New "Elastic Defend" integration not recognized by rules (8.6.2)

[Kelly_Slavens]

We're seeing the same thing. I posted just yesterday on it as well.

Alert rules requiring endpoint integration 8.2.0 when 8.6.1 is installed already

We're seeing an issue in the Rules section. Several rules indicate they require the Endpoint Integration to be installed. Endpoint is installed and deployed on thousands of devices. The link provided points to version 8.2.0 and older version. We are running 8.6.1 with the 8.6.1 endpoint defense integration installed and upgrade. Anyone else seeing the rules indicate it thinks endpoint is not installed and recommends an older 8.2.0 version? [image]