Type to search.

Bitwarden

Serverless Observability

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Serverless Security

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Stack 9.1+

The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.

Availability

  • Generally available since 9.1

    This functionality is generally available and ready for production usage.

Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Version 1.24.0 (View all)
Managed integration release status GA
Subscription level
What's this?		 Basic
Developed by
What's this?		 Elastic
Ingestion method(s) API
Minimum Kibana version(s) 9.1.4
9.0.7
8.19.4
Important - Managed integrations on Elastic Cloud Hosted The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Generally available since 9.5 This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

You can use this integration as an Elastic Managed integration on Elastic Cloud Hosted deployments running this version or later.

The Bitwarden integration allows users to monitor collections, events, groups, members and policies. Bitwarden is a free and open-source password management service that stores sensitive information such as website credentials in an encrypted vault. The Bitwarden platform offers a variety of client applications including a web interface, desktop applications, browser extensions, mobile apps and a command-line interface. Bitwarden offers a cloud-hosted service as well as the ability to deploy the solution on-premises.

Use the Bitwarden integration to collect and parse data from the REST APIs. Then visualize that data in Kibana.

Elastic Managed integrations are only supported on Elastic Cloud Serverless and Elastic Cloud Hosted deployments. An Elastic Managed integration lets you ingest data from a cloud source while avoiding the orchestration, management, and maintenance associated with standard ingest infrastructure. Elastic runs the collector for you, so you can focus on your data instead of the infrastructure that collects it.

For more information, refer to Elastic Managed integrations and the Elastic Managed integrations FAQ.

The Bitwarden integration collects five types of data: Collections, Events, Groups, Members and Policies.

Collections returns a list of an organization's collections.

Events returns a list of an organization's event logs.

Groups returns a list of an organization's groups.

Members returns the details of an organization's members.

Policies returns a list of an organization's policies.

Reference for Rest APIs of Bitwarden.

Elasticsearch is needed to store and search data and Kibana is needed for visualizing and managing it. You can use our hosted Elasticsearch Service on Elastic Cloud, which is recommended, or self-manage the Elastic Stack on your hardware.

This module has been tested against Bitwarden Version 2023.2.0.

  1. Go to the Bitwarden console, enter an email address and master password.
  2. Click Organizations.
  3. Go to Settings → Organization info.
  4. Click View API Key from API key Section.
  5. Enter master password.
  6. Click View API Key.
  7. Copy client_id and client_secret.

This is the Collection dataset.

Example
JSON 
{
    "@timestamp": "2025-11-24T06:34:44.007Z",
    "agent": {
        "ephemeral_id": "7341c081-985b-4227-acc0-63922bca9eb4",
        "id": "a15dcfd1-8131-4338-adde-2307c6e4daea",
        "name": "elastic-agent-92788",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "bitwarden": {
        "collection": {
            "external": {
                "id": "external_id_123456"
            },
            "id": "539a36c5-e0d2-4cf9-979e-51ecf5cf6593"
        },
        "object": "collection"
    },
    "data_stream": {
        "dataset": "bitwarden.collection",
        "namespace": "39321",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "a15dcfd1-8131-4338-adde-2307c6e4daea",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "created": "2025-11-24T06:34:44.007Z",
        "dataset": "bitwarden.collection",
        "ingested": "2025-11-24T06:34:47Z",
        "kind": "event",
        "original": "{\"externalId\":\"external_id_123456\",\"groups\":null,\"id\":\"539a36c5-e0d2-4cf9-979e-51ecf5cf6593\",\"object\":\"collection\"}",
        "type": [
            "info"
        ]
    },
    "input": {
        "type": "httpjson"
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "bitwarden-collection"
    ]
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
bitwarden.collection.external.id External identifier for reference or linking this collection to another system. keyword
bitwarden.collection.groups The associated groups that this collection is assigned to. nested
bitwarden.collection.id The collection's unique identifier. keyword
bitwarden.object String representing the object's type. Objects of the same type share the same properties. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
input.type Type of Filebeat input. keyword
log.offset Log offset. long

This is the Event dataset.

Example
JSON 
{
    "@timestamp": "2023-02-22T09:00:21.728Z",
    "agent": {
        "ephemeral_id": "aeab5036-1b44-459c-b887-77abed767e01",
        "id": "070fe211-69a1-4d70-b6b0-3f7dda0734d9",
        "name": "elastic-agent-60012",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "bitwarden": {
        "event": {
            "acting_user": {
                "id": "a2549f79-a71f-4eb9-9234-eb7247333f94"
            },
            "collection": {
                "id": "bce212a4-25f3-4888-8a0a-4c5736d851e0"
            },
            "date": "2023-02-22T09:00:21.728Z",
            "device": {
                "name": "Android",
                "value": "0"
            },
            "group": {
                "id": "f29a2515-91d2-4452-b49b-5e8040e6b0f4"
            },
            "ip_address": "172.16.254.1",
            "item": {
                "id": "3767a302-8208-4dc6-b842-030428a1cfad"
            },
            "member": {
                "id": "e68b8629-85eb-4929-92c0-b84464976ba4"
            },
            "policy": {
                "id": "f29a2515-91d2-4452-b49b-5e8040e6b0f4"
            },
            "type": {
                "name": "User_LoggedIn",
                "value": "1000"
            }
        },
        "object": "event"
    },
    "data_stream": {
        "dataset": "bitwarden.event",
        "namespace": "95718",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "070fe211-69a1-4d70-b6b0-3f7dda0734d9",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "iam",
            "authentication"
        ],
        "created": "2025-11-24T07:16:24.137Z",
        "dataset": "bitwarden.event",
        "ingested": "2025-11-24T07:16:27Z",
        "kind": "event",
        "original": "{\"actingUserId\":\"a2549f79-a71f-4eb9-9234-eb7247333f94\",\"collectionId\":\"bce212a4-25f3-4888-8a0a-4c5736d851e0\",\"date\":\"2023-02-22T09:00:21.728Z\",\"device\":0,\"groupId\":\"f29a2515-91d2-4452-b49b-5e8040e6b0f4\",\"ipAddress\":\"172.16.254.1\",\"itemId\":\"3767a302-8208-4dc6-b842-030428a1cfad\",\"memberId\":\"e68b8629-85eb-4929-92c0-b84464976ba4\",\"object\":\"event\",\"policyId\":\"f29a2515-91d2-4452-b49b-5e8040e6b0f4\",\"type\":1000}",
        "outcome": "success",
        "type": [
            "user",
            "start"
        ]
    },
    "group": {
        "id": "f29a2515-91d2-4452-b49b-5e8040e6b0f4"
    },
    "input": {
        "type": "httpjson"
    },
    "related": {
        "ip": [
            "172.16.254.1"
        ],
        "user": [
            "e68b8629-85eb-4929-92c0-b84464976ba4",
            "a2549f79-a71f-4eb9-9234-eb7247333f94"
        ]
    },
    "source": {
        "ip": "172.16.254.1",
        "user": {
            "id": "a2549f79-a71f-4eb9-9234-eb7247333f94"
        }
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "bitwarden-event"
    ],
    "user": {
        "id": "e68b8629-85eb-4929-92c0-b84464976ba4"
    }
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
bitwarden.event.acting_user.id The unique identifier of the user that performed the event. keyword
bitwarden.event.collection.id The unique identifier of the related collection that the event describes. keyword
bitwarden.event.date The date/timestamp when the event occurred. date
bitwarden.event.device.name Device type name. keyword
bitwarden.event.device.value Device type value. keyword
bitwarden.event.group.id The unique identifier of the related group that the event describes. keyword
bitwarden.event.installation.id The unique identifier of the Installation that performed the event. keyword
bitwarden.event.ip_address The IP address of the acting user. ip
bitwarden.event.item.id The unique identifier of the related item that the event describes. keyword
bitwarden.event.member.id The unique identifier of the related member that the event describes. keyword
bitwarden.event.policy.id The unique identifier of the related policy that the event describes. keyword
bitwarden.event.type.name Event type name. keyword
bitwarden.event.type.value Event type value. keyword
bitwarden.object String representing the object's type. Objects of the same type share the same properties. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
input.type Type of Filebeat input. keyword
log.offset Log offset. long

This is the Group dataset.

Example
JSON 
{
    "@timestamp": "2025-11-24T06:36:22.193Z",
    "agent": {
        "ephemeral_id": "576e204f-93fc-44f9-839e-c7b2dd4de267",
        "id": "7057a05b-9ff3-4cc2-ada0-fbf3ee258298",
        "name": "elastic-agent-62387",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "bitwarden": {
        "group": {
            "access_all": true,
            "collection": [
                {
                    "id": "bfbc8338-e329-4dc0-b0c9-317c2ebf1a09",
                    "read_only": true
                }
            ],
            "external": {
                "id": "external_id_123456"
            },
            "id": "539a36c5-e0d2-4cf9-979e-51ecf5cf6593",
            "name": "Development Team"
        },
        "object": "group"
    },
    "data_stream": {
        "dataset": "bitwarden.group",
        "namespace": "50466",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "7057a05b-9ff3-4cc2-ada0-fbf3ee258298",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "iam"
        ],
        "created": "2025-11-24T06:36:22.193Z",
        "dataset": "bitwarden.group",
        "ingested": "2025-11-24T06:36:25Z",
        "kind": "event",
        "original": "{\"accessAll\":true,\"collections\":[{\"id\":\"bfbc8338-e329-4dc0-b0c9-317c2ebf1a09\",\"readOnly\":true}],\"externalId\":\"external_id_123456\",\"id\":\"539a36c5-e0d2-4cf9-979e-51ecf5cf6593\",\"name\":\"Development Team\",\"object\":\"group\"}",
        "type": [
            "group"
        ]
    },
    "group": {
        "id": "539a36c5-e0d2-4cf9-979e-51ecf5cf6593",
        "name": "Development Team"
    },
    "input": {
        "type": "httpjson"
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "bitwarden-group"
    ]
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
bitwarden.group.access_all Determines if this group can access all collections within the organization, or only the associated collections. If set to true, this option overrides any collection assignments. boolean
bitwarden.group.collection.id The associated object's unique identifier. keyword
bitwarden.group.collection.read_only When true, the read only permission will not allow the user or group to make changes to items. boolean
bitwarden.group.external.id External identifier for reference or linking this group to another system, such as a user directory. keyword
bitwarden.group.id The group's unique identifier. keyword
bitwarden.group.name The name of the group. keyword
bitwarden.object String representing the object's type. Objects of the same type share the same properties. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
input.type Type of Filebeat input. keyword
log.offset Log offset. long

This is the Member dataset.

Example
JSON 
{
    "@timestamp": "2025-11-24T06:37:12.467Z",
    "agent": {
        "ephemeral_id": "b33ea26f-2d3a-4907-8c88-8f45ffd44188",
        "id": "e4edaabf-92d7-416b-8be7-657fc54ed284",
        "name": "elastic-agent-41065",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "bitwarden": {
        "member": {
            "access_all": true,
            "email": "jsmith@example.com",
            "external": {
                "id": "external_id_123456"
            },
            "id": "1234",
            "name": "John Smith",
            "reset_password_enrolled": true,
            "status": {
                "name": "Invited",
                "value": "0"
            },
            "two_factor_enabled": true,
            "type": {
                "name": "Owner",
                "value": "0"
            },
            "user": {
                "id": "48b47ee1-493e-4c67-aef7-014996c40eca"
            }
        },
        "object": "member"
    },
    "data_stream": {
        "dataset": "bitwarden.member",
        "namespace": "60283",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "e4edaabf-92d7-416b-8be7-657fc54ed284",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "iam"
        ],
        "created": "2025-11-24T06:37:12.467Z",
        "dataset": "bitwarden.member",
        "ingested": "2025-11-24T06:37:15Z",
        "kind": "event",
        "original": "{\"accessAll\":true,\"collections\":null,\"email\":\"jsmith@example.com\",\"externalId\":\"external_id_123456\",\"id\":\"1234\",\"name\":\"John Smith\",\"object\":\"member\",\"resetPasswordEnrolled\":true,\"status\":0,\"twoFactorEnabled\":true,\"type\":0,\"userId\":\"48b47ee1-493e-4c67-aef7-014996c40eca\"}",
        "type": [
            "user"
        ]
    },
    "input": {
        "type": "httpjson"
    },
    "related": {
        "user": [
            "1234",
            "48b47ee1-493e-4c67-aef7-014996c40eca",
            "John Smith",
            "jsmith@example.com"
        ]
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "bitwarden-member"
    ],
    "user": {
        "email": "jsmith@example.com",
        "id": "1234",
        "name": "John Smith"
    }
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
bitwarden.member.access_all Determines if this member can access all collections within the organization, or only the associated collections. If set to true, this option overrides any collection assignments. boolean
bitwarden.member.collection.id The associated object's unique identifier. keyword
bitwarden.member.collection.read_only When true, the read only permission will not allow the user or group to make changes to items. boolean
bitwarden.member.email The member's email address. keyword
bitwarden.member.external.id External identifier for reference or linking this member to another system, such as a user directory. keyword
bitwarden.member.id The member's unique identifier within the organization. keyword
bitwarden.member.name The member's name, set from their user account profile. keyword
bitwarden.member.reset_password_enrolled Returns true if the member has enrolled in Password Reset assistance within the organization. boolean
bitwarden.member.status.name Organization user status type name. keyword
bitwarden.member.status.value Organization user status type value. keyword
bitwarden.member.two_factor_enabled Returns true if the member has a two-step login method enabled on their user account. boolean
bitwarden.member.type.name Organization user type name. keyword
bitwarden.member.type.value Organization user type value. keyword
bitwarden.member.user.id The member's unique identifier across Bitwarden. keyword
bitwarden.object String representing the object's type. Objects of the same type share the same properties. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
input.type Type of Filebeat input. keyword
log.offset Log offset. long

This is the Policy dataset.

Example
JSON 
{
    "@timestamp": "2025-11-24T06:38:00.683Z",
    "agent": {
        "ephemeral_id": "ed7a29f4-b325-4462-8754-572c01e39dba",
        "id": "65edca49-1af4-43c5-9b82-53c76a555cbd",
        "name": "elastic-agent-72971",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "bitwarden": {
        "object": "policy",
        "policy": {
            "data": {
                "capitalize": "true",
                "default_type": "password",
                "include_number": "true",
                "min": {
                    "length": "5",
                    "number_words": "3",
                    "numbers": "1",
                    "special": "1"
                },
                "use": {
                    "lower": "true",
                    "numbers": "true",
                    "special": "true",
                    "upper": "true"
                }
            },
            "enabled": true,
            "id": "539a36c5-e0d2-4cf9-979e-51ecf5cf6593",
            "type": {
                "name": "TwoFactorAuthentication",
                "value": "0"
            }
        }
    },
    "data_stream": {
        "dataset": "bitwarden.policy",
        "namespace": "10332",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "65edca49-1af4-43c5-9b82-53c76a555cbd",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "created": "2025-11-24T06:38:00.683Z",
        "dataset": "bitwarden.policy",
        "ingested": "2025-11-24T06:38:03Z",
        "kind": "event",
        "original": "{\"data\":{\"capitalize\":true,\"defaultType\":\"password\",\"includeNumber\":true,\"minLength\":5,\"minNumberWords\":3,\"minNumbers\":1,\"minSpecial\":1,\"useLower\":true,\"useNumbers\":true,\"useSpecial\":true,\"useUpper\":true},\"enabled\":true,\"id\":\"539a36c5-e0d2-4cf9-979e-51ecf5cf6593\",\"object\":\"policy\",\"type\":0}",
        "type": [
            "info"
        ]
    },
    "input": {
        "type": "httpjson"
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "bitwarden-policy"
    ]
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
bitwarden.object String representing the object's type. Objects of the same type share the same properties. keyword
bitwarden.policy.data.auto_enroll_enabled keyword
bitwarden.policy.data.capitalize keyword
bitwarden.policy.data.default_type keyword
bitwarden.policy.data.disable_hide_email keyword
bitwarden.policy.data.include_number keyword
bitwarden.policy.data.min.complexity keyword
bitwarden.policy.data.min.length keyword
bitwarden.policy.data.min.number_words keyword
bitwarden.policy.data.min.numbers keyword
bitwarden.policy.data.min.special keyword
bitwarden.policy.data.minutes keyword
bitwarden.policy.data.require.lower keyword
bitwarden.policy.data.require.numbers keyword
bitwarden.policy.data.require.special keyword
bitwarden.policy.data.require.upper keyword
bitwarden.policy.data.use.lower keyword
bitwarden.policy.data.use.numbers keyword
bitwarden.policy.data.use.special keyword
bitwarden.policy.data.use.upper keyword
bitwarden.policy.enabled Determines if this policy is enabled and enforced. boolean
bitwarden.policy.id The policy's unique identifier. keyword
bitwarden.policy.type.name Policy type name. keyword
bitwarden.policy.type.value Policy type value. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
input.type Type of Filebeat input. keyword
log.offset Log offset. long

This integration includes one or more Kibana dashboards that visualizes the data collected by the integration. The screenshots below illustrate how the ingested data is displayed.

Event dashboard
Group and Collection dashboard
Member dashboard
Policy dashboard
Event dashboard
Group and Collection dashboard
Member dashboard
Policy dashboard
Changelog
Version Details Minimum Kibana version
1.24.0 Enhancement (View pull request)
Update Elastic Managed integration documentation to the current wording and docs links.		 9.1.4
9.0.7
8.19.4
1.23.1 Bug fix (View pull request)
Fix event cursor never advancing, which caused the whole history to be re-fetched every interval.		 9.1.4
9.0.7
8.19.4
1.23.0 Enhancement (View pull request)
Enable request trace log removal.		 9.1.4
9.0.7
8.19.4
1.22.0 Enhancement (View pull request)
Add tags to ingest pipeline processors.		 9.1.4
9.0.7
8.19.4
1.21.1 Enhancement (View pull request)
Set agentless deployment mode release field to ga.		 9.1.4
9.0.7
8.19.4
1.21.0 Enhancement (View pull request)
Publish Agentless to Elastic Managed integrations name change.		 9.1.4
9.0.7
8.19.4
1.20.0 Enhancement (View pull request)
Use new release field for agentless deployment mode to establish as beta.		 9.1.4
9.0.7
8.19.4
1.19.0 Enhancement (View pull request)
Enable Agentless deployment.		 9.1.4
9.0.7
8.19.4
1.18.0 Enhancement (View pull request)
Prevent updating fleet health status to degraded when pagination completes.		 9.1.4
9.0.7
8.19.4
1.17.0 Enhancement (View pull request)
Update Kibana constraint to support 9.0.0.		 9.0.0
8.13.0
1.16.1 Bug fix (View pull request)
Updated SSL description in package manifest.yml to be uniform and to include links to documentation.		 8.13.0
1.16.0 Enhancement (View pull request)
Add "preserve_original_event" tag to documents with event.kind manually set to "pipeline_error".		 8.13.0
1.15.0 Enhancement (View pull request)
Do not remove event.original in main ingest pipeline.		 8.13.0
1.14.0 Enhancement (View pull request)
Add "preserve_original_event" tag to documents with event.kind set to "pipeline_error".		 8.13.0
1.13.0 Enhancement (View pull request)
Removed import_mappings. Update the kibana constraint to ^8.13.0. Modified the field definitions to remove ECS fields made redundant by the ecs@mappings component template.		 8.13.0
1.12.0 Enhancement (View pull request)
Improve handling of empty responses.		 8.12.0
1.11.0 Enhancement (View pull request)
Set sensitive values as secret.		 8.12.0
1.10.2 Enhancement (View pull request)
Changed owners		 8.4.1
1.10.1 Enhancement (View pull request)
Changed owners		 —
1.10.0 Enhancement (View pull request)
Limit request tracer log count to five.		 8.4.1
1.9.0 Enhancement (View pull request)
ECS version updated to 8.11.0.		 8.4.1
1.8.0 Enhancement (View pull request)
Add support for the member data stream.		 8.4.1
1.7.0 Enhancement (View pull request)
Improve 'event.original' check to avoid errors if set.		 8.4.1
1.6.1 Bug fix (View pull request)
Fix mapping of group fields		 8.4.1
1.6.0 Enhancement (View pull request)
ECS version updated to 8.10.0.		 8.4.1
1.5.0 Enhancement (View pull request)
The format_version in the package manifest changed from 2.11.0 to 3.0.0. Removed dotted YAML keys from package manifest. Added 'owner.type: elastic' to package manifest.		 8.4.1
1.4.0 Enhancement (View pull request)
Add tags.yml file so that integration's dashboards and saved searches are tagged with "Security Solution" and displayed in the Security Solution UI.		 8.4.1
1.3.0 Enhancement (View pull request)
Add support for HTTP request trace logging.		 8.4.1
1.2.0 Enhancement (View pull request)
Update package to ECS 8.9.0.		 8.4.1
1.1.0 Enhancement (View pull request)
Document duration units.		 8.4.1
1.0.1 Bug fix (View pull request)
Remove confusing error message tag prefix.		 8.4.1
1.0.0 Enhancement (View pull request)
Release Bitwarden as GA.		 8.4.1
0.3.0 Enhancement (View pull request)
Update package to ECS 8.8.0.		 8.4.1
0.2.0 Enhancement (View pull request)
Update package-spec version to 2.7.0.		 8.4.1
0.1.0 Enhancement (View pull request)
Initial release.		 8.4.1