2.31.0

Breaking changes

• None

New features

• Add ES|QL (Elasticsearch Piped Query Language) support - #1767 - @jertel

Other changes

• [Kibana] Fix discover URLs when query_key values are empty - #1769 - @thejohnrichard

elastalert2-2.31.0

Automated rule-based alerting for Elasticsearch

2.30.0

Breaking changes

• None

New features

• [Datadog] Add optional datadog_api_url parameter to support regional Datadog sites (US3, US5, EU1, AP1, etc.) - #1754 - @BillyWeans
• summary_table_fields now accepts a dict form with path and optional header keys for custom column labels - #1763 - @dennis-trapp

Other changes

• Replace es.delete() with delete_by_query() in aggregation cleanup to support Elasticsearch data streams as the writeback index - #1755 - @peterlehot
• Remove MS Teams Alerter - #1757 - @nsano-rururu
• Upgrade dependency library pylint to 4.0.5 - #1760 - @jertel
• Upgrade dependency library pytest-cov to 7.1.0 - #1760 - @jertel
• Upgrade dependency library sphinx to 9.1.0 - #1760 - @jertel
• Upgrade dependency library sphinx_rtd_theme to 3.1.0 - #1760 - @jertel
• Upgrade dependency library tox to 4.54.0 - #1764 - @jertel
• Upgrade dependency library apscheduler to 3.11.2 - #1760 - @jertel
• Upgrade dependency library boto3 to 1.43.14 - #1764 - @jertel
• Upgrade dependency library croniter to 6.2.2 - #1760 - @jertel
• Upgrade dependency library jsonpointer to 3.1.1 - #1760 - @jertel
• Upgrade dependency library jsonschema to 4.26.0 - #1760 - @jertel
• Upgrade dependency library prettytable to 3.17.0 - #1760 - @jertel
• Upgrade dependency library prometheus-client to 0.25.0 - #1760 - @jertel
• Upgrade dependency library pytz to 2026.2 - #1764 - @jertel
• Upgrade dependency library zabbix-utils to 2.0.4 - #1760 - @jertel
• Upgrade dependency library requests to 2.34.2 - #1764 - @jertel
• Upgrade dependency library tencentcloud-sdk-python to 3.1.101 - #1764 - @jertel
• Upgrade dependency library twilio to 9.10.9 - #1764 - @jertel
• Upgrade base Docker image to python:3.14.5-slim - #1764 - @jertel

elastalert2-2.30.0

Automated rule-based alerting for Elasticsearch

2.29.0

Breaking changes

• None

New features

• Add AWS SQS alerter for sending alerts to Amazon Simple Queue Service queues - #1750 - @AnthraX1

Other changes

• [Docs] Clarified Slack webhook URL documentation as it related to legacy vs app webhooks - #1745 - @jertel
• [README] Update ElastAlert GitHub repository link in README - #1747 - @nsano-rururu
• Fix missing pytz dependency - #1752 - @m4dh4t

2.28.0

Breaking changes

• metric_agg_script with metric_agg_type: percentiles now applies the percentile_range to the Elasticsearch query. Previously, this was ignored and ElastAlert2 always evaluated the first percentile (p1). If you relied on that behavior, you may need to update your configuration. - #1738 - @koooommmm

New features

• [LINE Message API] Add LINE Messaging API Alerter - #1724 - @nsano-rururu

Other changes

• [Zabbix] Migrating from py-zabbix to python-zabbix-utils - #1722 - @nsano-rururu
• [Docs] Correct webex webhook alerter example - #1c8f79f - @jertel
• [Docs] Updated elastalert.rst and alerts.rst and fixed broken links - #1741 - @nsano-rururu

2.27.0

Breaking changes

• None

New features

• Add support for loading custom Jinja2 filters - #1700 - @anroots-by

Other changes

• Fix percentile metric_aggregation rule error for rules with compound query keys - #1701 - @jhatcher1
• Support Python 3.14 - #1706 - @nsano-rururu
• Update library: boto3 to 1.40.59 - #1706 - @nsano-rururu
• Update library: cffi to 2.0.0 - #1706 - @nsano-rururu
• Update library: jinja2 to 3.1.6 - #1706 - @nsano-rururu
• Update library: jira to 3.10.5 - #1706 - @nsano-rururu
• Update library: jsonschema to 4.25.1 - #1706 - @nsano-rururu
• Update library: prettytable to 3.16.0 - #1706 - @nsano-rururu
• Update library: prometheus-client to 0.23.1 - #1706 - @nsano-rururu
• Update library: pyyaml to 6.0.3 - #1706 - @nsano-rururu
• Update library: requests to 2.32.5 - #1706 - @nsano-rururu
• Update library: tencentcloud-sdk-python to 3.0.1479 - #1706 - @nsano-rururu
• Update library: twilio to 9.8.4 - #1706 - @nsano-rururu
• Update build libraries: pylint, pytest, pytest-cov, pytest-xdist, sphinx, tox - #1706 - @nsano-rururu
• Update docs build to use Ubuntu 24.40 and Python 3.13 - #1708 - @jertel
• Cleanup unused imports - #1708 - @jertel
• [Jira] Updated for Jira Cloud API deprecation - #1709 - @leesmith110
• Reduce unnecessary ES queries when checking for silenced rules - #1715 - @zpcc
• [Chatwork] Fix Chatwork - #1716 - @nsano-rururu

2.26.0

Breaking changes

• None

New features

• Now supporting Elasticsearch 9 and OpenSearch 3 - #1682 - @jertel

Other changes

• Removed specific version requirement for Elastic Kibana and OpenSearch Discover - #1682 - @jertel
• If --end argument falls in the past then at least one full run cycle will now complete before exiting - #1694 - @nkormakov
• Add support for a ES_VERSION environment variable to override the Elasticsearch version - #1690 - @fabian-heib

2.25.0

Breaking changes

• [Helm] An unlikely breaking change could occur if this chart was previously deployed with namespace overrides. Deploy to a pre-prod environment before proceeding with production. - #1662 - @lepouletsuisse

New features

• [ServiceNow] Include arbitrary fields in ServiceNow tickets by including a service_now_additional_fields configuration stanza. - #1670 - @mitchell-es
• [SMSEagle] New SMSEagle alerter - #1671 - @marcin-smseagle

Other changes

• [Helm] Fix --namespace and namespaceOverride value in Helm charts - #1662 - @lepouletsuisse
• [Pager Duty] Expand pagerduty_v2_payload_custom_details to allow defaulting to value of provided key:value pair if the value is not found as a key in an elastalert match. - #1674 - @mark-trellix

2.24.0

Breaking changes

• None

New features

• [MicrosoftPowerAutomate] Add support for 'ms_power_automate_webhook_url_from_field' option to dynamically select the webhook URL from the match. - #1623 - @aizerin
• Add Webex Incoming Webhook alerter - #1635 - @dennis-trapp
• Support jinja2 templates in alertmanager_labels and alertmanager_annotations - #1642 - @tgxworld
• [Helm] Add support of update strategy in the deployment #1646 - @efazenda
• Add Flashduty alerter - #1649 - @pijiang3

Other changes

• Fix schema.yaml to support Kibana 8.17 - #1631 - @vpiserchia
• [Helm] Clarified documentation around rootRulesFolder - @jertel
• [IRIS] Fix iris.py to overcome a description overwriting bug - #1643 - @jmolletAMNH
• Add metric_<metric_key>_formatted and metric_agg_value_formatted to metric aggregation when using compound query keys - #1647 - @dennis-trapp
• Remove lineNotifyAlerter #1638 - @nsano-rururu
• Fixed an issue where the test-docker command would cause an error when running old docker-compose #1638 - @nsano-rururu