MS Exchange integration field mapped incorrectly

Elastic Stack Elastic Agent
1

I just started using the MS Exchange integration and found the message tracking field microsoft > exchange > relatedrecipientaddress is mapped as an IP, but contains email addresses like bugs@cartoons.fun. I think it's a bug, it looks like it should be a keyword.

I don't know whether to just edit the template, of it updates will overwrite any change.

Any thoughts?

1 Like
2

I think you should submit a Github bug issue in the Integrations repo:
Issues · elastic/integrations (github.com)

3

I had looked at github, but couldn't find the right repo. Thanks, I'll do that, but it will be awhile before I can get the doc for all the fields on that form.

1 Like
4

Ah yeah I bet,
Perhaps just blank issue?
New Issue (github.com)

5

Updating before this closes; issue opened [Exchange Server] message tracking field relatedrecipientaddress incorrect mapping · Issue #11335 · elastic/integrations · GitHub