Elatic fleet custom fields to Elastic Defend

Elastic Security Endpoint Security
1

Hi,

I have the issue. For my elastic fleet policy in settings i seted two custom fields.
For all other integrations documents these fields appearing during ingest.
But only for elastic defend these two custom fields are not ingesting. Am I missing something ?

2

Hi @GyciakasGh0st . You’re correct. Defend does not support custom fields like other integrations. [linux,mac,windows].advanced.document_enrichment.fields which is described here is the closest analog.

1 Like