Missing "Custom Fields" in alerts generated from "endpoint" indexes

The Fleet settings apply to a feature called "processors" which only Beats have. Endpoint doesn't have support for it, but it also has a means to inject simple key-value pairs into documents, see advanced option
[platform].advanced.document_enrichment.fields