AlertZero] Attack Discovery worker: risk-first retrieval and per-run max_batches cap

  backport:skiprelease_note:fixTeam:Security Investigationsv9.6.0
  #296974·patrykkopycinski opened Oct 11, 2026Contributor·

  ·
  3

• [Entity Analytics] Add the ES|QL queries of the new entities grid

  backport:skiprelease_note:skip
  #296973·orouz opened Oct 11, 2026Contributor·

  ·
  2

• [Entity Analytics] Build the needs attention tiles on the entities id's query helpers

  backport:skiprelease_note:skip
  #296972·orouz opened Oct 11, 2026Contributor·

  ·
  8

• [Cases] Make "Show all cases" use an all-time lower bound

  flaky-fix-check:passedflaky-test-fixerrelease_note:fix
  #296970·kibanamachine opened Oct 11, 2026Contributor·

  ·
  1

  6

• [Dashboard] Wait for the empty pie chart state instead of probing it once

  backport:all-openflaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #296969·kibanamachine opened Oct 11, 2026Contributor·

  ·
  1

  7

• [Entity Analytics] Add the entities grid cells

  backport:skiprelease_note:skip
  #296966·orouz opened Oct 11, 2026Contributor·

  ·
  5

• [Entity Analytics] Add an internal route that counts Security cases per entity

  backport:skiprelease_note:skip
  #296965·orouz opened Oct 11, 2026Contributor·

  ·
  3

• [AlertZero] Frame the endpoint analysis prompt neutrally

  #296964·patrykkopycinski opened Oct 11, 2026Contributor·

  ·
  2

• Fix Webhook connector URL validation for internal HTTP hosts

  💝community
  #296963·doma17 opened Oct 11, 2026·2 of 3 tasks·

  ·
  3

• Record FTR waits and replace unnecessary waits with readiness checks

  #296962·tylersmalley opened Oct 11, 2026Member·

  ·
  2

• [Alerting v2] Poll the Observability-space skills list for global-setting propagation

  backport:skipflaky-fix-check:skippedflaky-test-fixerrelease_note:skip
  #296957·kibanamachine opened Oct 11, 2026Contributor·

  ·
  1

  3

• [Security Solution][Evals] Seed source data for the security-ai-rules suite

  backport:skiprelease_note:skipTeam:Security Generative AI
  #296954·patrykkopycinski opened Oct 10, 2026Contributor·

  ·
  1

• [Agent Builder] Find dashboard data in fewer turns

  backport:skiprelease_note:skipTeam:Dashboardsv9.6.0
  #296953·mbondyra opened Oct 10, 2026Contributor·

  ·
  3

• [Entity Analytics] Poll the status read while a dual-process flag flip propagates

  backport:skipflaky-fix-check:skippedflaky-test-fixerrelease_note:skip
  #296952·kibanamachine opened Oct 10, 2026Contributor·

  ·
  1

  3

• Lazy Imports

  ci:all-cypress-suitesci:prevent-selective-testingscout:run-all-tests
  #296949·kobelb opened Oct 10, 2026Contributor·

  ·
  4

• [Security Solution] Alert Analysis: make the ai.agent verdict schema acceptable to Gemini

  #296943·patrykkopycinski opened Oct 10, 2026Contributor·

  ·
  1

• [Security evals] Alert analysis: create conversations so trajectory can join agent tool spans

  #296942·patrykkopycinski opened Oct 10, 2026Contributor·

  ·
  5