Repository navigation
[33 integrations] Downgrade format_version if possible #15147
Description
Activity
- addedbugSomething isn't working, use only for issuesSomething isn't working, use only for issuesTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]Security Service Integrations team [elastic/security-service-integrations]
on Sep 3, 2025 Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)
Downgrading
statsd_inputformat_versionto3.0.4in PR: #15125Reacted by Chris BerkhoutDowngrading
mimecastandcarbon_black_cloudto3.3.2in PR: #15220
@chrisberkhout, these integrations are not in the list. Please add them as they are done in #15110 and #15124 likely after this issue is created.Reacted by Chris Berkhout- addedTeam:SDE-CrestCrest developers on the Security Integrations team [elastic/sit-crest-contractors]Crest developers on the Security Integrations team [elastic/sit-crest-contractors]
on Sep 22, 2025 This PR will downgrade the
format_versionas possible.
The following integrations have not been changed because they are owned by other teams and might requireformat_version: 3.4.x- docker_otel (@elastic/obs-ds-hosted-services )
- security_ai_prompts (@elastic/security-generative-ai )
- system_otel (@elastic/ingest-otel-data )
Filed an issue with proposition to fail the CI if the format_version and kibana.version mismatch #15627
Reacted by Brijesh Khunt and Chris Berkhout- addedTeam:Obs-InfraObsObservability Infrastructure Monitoring team [elastic/obs-infraobs-integrations]Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations]
on Oct 15, 2025 - addedTeam:obs-ds-hosted-servicesObservability Hosted Services team [elastic/obs-ds-hosted-services]Observability Hosted Services team [elastic/obs-ds-hosted-services]and removedTeam:Obs-InfraObsObservability Infrastructure Monitoring team [elastic/obs-infraobs-integrations]Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations]
on Oct 24, 2025 @elastic/security-generative-ai Does the
security_ai_promptsintegration need package version 3.4.0, or would 3.3.0 work as well? If it can be downgraded, that will make it available on stack versions 9.0.X.21 remaining items
- addedIntegration:proofpoint_itmProofpoint ITMProofpoint ITMIntegration:qualys_gavQualys Global AssetViewQualys Global AssetViewIntegration:servicenowServiceNowServiceNowIntegration:splunkSplunkSplunkIntegration:spycloudSpyCloud Enterprise Protection (Partner supported)SpyCloud Enterprise Protection (Partner supported)Integration:statsd_inputStatsD InputStatsD InputIntegration:sublime_securitySublime SecuritySublime SecurityIntegration:sysdigSysdigSysdigIntegration:ti_customCustom Threat IntelligenceCustom Threat IntelligenceIntegration:ti_domaintoolsDomainTools Feeds (Partner supported)DomainTools Feeds (Partner supported)Integration:ti_google_threat_intelligenceGoogle Threat Intelligence (Partner supported)Google Threat Intelligence (Partner supported)Integration:ti_greynoiseGreyNoise (Community supported)GreyNoise (Community supported)Integration:ti_recordedfutureRecorded FutureRecorded FutureIntegration:vectra_ruxVectra RUXVectra RUX
on Feb 19, 2026
The listed integrations use (packapge spec)
format_version: 3.4.0, so they are not available in Kibana 9.0.x.They should be downgraded to a 3.X.X version unless they require functionality in package-spec 3.4.0.
Related resources
elastic-packageREADME sections regarding version compatibilityIntegrations
abnormal_securityarmisauthentikbeyondinsight_password_safebeyondtrust_pracarbon_black_cloud{mimecast, carbon_black_cloud}: Add processor to remove the fields added by the agentless policy #15220checkpoint_email[Checkpoint Email] Add agentless deployment #15450claroty_ctdclaroty_xdomecyberark_epmChange redundant since the integration only supports stack versiondocker_otel^9.2.0extrahopfirst_epssgoogle_secopsimperva_cloud_wafmicrosoft_sentinelmimecast{mimecast, carbon_black_cloud}: Add processor to remove the fields added by the agentless policy #15220nozomi_networksproofpoint_itmqualys_gavsecurity_ai_promptsservicenowsplunkspycloudstatsd_input[statsd_input] Make StatsD input package GA #15125sublime_securitysysdig[sysdig] Add support for cspm datastream #14907system_otelti_customti_domaintoolsti_google_threat_intelligenceti_greynoiseti_recordedfuturevectra_ruxwiz