Hello Security Onion Team,

I’m currently running Security Onion on a ThinkPad X1 Gen 7 as my primary OS. I have a macOS agent running on macOS 15.1.1 (24B91) with Apple M3 Pro chip. According to the Elastic community discussion, Elastic Defend requires at least Elastic Agent version 8.15.1 to fully support macOS 15.x.

Currently, Security Onion ships with Elastic Fleet version 8.14.3, which prevents upgrading the Elastic Agents to 8.15.1 or higher. As a result, I cannot enable Elastic Defend on my macOS 15.x agents.

Request:

• Please provide a timeline or plan for updating Elastic Fleet to 8.15.1 or above, enabling full support for Elastic Defend on macOS 15.x.
• If a temporary workaround exists, could you please share it?