We're seeing an issue in the Rules section. Several rules indicate they require the Endpoint Integration to be installed. Endpoint is installed and deployed on thousands of devices. The link provided points to version 8.2.0 and older version. We are running 8.6.1 with the 8.6.1 endpoint defense in…

wsouza (Wagner Souza) February 24, 2023, 3:04pm 2

Hi @Kelly_Slavens There is an issue on github that mentions this issue which will be fixed in Elastic 8.6.2 / 8.7. Follow the link

Topic		Replies	Views
New "Elastic Defend" integration not recognized by rules (8.6.2) Endpoint Security	3	811	March 24, 2023
Integration Endpoint Security	8	1111	March 31, 2023
All Rules are showing Failed Elastic Security	29	5864	March 25, 2021
Endpoint Security Not Working Endpoint Security	4	1295	June 29, 2022
Elastic Endpoint Security with Elastic Agent Endpoint Security	16	3234	November 10, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Alert rules requiring endpoint integration 8.2.0 when 8.6.1 is installed already

Related topics