Elastic 9.4: Workflows GA, Agent Builder updates, and Prometheus/PromQL support
2026-05-07T07:23:32Z•219dec32b24656c6334b5615f048eb15495fa6c76045eef7be7244484d71039c
agent-builderapm-http2-regressionattack-discoveryautomatic-importcustom-threat-intelligenceelastic-9.4elastic-securityelastic-stack-8.19.15elastic-stack-9.3.4elastic-workflowsllm-securityobservabilityowasp-llmprometheuspromqlrelease-notessiem-readinesstsdbupgrade-recommendedworkflows-ga
What happened
Collection of Elastic blog posts (May 2024–May 2026) highlighting product releases, security and observability features, and AI/LLM initiatives. Key items: Elastic 9.4 (Workflows GA, Agent Builder improvements, native Prometheus/PromQL and TSDB enhancements); SIEM Readiness (technical preview) and native automation with Elastic Workflows (SOAR replacement); security features made GA (Automatic Import, Attack Discovery) and a Custom Threat Intelligence integration; release updates including Elastic Stack 9.3.4 and 8.19.15 fixing an APM HTTP/2 framing regression and recommending upgrades. Also:,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- elastic_security_blog
- Record identifier
- 219dec32b24656c6334b5615f048eb15495fa6c76045eef7be7244484d71039c
- Enrichment time
- 2026-05-07T07:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.