All pull requests

Pull requests

• Document that observability.rca was removed in 9.6

  docsdocumentation
  #9135·charlotte-hoblik opened Nov 2, 2026Contributor·

  ·
  3

  

• Document configuration_overrides on the ai.agent workflow step

  docsdocumentation
  #9134·charlotte-hoblik opened Nov 2, 2026Contributor·

  ·
  3

  

• Document the cases-analytics Agent Builder skill

  docsdocumentation
  #9133·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document the ephemeral option for ai.agent workflow steps

  docsdocumentation
  #9132·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document the endpoint-response-actions Agent Builder skill

  docsdocumentation
  #9131·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document Agent Builder post-execution workflows

  #9130·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document version-specific Agent Builder token usage in the UI

  #9129·charlotte-hoblik opened Nov 1, 2026Contributor·5 tasks·

  ·
  3

  

• Document creating a tool from an agent's Tools page

  #9128·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document assigning Agent Builder connectors created from chat

  docsdocumentation
  #9124·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document Agent Builder trace privacy scope and conversation read status

  docsdocumentation
  #9123·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• Document Agent Chat response ratings

  #9122·charlotte-hoblik opened Nov 1, 2026Contributor·

  ·
  3

  

• [AlertZero] Add pages for responding to attacks and tuning detection rules

  alertzero
  #9119·nastasha-solomon opened Oct 31, 2026Member·1 of 2 tasks·

  ·
  3

  

• [AlertZero] Document the Triage Watch and Detection Watch Workers

  alertzero
  #9118·nastasha-solomon opened Oct 31, 2026Member·1 of 2 tasks·

  ·
  3

  

• Document investigate-rule and detection-coverage Agent Builder skills

  #9117·nastasha-solomon opened Oct 31, 2026Member·

  ·
  3

• [AlertZero] Add Work in AlertZero and Close false-positive alerts

  alertzero
  #9116·nastasha-solomon opened Oct 31, 2026Member·1 of 2 tasks·

  ·
  3

  

• [AlertZero] Add the AlertZero privileges page

  alertzero
  #9115·nastasha-solomon opened Oct 31, 2026Member·1 of 2 tasks·

  ·
  3

  

• [AlertZero] Add the landing page, Set up AlertZero, and Requirements

  alertzero
  #9114·nastasha-solomon opened Oct 31, 2026Member·1 of 2 tasks·

  ·
  3

  

• [Security][CPS] Address open review comments from #8064

  #9113·nastasha-solomon opened Oct 31, 2026Member·1 of 2 tasks·

  ·
  3

  

• Fix invalid connector step types and switch keys in workflow examples

  #9112·nastasha-solomon opened Oct 31, 2026Member·

  ·
  3

• Correct three Universal Alerting statements that Kibana source contradicts

  #9111·nastasha-solomon opened Oct 30, 2026Member·

  ·
  3

• Explain search capacity in Observability and Security project types

  #9108·yetanothertw opened Oct 30, 2026Member·1 of 2 tasks·

  ·
  1

  3

  

• [eck] Kibana Background Tasks Isolation

  #9107·moukoublen opened Oct 30, 2026Member·1 of 2 tasks·

  ·
  23

• [Security][Agent Builder] Document Automatic Migration in Agent Builder

  #9104·nastasha-solomon opened Oct 30, 2026Member·1 of 2 tasks·

  ·
  1

  22

• Add GCP MP Troubleshooting section

  #9100·demers-eric opened Oct 29, 2026Contributor·1 of 2 tasks·

  ·
  3

• Add pricing details for GCP Marketplace

  #9099·demers-eric opened Oct 29, 2026Contributor·1 of 2 tasks·

  ·
  6