Attempting to deploy std. SIEM ML jobs, only to find that they fail as they are meant for std. index naming. Issue is that we're using a custom named indices prefixed for a SIEM PoC.
So question is how may we change the expected indices in the std./default ML jobs' Datafeeds to go look for our custom named indices?
Clone job option is greyed out in Kibana UI.
Can jobs be exported+edited+import or could we alter jobs through API somehow, as edit job directly from UI doesn't seem to enable us to alter indices?