Trying to add geo data based on the winlog.event_data.destinationIp field. I'm trying to use the custom ingest pipeline in fleets / integration. Testing the pipeline with test data seems to work, but the geo fields in kibana discovery for winlog events are not their. Is there a special way to apply the custom pipeline for fleet / integration?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.