All issues

Search results

fix: NullPointerException in RuleIndices when log type has no field mappings, and UnsupportedOperationException risk in CustomLogType from immutable map deserialization

duplicateThis issue or pull request already existsThis issue or pull request already exists

untriaged

Status: Open.

#1796 In opensearch-project/security-analytics;

· thecodingshrimp opened on Aug 21, 2026

[RELEASE] Release version 3.9.0

untriaged

Status: Open.

#1787 In opensearch-project/security-analytics;

· opensearch-ci-bot opened on Aug 8, 2026

[BUG] Findings history deleted by alert retention instead of finding retention

bugSomething isn't workingSomething isn't working

untriaged

Status: Open.

#1759 In opensearch-project/security-analytics;

· Aravinth31 opened on Aug 4, 2026

[FEATURE] Add Sigma rule for AWS IAM privilege escalation — AdministratorAccess policy attachment detection

enhancementNew feature or requestNew feature or request

untriaged

Status: Open.

#1752 In opensearch-project/security-analytics;

· mmnur opened on Jul 30, 2026

[BUG] Cannot create a detector for a Sigma rule with an aggregation expression (500 NullPointerException)

bugSomething isn't workingSomething isn't working

untriaged

Status: Open.

#1750 In opensearch-project/security-analytics;

· Noam-Alum opened on Jul 30, 2026

[BUG] Query Field Names missing from Finding Index Mapping

bugSomething isn't workingSomething isn't working

untriaged

Status: Open.

#1745 In opensearch-project/security-analytics;

· engechas opened on Jul 2, 2026

[RELEASE] Release version 3.8.0

release

v3.8.0Issues and PRs related to version v3.8.0Issues and PRs related to version v3.8.0

Status: Open.

#1743 In opensearch-project/security-analytics;

· opensearch-ci-bot opened on Jun 30, 2026

[BUG] OSMapping uses timestamp alias instead of ECS-standard @timestamp, breaking time-range filters for ECS-compliant indices

untriaged

Status: Open.

#1731 In opensearch-project/security-analytics;

· thecodingshrimp opened on Jun 10, 2026

[BUG] TransportIndexDetectorAction: chained_findings monitor created with deleteQueryIndexInEveryRun=true causing index churn

Status: Open.

#1725 In opensearch-project/security-analytics;

· thecodingshrimp opened on May 21, 2026

[FEATURE] Preserve Sigma rule UUID or support non-ATT&CK namespaced metadata/tags

enhancementNew feature or requestNew feature or request

Status: Open.

#1724 In opensearch-project/security-analytics;

· cmklem opened on May 21, 2026

[BUG] [alerting_exception] kotlin.collections.EmptyMap cannot be cast to kotlin.collections.MutableMap

bugSomething isn't workingSomething isn't working

Status: Open.

#1721 In opensearch-project/security-analytics;

· NLoi7 opened on May 18, 2026

[BUG] Clearing a detector's rules causes the underlying workflow to be orphaned

bugSomething isn't workingSomething isn't working

Status: Open.

#1720 In opensearch-project/security-analytics;

· engechas opened on May 15, 2026