Cant' import Machine Learning Anomaly Jobs - I have Enterprise Cloud Subscription

[opiedrah (Elasticsearch Certified Professional)]

Thank you @richcollier I'll mark it as resolved and hope for the best for 7.11 or 7.12. Do you have any insights on this, or know someone that does?

Filebeat o365 module - Parsing o365.audit.data field

I think that using a script processor for this fields is not a bad idea. You can give a try to JSON processor (ingest node): https://www.elastic.co/guide/en/elasticsearch/reference/current/json-processor.html

Thanks again