Hello everyone,
I am using Elastic Agents and managing them through the Fleet server.
I usually add an ID to every document collected by the agent using the following option:
- add_id:
target_field: "event.id"
Can I add this field using the "Custom field" option in the policy settings in the Fleet user interface in the browser, or is this option intended only for static fields (not dynamic ones)? Would I need to define it through the processors instead?
Thank you!