Is there a hidden configuration setting (or plans to add a configuration setting) to change the dataset name in the CEF integration, like most other integrations? We're stuck with "logs-cef.log-default" for our data stream on anything that is brought in under CEF.
Don't think this is planned, basically everything on an integration like templates and ingest pipelines are tied to the dataset name.
What you can change is just the namespace default
to another thing, but everything else is tied to the integration.
There are many other integrations, for example, Custom API, Custom TCP, and Custom UDP that all allow the dataset name to be changed. The CEF integration seems to be an outlier.