diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index fad7186655f..a2b19fb1a90 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -1,71 +1,74 @@
 // Use these for links to issue and pulls. Note issues and pulls redirect one to
 // each other on Github, so don't worry too much on using the right prefix.
-:issue: https://github.com/elastic/beats/issues/
-:pull: https://github.com/elastic/beats/pull/
+:issue-beats: https://github.com/elastic/beats/issues/
+:pull-beats: https://github.com/elastic/beats/pull/
+
+:issue: https://github.com/elastic/elastic-agent/issues/
+:pull: https://github.com/elastic/elastic-agent/pull/
 
 [[release-notes-7.9.0]]
 === Elastic Agent version 7.9.0
 
 
 ==== Breaking changes
-- Change fleet.yml structure, causes upgraded agent to register as new agent {pull}19248[19248]
-- Remove obfuscation of fleet.yml, causes re-enroll of agent to Fleet {pull}19678[19678]
-- Rename enroll --ca_sha256 to --ca-sha256 {pull}19900[19900]
-- Rename enroll --certificate_authorities to --certificate-authorities {pull}19900[19900]
-- Don't build 32 bits version of Elastic Agent. {issue}25533[25533]
+- Change fleet.yml structure, causes upgraded agent to register as new agent {pull-beats}[19248]
+- Remove obfuscation of fleet.yml, causes re-enroll of agent to Fleet {pull-beats}[19678]
+- Rename enroll --ca_sha256 to --ca-sha256 {pull-beats}[19900]
+- Rename enroll --certificate_authorities to --certificate-authorities {pull-beats}[19900]
+- Don't build 32 bits version of Elastic Agent. {issue-beats}[25533]
 
 ==== Bugfixes
 
-- Fix install service script for windows {pull}18814[18814]
-- Properly stops subprocess on shutdown {pull}19567[19567]
-- Forward revision number of the configuration to the endpoint. {pull}19759[19759]
-- Remove support for logs type and use logfile {pull}19761[19761]
-- Avoid comparing uncomparable types on enroll {issue}19976[19976]
-- Fix issues with merging of elastic-agent.yml and fleet.yml {pull}20026[20026]
-- Unzip failures on Windows 8/Windows server 2012 {pull}20088[20088]
-- Fix failing unit tests on windows {pull}20127[20127]
-- Prevent closing closed reader {pull}20214[20214]
-- Improve GRPC stop to be more relaxed {pull}20118[20118]
-- Fix Windows service installation script {pull}20203[20203]
-- Fix timeout issue stopping service applications {pull}20256[20256]
-- Fix incorrect hash when upgrading agent {pull}22322[22322]
-- Fix refresh of monitoring configuration {pull}23619[23619]
-- Fixed nil pointer during unenroll {pull}23609[23609]
-- Fixed reenroll scenario {pull}23686[23686]
-- Fixed Monitoring filebeat and metricbeat not connecting to Agent over GRPC {pull}23843[23843]
-- Fixed make status readable in the log. {pull}23849[23849]
-- Windows agent doesn't uninstall with a lowercase `c:` drive in the path {pull}23998[23998]
-- Fix reloading of log level for services {pull}24055[24055]
-- Fix: Successfully installed and enrolled agent running standalone{pull}24128[24128]
-- Make installer atomic on windows {pull}24253[24253]
-- Remove installed services on agent uninstall {pull}24151[24151]
-- Fix failing installation on windows 7 {pull}24387[24387]
-- Fix capabilities resolution in inspect command {pull}24346[24346]
-- Fix windows installer during enroll {pull}24343[24343]
-- Logging to file disabled on enroll {issue}24173[24173]
-- Prevent uninstall failures on empty config {pull}24838[24838]
-- Fix issue with FLEET_CA not being used with Fleet Server in container {pull}26529[26529]
+- Fix install service script for windows {pull-beats}[18814]
+- Properly stops subprocess on shutdown {pull-beats}[19567]
+- Forward revision number of the configuration to the endpoint. {pull-beats}[19759]
+- Remove support for logs type and use logfile {pull-beats}[19761]
+- Avoid comparing uncomparable types on enroll {issue-beats}[19976]
+- Fix issues with merging of elastic-agent.yml and fleet.yml {pull-beats}[20026]
+- Unzip failures on Windows 8/Windows server 2012 {pull-beats}[20088]
+- Fix failing unit tests on windows {pull-beats}[20127]
+- Prevent closing closed reader {pull-beats}[20214]
+- Improve GRPC stop to be more relaxed {pull-beats}[20118]
+- Fix Windows service installation script {pull-beats}[20203]
+- Fix timeout issue stopping service applications {pull-beats}[20256]
+- Fix incorrect hash when upgrading agent {pull-beats}[22322]
+- Fix refresh of monitoring configuration {pull-beats}[23619]
+- Fixed nil pointer during unenroll {pull-beats}[23609]
+- Fixed reenroll scenario {pull-beats}[23686]
+- Fixed Monitoring filebeat and metricbeat not connecting to Agent over GRPC {pull-beats}[23843]
+- Fixed make status readable in the log. {pull-beats}[23849]
+- Windows agent doesn't uninstall with a lowercase `c:` drive in the path {pull-beats}[23998]
+- Fix reloading of log level for services {pull-beats}[24055]
+- Fix: Successfully installed and enrolled agent running standalone{pull-beats}[24128]
+- Make installer atomic on windows {pull-beats}[24253]
+- Remove installed services on agent uninstall {pull-beats}[24151]
+- Fix failing installation on windows 7 {pull-beats}[24387]
+- Fix capabilities resolution in inspect command {pull-beats}[24346]
+- Fix windows installer during enroll {pull-beats}[24343]
+- Logging to file disabled on enroll {issue-beats}[24173]
+- Prevent uninstall failures on empty config {pull-beats}[24838]
+- Fix issue with FLEET_CA not being used with Fleet Server in container {pull-beats}[26529]
 
 ==== New features
 
-- Change monitoring defaults for agent {pull}18927[18927]
-- Agent verifies packages before using them {pull}18876[18876]
-- Change stream.* to dataset.* fields {pull}18967[18967]
-- Agent now runs the GRPC server and spawned application connect by to Agent {pull}18973[18973]
-- Rename input.type logs to logfile {pull}19360[19360]
-- Agent now installs/uninstalls Elastic Endpoint {pull}19248[19248]
-- Agent now downloads Elastic Endpoint {pull}19503[19503]
-- Refuse invalid stream values in configuration {pull}19587[19587]
-- Agent now load balances across multiple Kibana instances {pull}19628[19628]
-- Configuration cleanup {pull}19848[19848]
-- Agent now sends its own logs to elasticsearch {pull}19811[19811]
-- Add --insecure option to enroll command {pull}19900[19900]
-- Will retry to enroll if the server return a 429. {pull}19918[19811]
-- Add --staging option to enroll command {pull}20026[20026]
-- Add `event.dataset` to all events {pull}20076[20076]
-- Send datastreams fields {pull}20416[20416]
-- Agent supports capabilities definition {pull}23848[23848]
-- Restart process on output change {pull}24907[24907]
+- Change monitoring defaults for agent {pull-beats}[18927]
+- Agent verifies packages before using them {pull-beats}[18876]
+- Change stream.* to dataset.* fields {pull-beats}[18967]
+- Agent now runs the GRPC server and spawned application connect by to Agent {pull-beats}[18973]
+- Rename input.type logs to logfile {pull-beats}[19360]
+- Agent now installs/uninstalls Elastic Endpoint {pull-beats}[19248]
+- Agent now downloads Elastic Endpoint {pull-beats}[19503]
+- Refuse invalid stream values in configuration {pull-beats}[19587]
+- Agent now load balances across multiple Kibana instances {pull-beats}[19628]
+- Configuration cleanup {pull-beats}[19848]
+- Agent now sends its own logs to elasticsearch {pull-beats}[19811]
+- Add --insecure option to enroll command {pull-beats}[19900]
+- Will retry to enroll if the server return a 429. {pull-beats}[19811]
+- Add --staging option to enroll command {pull-beats}[20026]
+- Add `event.dataset` to all events {pull-beats}[20076]
+- Send datastreams fields {pull-beats}[20416]
+- Agent supports capabilities definition {pull-beats}[23848]
+- Restart process on output change {pull-beats}[24907]
 
 === Docs
 
@@ -75,61 +78,61 @@
 === Elastic Agent version 7.8.0
 
 ==== Breaking changes
-- Rename agent to elastic-agent {pull}17391[17391]
+- Rename agent to elastic-agent {pull-beats}[17391]
 
 ==== Bugfixes
 
-- Fixed tests on windows {pull}16922[16922]
-- Fixed installers for SNAPSHOTs and windows {pull}17077[17077]
-- Fixed merge of config {pull}17399[17399]
-- Handle abs paths on windows correctly {pull}17461[17461]
-- Improved cancellation of agent {pull}17318[17318]
-- Fixed process spawning on Windows {pull}17751[17751]
-- Fix issues when running `mage package` for all the platforms. {pull}17767[17767]
-- Rename the User-Agent string from Beats Agent to Elastic Agent. {pull}17765[17765]
-- Remove the kbn-version on each request to the Kibana API. {pull}17764[17764]
-- Fixed injected log path to monitoring beat {pull}17833[17833]
-- Make sure that the Elastic Agent connect over TLS in cloud. {pull}17843[17843]
-- Moved stream.* fields to top of event {pull}17858[17858]
-- Use /tmp for default monitoring endpoint location for libbeat {pull}18131[18131]
-- Use default output by default {pull}18091[18091]
-- Fix panic and flaky tests for the Agent. {pull}18135[18135]
-- Fix default configuration after enroll {pull}18232[18232]
-- Fix make sure the collected logs or metrics include streams information. {pull}18261[18261]
-- Fix version to 7.8 {pull}18286[18286]
-- Fix an issue where the checkin_frequency, jitter, and backoff options where not configurable. {pull}17843[17843]
-- Ensure that the beats uses the params prefer_v2_templates on bulk request. {pull}18318[18318]
-- Stop monitoring on config change {pull}18284[18284]
-- Enable more granular control of monitoring {pull}18346[18346]
-- Fix jq: command not found {pull}18408[18408]
-- Avoid Chown on windows {pull}18512[18512]
-- Clean action store after enrolling to new configuration {pull}18656[18656]
-- Avoid watching monitor logs {pull}18723[18723]
-- Correctly report platform and family. {issue}18665[18665]
-- Guard against empty stream.datasource and namespace {pull}18769[18769]
-- Fix install service script for windows {pull}18814[18814]
+- Fixed tests on windows {pull-beats}[16922]
+- Fixed installers for SNAPSHOTs and windows {pull-beats}[17077]
+- Fixed merge of config {pull-beats}[17399]
+- Handle abs paths on windows correctly {pull-beats}[17461]
+- Improved cancellation of agent {pull-beats}[17318]
+- Fixed process spawning on Windows {pull-beats}[17751]
+- Fix issues when running `mage package` for all the platforms. {pull-beats}[17767]
+- Rename the User-Agent string from Beats Agent to Elastic Agent. {pull-beats}[17765]
+- Remove the kbn-version on each request to the Kibana API. {pull-beats}[17764]
+- Fixed injected log path to monitoring beat {pull-beats}[17833]
+- Make sure that the Elastic Agent connect over TLS in cloud. {pull-beats}[17843]
+- Moved stream.* fields to top of event {pull-beats}[17858]
+- Use /tmp for default monitoring endpoint location for libbeat {pull-beats}[18131]
+- Use default output by default {pull-beats}[18091]
+- Fix panic and flaky tests for the Agent. {pull-beats}[18135]
+- Fix default configuration after enroll {pull-beats}[18232]
+- Fix make sure the collected logs or metrics include streams information. {pull-beats}[18261]
+- Fix version to 7.8 {pull-beats}[18286]
+- Fix an issue where the checkin_frequency, jitter, and backoff options where not configurable. {pull-beats}[17843]
+- Ensure that the beats uses the params prefer_v2_templates on bulk request. {pull-beats}[18318]
+- Stop monitoring on config change {pull-beats}[18284]
+- Enable more granular control of monitoring {pull-beats}[18346]
+- Fix jq: command not found {pull-beats}[18408]
+- Avoid Chown on windows {pull-beats}[18512]
+- Clean action store after enrolling to new configuration {pull-beats}[18656]
+- Avoid watching monitor logs {pull-beats}[18723]
+- Correctly report platform and family. {issue-beats}[18665]
+- Guard against empty stream.datasource and namespace {pull-beats}[18769]
+- Fix install service script for windows {pull-beats}[18814]
 
 ==== New features
 
-- Generate index name in a format type-dataset-namespace {pull}16903[16903]
-- OS agnostic default configuration {pull}17016[17016]
-- Introduced post install hooks {pull}17241[17241]
-- Support for config constraints {pull}17112[17112]
-- Introduced `mage demo` command {pull}17312[17312]
-- Display the stability of the agent at enroll and start.  {pull}17336[17336]
-- Expose stream.* variables in events {pull}17468[17468]
-- Monitoring configuration reloadable {pull}17855[17855]
-- Pack ECS metadata to request payload send to fleet {pull}17894[17894]
-- Allow CLI overrides of paths {pull}17781[17781]
-- Enable Filebeat input: S3, Azureeventhub, cloudfoundry, httpjson, netflow, o365audit. {pull}17909[17909]
-- Configurable log level {pull}18083[18083]
-- Use data subfolder as default for process logs {pull}17960[17960]
-- Enable introspecting configuration {pull}18124[18124]
-- Follow home path for all config files {pull}18161[18161]
-- Do not require unnecessary configuration {pull}18003[18003]
-- Use nested objects so fleet can handle metadata correctly {pull}18234[18234]
-- Enable debug log level for Metricbeat and Filebeat when run under the Elastic Agent. {pull}17935[17935]
-- Pick up version from libbeat {pull}18350[18350]
-- More clear output of inspect command {pull}18405[18405]
-- When not port are specified and the https is used fallback to 443 {pull}18844[18844]
-- Basic upgrade process {pull}21002[21002]
+- Generate index name in a format type-dataset-namespace {pull-beats}[16903]
+- OS agnostic default configuration {pull-beats}[17016]
+- Introduced post install hooks {pull-beats}[17241]
+- Support for config constraints {pull-beats}[17112]
+- Introduced `mage demo` command {pull-beats}[17312]
+- Display the stability of the agent at enroll and start.  {pull-beats}[17336]
+- Expose stream.* variables in events {pull-beats}[17468]
+- Monitoring configuration reloadable {pull-beats}[17855]
+- Pack ECS metadata to request payload send to fleet {pull-beats}[17894]
+- Allow CLI overrides of paths {pull-beats}[17781]
+- Enable Filebeat input: S3, Azureeventhub, cloudfoundry, httpjson, netflow, o365audit. {pull-beats}[17909]
+- Configurable log level {pull-beats}[18083]
+- Use data subfolder as default for process logs {pull-beats}[17960]
+- Enable introspecting configuration {pull-beats}[18124]
+- Follow home path for all config files {pull-beats}[18161]
+- Do not require unnecessary configuration {pull-beats}[18003]
+- Use nested objects so fleet can handle metadata correctly {pull-beats}[18234]
+- Enable debug log level for Metricbeat and Filebeat when run under the Elastic Agent. {pull-beats}[17935]
+- Pick up version from libbeat {pull-beats}[18350]
+- More clear output of inspect command {pull-beats}[18405]
+- When not port are specified and the https is used fallback to 443 {pull-beats}[18844]
+- Basic upgrade process {pull-beats}[21002]
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index 2c3e563cf21..1a0515336c3 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -1,101 +1,104 @@
 // Use these for links to issue and pulls. Note issues and pulls redirect one to
 // each other on Github, so don't worry too much on using the right prefix.
-:issue: https://github.com/elastic/beats/issues/
-:pull: https://github.com/elastic/beats/pull/
+:issue-beats: https://github.com/elastic/beats/issues/
+:pull-beats: https://github.com/elastic/beats/pull/
+
+:issue: https://github.com/elastic/elastic-agent/issues/
+:pull: https://github.com/elastic/elastic-agent/pull/
 
 === Elastic Agent version HEAD
 
 ==== Breaking changes
 
-- Docker container is not run as root by default. {pull}21213[21213]
-- Read Fleet connection information from `fleet.*` instead of `fleet.kibana.*`. {pull}24713[24713]
-- Beats build for 32Bit Windows or Linux system will refuse to run on a 64bit system. {pull}25186[25186]
-- Remove the `--kibana-url` from `install` and `enroll` command. {pull}25529[25529]
-- Default to port 80 and 443 for Kibana and Fleet Server connections. {pull}25723[25723]
-- Remove deprecated/undocumented IncludeCreatorMetadata setting from kubernetes metadata config options {pull}28006[28006]
-- The `/processes/<subprocess>` endpoint proxies to the subprocess's monitoring endpoint, instead of querying its `/stats` endpoint {pull}28165[28165]
-- Remove username/password for fleet-server authentication. {pull}29458[29458]
+- Docker container is not run as root by default. {pull-beats}[21213]
+- Read Fleet connection information from `fleet.*` instead of `fleet.kibana.*`. {pull-beats}[24713]
+- Beats build for 32Bit Windows or Linux system will refuse to run on a 64bit system. {pull-beats}[25186]
+- Remove the `--kibana-url` from `install` and `enroll` command. {pull-beats}[25529]
+- Default to port 80 and 443 for Kibana and Fleet Server connections. {pull-beats}[25723]
+- Remove deprecated/undocumented IncludeCreatorMetadata setting from kubernetes metadata config options {pull-beats}[28006]
+- The `/processes/<subprocess>` endpoint proxies to the subprocess's monitoring endpoint, instead of querying its `/stats` endpoint {pull-beats}[28165]
+- Remove username/password for fleet-server authentication. {pull-beats}[29458]
 
 ==== Bugfixes
-- Fix rename *ConfigChange to *PolicyChange to align on changes in the UI. {pull}20779[20779]
-- Thread safe sorted set {pull}21290[21290]
-- Copy Action store on upgrade {pull}21298[21298]
-- Include inputs in action store actions {pull}21298[21298]
-- Fix issue where inputs without processors defined would panic {pull}21628[21628]
-- Prevent reporting ecs version twice {pull}21616[21616]
-- Partial extracted beat result in failure to spawn beat {issue}21718[21718]
-- Use symlink path for reexecutions {pull}21835[21835]
-- Use ML_SYSTEM to detect if agent is running as a service {pull}21884[21884]
-- Use local temp instead of system one {pull}21883[21883]
-- Rename monitoring index from `elastic.agent` to `elastic_agent` {pull}21932[21932]
-- Fix issue with named pipes on Windows 7 {pull}21931[21931]
-- Fix missing elastic_agent event data {pull}21994[21994]
-- Ensure shell wrapper path exists before writing wrapper on install {pull}22144[22144]
-- Fix deb/rpm packaging for Elastic Agent {pull}22153[22153]
-- Fix composable input processor promotion to fix duplicates {pull}22344[22344]
-- Fix sysv init files for deb/rpm installation {pull}22543[22543]
-- Fix shell wrapper for deb/rpm packaging {pull}23038[23038]
-- Fixed parsing of npipe URI {pull}22978[22978]
-- Select default agent policy if no enrollment token provided. {pull}23973[23973]
-- Remove artifacts on transient download errors {pull}23235[23235]
-- Support for linux/arm64 {pull}23479[23479]
-- Skip top level files when unziping archive during upgrade {pull}23456[23456]
-- Do not take ownership of Endpoint log path {pull}23444[23444]
-- Fixed fetching DBus service PID {pull}23496[23496]
-- Fix issue of missing log messages from filebeat monitor {pull}23514[23514]
-- Increase checkin grace period to 30 seconds {pull}23568[23568]
-- Fix libbeat from reporting back degraded on config update {pull}23537[23537]
-- Rewrite check if agent is running with admin rights on Windows {pull}23970[23970]
-- Fix issues with dynamic inputs and conditions {pull}23886[23886]
-- Fix bad substitution of API key. {pull}24036[24036]
-- Fix docker enrollment issue related to Fleet Server change. {pull}24155[24155]
-- Improve log on failure of Endpoint Security installation. {pull}24429[24429]
-- Verify communication to Kibana before updating Fleet client. {pull}24489[24489]
-- Fix nil pointer when null is generated as list item. {issue}23734[23734]
-- Add support for filestream input. {pull}24820[24820]
-- Add check for URL set when cert and cert key. {pull}24904[24904]
-- Fix install command for Fleet Server bootstrap, remove need for --enrollment-token when using --fleet-server {pull}24981[24981]
-- Respect host configuration for exposed processes endpoint {pull}25114[25114]
-- Set --inscure in container when FLEET_SERVER_ENABLE and FLEET_INSECURE set {pull}25137[25137]
-- Fixed: limit for retries to Kibana configurable {issue}25063[25063]
-- Fix issue with status and inspect inside of container {pull}25204[25204]
-- Remove FLEET_SERVER_POLICY_NAME env variable as it was not used {pull}25149[25149]
-- Reduce log level for listener cleanup to debug {pull}25274
-- Passing in policy id to container command works {pull}25352[25352]
-- Reduce log level for listener cleanup to debug {pull}25274[25274]
-- Delay the restart of application when a status report of failure is given {pull}25339[25339]
-- Don't log when upgrade capability doesn't apply {pull}25386[25386]
-- Fixed issue when unversioned home is set and invoked watcher failing with ENOENT {issue}25371[25371]
-- Fixed Elastic Agent: expecting Dict and received *transpiler.Key for '0' {issue}24453[24453]
-- Fix AckBatch to do nothing when no actions passed {pull}25562[25562]
-- Add error log entry when listener creation fails {issue}23483[23482]
-- Handle case where policy doesn't contain Fleet connection information {pull}25707[25707]
-- Fix fleet-server.yml spec to not overwrite existing keys {pull}25741[25741]
-- Agent sends wrong log level to Endpoint {issue}25583[25583]
-- Fix startup with failing configuration {pull}26057[26057]
-- Change timestamp in elatic-agent-json.log to use UTC {issue}25391[25391]
-- Fix add support for Logstash output. {pull}24305[24305]
-- Do not log Elasticsearch configuration for monitoring output when running with debug. {pull}26583[26583]
-- Fix issue where proxy enrollment options broke enrollment command. {pull}26749[26749]
-- Remove symlink.prev from previously failed upgrade {pull}26785[26785]
-- Fix apm-server supported outputs not being in sync with supported output types. {pull}26885[26885]
-- Set permissions during installation {pull}26665[26665]
-- Disable monitoring during fleet-server bootstrapping. {pull}27222[27222]
-- Fix issue with atomic extract running in K8s {pull}27396[27396]
-- Fix issue with install directory in state path in K8s {pull}27396[27396]
-- Disable monitoring during fleet-server bootstrapping. {pull}27222[27222]
-- Change output.elasticsearch.proxy_disabled flag to output.elasticsearch.proxy_disable so fleet uses it. {issue}27670[27670] {pull}27671[27671]
-- Add validation for certificate flags to ensure they are absolute paths. {pull}27779[27779]
-- Migrate state on upgrade {pull}27825[27825]
-- Add "_monitoring" suffix to monitoring instance names to remove ambiguity with the status command. {issue}25449[25449]
-- Ignore ErrNotExists when fixing permissions. {issue}27836[27836] {pull}27846[27846]
-- Snapshot artifact lookup will use agent.download proxy settings. {issue}27903[27903] {pull}27904[27904]
-- Fix lazy acker to only add new actions to the batch. {pull}27981[27981]
-- Allow HTTP metrics to run in bootstrap mode. Add ability to adjust timeouts for Fleet Server. {pull}28260[28260]
-- Fix agent configuration overwritten by default fleet config. {pull}29297[29297]
-- Allow agent containers to use basic auth to create a service token. {pull}29651[29651]
-- Fix issue where a failing artifact verification does not remove the bad artifact. {pull}30281[30281]
-- Reduce Elastic Agent shut down time by stopping processes concurrently {pull}29650[29650]
+- Fix rename *ConfigChange to *PolicyChange to align on changes in the UI. {pull-beats}[20779]
+- Thread safe sorted set {pull-beats}[21290]
+- Copy Action store on upgrade {pull-beats}[21298]
+- Include inputs in action store actions {pull-beats}[21298]
+- Fix issue where inputs without processors defined would panic {pull-beats}[21628]
+- Prevent reporting ecs version twice {pull-beats}[21616]
+- Partial extracted beat result in failure to spawn beat {issue-beats}[21718]
+- Use symlink path for reexecutions {pull-beats}[21835]
+- Use ML_SYSTEM to detect if agent is running as a service {pull-beats}[21884]
+- Use local temp instead of system one {pull-beats}[21883]
+- Rename monitoring index from `elastic.agent` to `elastic_agent` {pull-beats}[21932]
+- Fix issue with named pipes on Windows 7 {pull-beats}[21931]
+- Fix missing elastic_agent event data {pull-beats}[21994]
+- Ensure shell wrapper path exists before writing wrapper on install {pull-beats}[22144]
+- Fix deb/rpm packaging for Elastic Agent {pull-beats}[22153]
+- Fix composable input processor promotion to fix duplicates {pull-beats}[22344]
+- Fix sysv init files for deb/rpm installation {pull-beats}[22543]
+- Fix shell wrapper for deb/rpm packaging {pull-beats}[23038]
+- Fixed parsing of npipe URI {pull-beats}[22978]
+- Select default agent policy if no enrollment token provided. {pull-beats}[23973]
+- Remove artifacts on transient download errors {pull-beats}[23235]
+- Support for linux/arm64 {pull-beats}[23479]
+- Skip top level files when unziping archive during upgrade {pull-beats}[23456]
+- Do not take ownership of Endpoint log path {pull-beats}[23444]
+- Fixed fetching DBus service PID {pull-beats}[23496]
+- Fix issue of missing log messages from filebeat monitor {pull-beats}[23514]
+- Increase checkin grace period to 30 seconds {pull-beats}[23568]
+- Fix libbeat from reporting back degraded on config update {pull-beats}[23537]
+- Rewrite check if agent is running with admin rights on Windows {pull-beats}[23970]
+- Fix issues with dynamic inputs and conditions {pull-beats}[23886]
+- Fix bad substitution of API key. {pull-beats}[24036]
+- Fix docker enrollment issue related to Fleet Server change. {pull-beats}[24155]
+- Improve log on failure of Endpoint Security installation. {pull-beats}[24429]
+- Verify communication to Kibana before updating Fleet client. {pull-beats}[24489]
+- Fix nil pointer when null is generated as list item. {issue-beats}[23734]
+- Add support for filestream input. {pull-beats}[24820]
+- Add check for URL set when cert and cert key. {pull-beats}[24904]
+- Fix install command for Fleet Server bootstrap, remove need for --enrollment-token when using --fleet-server {pull-beats}[24981]
+- Respect host configuration for exposed processes endpoint {pull-beats}[25114]
+- Set --inscure in container when FLEET_SERVER_ENABLE and FLEET_INSECURE set {pull-beats}[25137]
+- Fixed: limit for retries to Kibana configurable {issue-beats}[25063]
+- Fix issue with status and inspect inside of container {pull-beats}[25204]
+- Remove FLEET_SERVER_POLICY_NAME env variable as it was not used {pull-beats}[25149]
+- Reduce log level for listener cleanup to debug {pull-beats}
+- Passing in policy id to container command works {pull-beats}[25352]
+- Reduce log level for listener cleanup to debug {pull-beats}[25274]
+- Delay the restart of application when a status report of failure is given {pull-beats}[25339]
+- Don't log when upgrade capability doesn't apply {pull-beats}[25386]
+- Fixed issue when unversioned home is set and invoked watcher failing with ENOENT {issue-beats}[25371]
+- Fixed Elastic Agent: expecting Dict and received *transpiler.Key for '0' {issue-beats}[24453]
+- Fix AckBatch to do nothing when no actions passed {pull-beats}[25562]
+- Add error log entry when listener creation fails {issue-beats}[23482]
+- Handle case where policy doesn't contain Fleet connection information {pull-beats}[25707]
+- Fix fleet-server.yml spec to not overwrite existing keys {pull-beats}[25741]
+- Agent sends wrong log level to Endpoint {issue-beats}[25583]
+- Fix startup with failing configuration {pull-beats}[26057]
+- Change timestamp in elatic-agent-json.log to use UTC {issue-beats}[25391]
+- Fix add support for Logstash output. {pull-beats}[24305]
+- Do not log Elasticsearch configuration for monitoring output when running with debug. {pull-beats}[26583]
+- Fix issue where proxy enrollment options broke enrollment command. {pull-beats}[26749]
+- Remove symlink.prev from previously failed upgrade {pull-beats}[26785]
+- Fix apm-server supported outputs not being in sync with supported output types. {pull-beats}[26885]
+- Set permissions during installation {pull-beats}[26665]
+- Disable monitoring during fleet-server bootstrapping. {pull-beats}[27222]
+- Fix issue with atomic extract running in K8s {pull-beats}[27396]
+- Fix issue with install directory in state path in K8s {pull-beats}[27396]
+- Disable monitoring during fleet-server bootstrapping. {pull-beats}[27222]
+- Change output.elasticsearch.proxy_disabled flag to output.elasticsearch.proxy_disable so fleet uses it. {issue-beats}[27670] {pull-beats}[27671]
+- Add validation for certificate flags to ensure they are absolute paths. {pull-beats}[27779]
+- Migrate state on upgrade {pull-beats}[27825]
+- Add "_monitoring" suffix to monitoring instance names to remove ambiguity with the status command. {issue-beats}[25449]
+- Ignore ErrNotExists when fixing permissions. {issue-beats}[27836] {pull-beats}[27846]
+- Snapshot artifact lookup will use agent.download proxy settings. {issue-beats}[27903] {pull-beats}[27904]
+- Fix lazy acker to only add new actions to the batch. {pull-beats}[27981]
+- Allow HTTP metrics to run in bootstrap mode. Add ability to adjust timeouts for Fleet Server. {pull-beats}[28260]
+- Fix agent configuration overwritten by default fleet config. {pull-beats}[29297]
+- Allow agent containers to use basic auth to create a service token. {pull-beats}[29651]
+- Fix issue where a failing artifact verification does not remove the bad artifact. {pull-beats}[30281]
+- Reduce Elastic Agent shut down time by stopping processes concurrently {pull-beats}[29650]
 - Move `context cancelled` error from fleet gateway into debug level. {pull}187[187]
 - Update library containerd to 1.5.10. {pull}186[186]
 - Add fleet-server to output of elastic-agent inspect output command (and diagnostic bundle). {pull}243[243]
@@ -105,75 +108,75 @@
 
 ==== New features
 
-- Prepare packaging for endpoint and asc files {pull}20186[20186]
-- Improved version CLI {pull}20359[20359]
-- Enroll CLI now restarts running daemon {pull}20359[20359]
-- Add restart CLI cmd {pull}20359[20359]
-- Add new `synthetics/*` inputs to run Heartbeat {pull}20387[20387]
-- Users of the Docker image can now pass `FLEET_ENROLL_INSECURE=1` to include the `--insecure` flag with the `elastic-agent enroll` command {issue}20312[20312] {pull}20713[20713]
-- Add `docker` composable dynamic provider. {pull}20842[20842]
-- Add support for dynamic inputs with providers and `{{variable|"default"}}` substitution. {pull}20839[20839]
-- Add support for EQL based condition on inputs {pull}20994[20994]
-- Send `fleet.host.id` to Endpoint Security {pull}21042[21042]
-- Add `install` and `uninstall` subcommands {pull}21206[21206]
-- Use new form of fleet API paths {pull}21478[21478]
-- Add `kubernetes` composable dynamic provider. {pull}21480[21480]
-- Send updating state {pull}21461[21461]
-- Add `elastic.agent.id` and `elastic.agent.version` to published events from filebeat and metricbeat {pull}21543[21543]
-- Add `upgrade` subcommand to perform upgrade of installed Elastic Agent {pull}21425[21425]
-- Update `fleet.yml` and Kibana hosts when a policy change updates the Kibana hosts {pull}21599[21599]
-- Update `install` command to perform enroll before starting Elastic Agent {pull}21772[21772]
-- Update `fleet.kibana.path` from a POLICY_CHANGE {pull}21804[21804]
-- Removed `install-service.ps1` and `uninstall-service.ps1` from Windows .zip packaging {pull}21694[21694]
-- Add `priority` to `AddOrUpdate` on dynamic composable input providers communication channel {pull}22352[22352]
-- Ship `endpoint-security` logs to elasticsearch {pull}22526[22526]
-- Log level reloadable from fleet {pull}22690[22690]
-- Push log level downstream {pull}22815[22815]
-- Add metrics collection for Agent {pull}22793[22793]
-- Add support for Fleet Server {pull}23736[23736]
-- Add support for enrollment with local bootstrap of Fleet Server {pull}23865[23865]
-- Add TLS support for Fleet Server {pull}24142[24142]
-- Add support for Fleet Server running under Elastic Agent {pull}24220[24220]
-- Add CA support to Elastic Agent docker image {pull}24486[24486]
-- Add k8s secrets provider for Agent {pull}24789[24789]
-- Add STATE_PATH, CONFIG_PATH, LOGS_PATH to Elastic Agent docker image {pull}24817[24817]
-- Add status subcommand {pull}24856[24856]
-- Add leader_election provider for k8s {pull}24267[24267]
-- Add --fleet-server-service-token and FLEET_SERVER_SERVICE_TOKEN options {pull}25083[25083]
-- Keep http and logging config during enroll {pull}25132[25132]
-- Log output of container to $LOGS_PATH/elastic-agent-start.log when LOGS_PATH set {pull}25150[25150]
-- Use `filestream` input for internal log collection. {pull}25660[25660]
-- Enable agent to send custom headers to kibana/ES {pull}26275[26275]
-- Set `agent.id` to the Fleet Agent ID in events published from inputs backed by Beats. {issue}21121[21121] {pull}26394[26394] {pull}26548[26548]
-- Add proxy support to artifact downloader and communication with fleet server. {pull}25219[25219]
-- Add proxy support to enroll command. {pull}26514[26514]
-- Enable configuring monitoring namespace {issue}26439[26439]
-- Communicate with Fleet Server over HTTP2. {pull}26474[26474]
-- Pass logging.metrics.enabled to beats to stop beats from adding metrics into their logs. {issue}26758[26758] {pull}26828[26828]
-- Support Node and Service autodiscovery in kubernetes dynamic provider. {pull}26801[26801]
-- Increase Agent's mem limits in k8s. {pull}27153[27153]
-- Add new --enroll-delay option for install and enroll commands. {pull}27118[27118]
-- Add link to troubleshooting guide on fatal exits. {issue}26367[26367] {pull}27236[27236]
-- Agent now adapts the beats queue size based on output settings. {issue}26638[26638] {pull}27429[27429]
-- Support ephemeral containers in Kubernetes dynamic provider. {issue}27020[#27020] {pull}27707[27707]
-- Add complete k8s metadata through composable provider. {pull}27691[27691]
-- Add diagnostics command to gather beat metadata. {pull}28265[28265]
-- Add diagnostics collect command to gather beat metadata, config, policy, and logs and bundle it into an archive. {pull}28461[28461]
-- Add `KIBANA_FLEET_SERVICE_TOKEN` to Elastic Agent container. {pull}28096[28096]
-- Enable pprof endpoints for beats processes. Allow pprof endpoints for elastic-agent if enabled. {pull}28983[28983]
-- Add `--pprof` flag to `elastic-agent diagnostics` and an `elastic-agent pprof` command to allow operators to gather pprof data from the agent and beats running under it. {pull}28798[28798]
-- Allow pprof endpoints for elastic-agent or beats if enabled. {pull}28983[28983] {pull}29155[29155]
-- Add --fleet-server-es-ca-trusted-fingerprint flag to allow agent/fleet-server to work with elasticsearch clusters using self signed certs. {pull}29128[29128]
-- Discover changes in Kubernetes nodes metadata as soon as they happen. {pull}23139[23139]
-- Add results of inspect output command into archive produced by diagnostics collect. {pull}29902[29902]
-- Add support for loading input configuration from external configuration files in standalone mode. You can load inputs from YAML configuration files under the folder `{path.config}/inputs.d`. {pull}30087[30087]
-- Install command will skip install/uninstall steps when installation via package is detected on Linux distros. {pull}30289[30289]
-- Update docker/distribution dependency library to fix a security issues concerning OCI Manifest Type Confusion Issue. {pull}30462[30462]
-- Add action_input_type for the .fleet-actions-results {pull}30562[30562]
-- Add support for enabling the metrics buffer endpoint in the elastic-agent and beats it runs. diagnostics collect command will gather metrics-buffer data if enabled. {pull}30471[30471]
+- Prepare packaging for endpoint and asc files {pull-beats}[20186]
+- Improved version CLI {pull-beats}[20359]
+- Enroll CLI now restarts running daemon {pull-beats}[20359]
+- Add restart CLI cmd {pull-beats}[20359]
+- Add new `synthetics/*` inputs to run Heartbeat {pull-beats}[20387]
+- Users of the Docker image can now pass `FLEET_ENROLL_INSECURE=1` to include the `--insecure` flag with the `elastic-agent enroll` command {issue-beats}[20312] {pull-beats}[20713]
+- Add `docker` composable dynamic provider. {pull-beats}[20842]
+- Add support for dynamic inputs with providers and `{{variable|"default"}}` substitution. {pull-beats}[20839]
+- Add support for EQL based condition on inputs {pull-beats}[20994]
+- Send `fleet.host.id` to Endpoint Security {pull-beats}[21042]
+- Add `install` and `uninstall` subcommands {pull-beats}[21206]
+- Use new form of fleet API paths {pull-beats}[21478]
+- Add `kubernetes` composable dynamic provider. {pull-beats}[21480]
+- Send updating state {pull-beats}[21461]
+- Add `elastic.agent.id` and `elastic.agent.version` to published events from filebeat and metricbeat {pull-beats}[21543]
+- Add `upgrade` subcommand to perform upgrade of installed Elastic Agent {pull-beats}[21425]
+- Update `fleet.yml` and Kibana hosts when a policy change updates the Kibana hosts {pull-beats}[21599]
+- Update `install` command to perform enroll before starting Elastic Agent {pull-beats}[21772]
+- Update `fleet.kibana.path` from a POLICY_CHANGE {pull-beats}[21804]
+- Removed `install-service.ps1` and `uninstall-service.ps1` from Windows .zip packaging {pull-beats}[21694]
+- Add `priority` to `AddOrUpdate` on dynamic composable input providers communication channel {pull-beats}[22352]
+- Ship `endpoint-security` logs to elasticsearch {pull-beats}[22526]
+- Log level reloadable from fleet {pull-beats}[22690]
+- Push log level downstream {pull-beats}[22815]
+- Add metrics collection for Agent {pull-beats}[22793]
+- Add support for Fleet Server {pull-beats}[23736]
+- Add support for enrollment with local bootstrap of Fleet Server {pull-beats}[23865]
+- Add TLS support for Fleet Server {pull-beats}[24142]
+- Add support for Fleet Server running under Elastic Agent {pull-beats}[24220]
+- Add CA support to Elastic Agent docker image {pull-beats}[24486]
+- Add k8s secrets provider for Agent {pull-beats}[24789]
+- Add STATE_PATH, CONFIG_PATH, LOGS_PATH to Elastic Agent docker image {pull-beats}[24817]
+- Add status subcommand {pull-beats}[24856]
+- Add leader_election provider for k8s {pull-beats}[24267]
+- Add --fleet-server-service-token and FLEET_SERVER_SERVICE_TOKEN options {pull-beats}[25083]
+- Keep http and logging config during enroll {pull-beats}[25132]
+- Log output of container to $LOGS_PATH/elastic-agent-start.log when LOGS_PATH set {pull-beats}[25150]
+- Use `filestream` input for internal log collection. {pull-beats}[25660]
+- Enable agent to send custom headers to kibana/ES {pull-beats}[26275]
+- Set `agent.id` to the Fleet Agent ID in events published from inputs backed by Beats. {issue-beats}[21121] {pull-beats}[26394] {pull-beats}[26548]
+- Add proxy support to artifact downloader and communication with fleet server. {pull-beats}[25219]
+- Add proxy support to enroll command. {pull-beats}[26514]
+- Enable configuring monitoring namespace {issue-beats}[26439]
+- Communicate with Fleet Server over HTTP2. {pull-beats}[26474]
+- Pass logging.metrics.enabled to beats to stop beats from adding metrics into their logs. {issue-beats}[26758] {pull-beats}[26828]
+- Support Node and Service autodiscovery in kubernetes dynamic provider. {pull-beats}[26801]
+- Increase Agent's mem limits in k8s. {pull-beats}[27153]
+- Add new --enroll-delay option for install and enroll commands. {pull-beats}[27118]
+- Add link to troubleshooting guide on fatal exits. {issue-beats}[26367] {pull-beats}[27236]
+- Agent now adapts the beats queue size based on output settings. {issue-beats}[26638] {pull-beats}[27429]
+- Support ephemeral containers in Kubernetes dynamic provider. {issue-beats}[#27020] {pull-beats}[27707]
+- Add complete k8s metadata through composable provider. {pull-beats}[27691]
+- Add diagnostics command to gather beat metadata. {pull-beats}[28265]
+- Add diagnostics collect command to gather beat metadata, config, policy, and logs and bundle it into an archive. {pull-beats}[28461]
+- Add `KIBANA_FLEET_SERVICE_TOKEN` to Elastic Agent container. {pull-beats}[28096]
+- Enable pprof endpoints for beats processes. Allow pprof endpoints for elastic-agent if enabled. {pull-beats}[28983]
+- Add `--pprof` flag to `elastic-agent diagnostics` and an `elastic-agent pprof` command to allow operators to gather pprof data from the agent and beats running under it. {pull-beats}[28798]
+- Allow pprof endpoints for elastic-agent or beats if enabled. {pull-beats}[28983] {pull-beats}[29155]
+- Add --fleet-server-es-ca-trusted-fingerprint flag to allow agent/fleet-server to work with elasticsearch clusters using self signed certs. {pull-beats}[29128]
+- Discover changes in Kubernetes nodes metadata as soon as they happen. {pull-beats}[23139]
+- Add results of inspect output command into archive produced by diagnostics collect. {pull-beats}[29902]
+- Add support for loading input configuration from external configuration files in standalone mode. You can load inputs from YAML configuration files under the folder `{path.config}/inputs.d`. {pull-beats}[30087]
+- Install command will skip install/uninstall steps when installation via package is detected on Linux distros. {pull-beats}[30289]
+- Update docker/distribution dependency library to fix a security issues concerning OCI Manifest Type Confusion Issue. {pull-beats}[30462]
+- Add action_input_type for the .fleet-actions-results {pull-beats}[30562]
+- Add support for enabling the metrics buffer endpoint in the elastic-agent and beats it runs. diagnostics collect command will gather metrics-buffer data if enabled. {pull-beats}[30471]
 - Update ack response schema and processing, add retrier for acks {pull}200[200]
 - Enhance error messages and logs for process start {pull}225[225]
-- Changed the default policy selection logic. When the agent has no policy id or name defined, it will fall back to defaults (defined by $FLEET_SERVER_POLICY_ID and $FLEET_DEFAULT_TOKEN_POLICY_NAME environment variables respectively). {issue}29774[29774] {pull}226[226]
+- Changed the default policy selection logic. When the agent has no policy id or name defined, it will fall back to defaults (defined by $FLEET_SERVER_POLICY_ID and $FLEET_DEFAULT_TOKEN_POLICY_NAME environment variables respectively). {issue-beats}[29774] {pull}226[226]
 - Add Elastic APM instrumentation {pull}180[180]
 - Agent can be built for `darwin/arm64`. When it's built for both `darwin/arm64` and `darwin/adm64` a universal binary is also built and packaged. {pull}203[203]
 - Add support for Cloudbeat. {pull}179[179]