diff --git a/packages/cyberarkpas/_dev/deploy/docker/docker-compose.yml b/packages/cyberarkpas/_dev/deploy/docker/docker-compose.yml
index d4c23d6050a..ee16817f9be 100644
--- a/packages/cyberarkpas/_dev/deploy/docker/docker-compose.yml
+++ b/packages/cyberarkpas/_dev/deploy/docker/docker-compose.yml
@@ -7,17 +7,17 @@ services:
       - ${SERVICE_LOGS_DIR}:/var/log
     command: /bin/sh -c "cp /sample_logs/audit/* /var/log/"
   cyberarkpas-audit-udp:
-    image: docker.elastic.co/observability/stream:v0.15.0
+    image: docker.elastic.co/observability/stream:v0.17.1
     volumes:
       - ./sample_logs:/sample_logs:ro
     command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:9999 -p=udp /sample_logs/audit/*.log
   cyberarkpas-audit-tcp:
-    image: docker.elastic.co/observability/stream:v0.15.0
+    image: docker.elastic.co/observability/stream:v0.17.1
     volumes:
       - ./sample_logs:/sample_logs:ro
     command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:9999 -p=tcp /sample_logs/audit/*.log
   cyberarkpas-audit-tls:
-    image: docker.elastic.co/observability/stream:v0.15.0
+    image: docker.elastic.co/observability/stream:v0.17.1
     volumes:
       - ./sample_logs:/sample_logs:ro
     command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:9999 -p=tls --insecure /sample_logs/audit/*.log