Elastic deleted documents

I have not used this plugin in a long while, but it seems you may need to specify a target or check whether ECS is enabled and the fingerprint instead is written to the "[event][hash]" field.