We are using fleet with Endpoint Security and System integrations, both integrations have default namespace, the result from this is that we gets 2 indicies each day auditbeat-6.8.23-2022.05.13 and auditbeat-6.8.11-2022.05.13. I would like to only have one index created named auditbeat-2022.05.13. I don't understand what I should do to get this to work.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.