Elastic Fleet - Add GeoData to winlog through Ingest Pipeline

Trying to add geo data based on the winlog.event_data.destinationIp field. I'm trying to use the custom ingest pipeline in fleets / integration. Testing the pipeline with test data seems to work, but the geo fields in kibana discovery for winlog events are not their. Is there a special way to apply the custom pipeline for fleet / integration?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.