[Suggestion] Elastic Defend Remote Output

[ScottElastic]

What can we change to make the docs better?

What: In the 8.12.0 release notes, support for remote output was added for fleet managed agents, with a caveat around Elastic Defend. This is only noted in the 8.12.0 docs, and not mentioned anywhere else:

"Remote Elasticsearch output does not support Elastic Defend response actions
Details

Support for a remote Elasticsearch output was introduced in this release to enable Elastic Agents to send integration or monitoring data to a remote Elasticsearch cluster. A bug has been found that causes Elastic Defend response actions to stop working when a remote Elasticsearch output is configured for an agent.

Impact

This bug is currently being investigated and is expected to be resolved in an upcoming release."

Why: This still impacts the product in 8.17 and there is no other mention of this limitation in the documentation.

Doc URL

Please include the doc URL and any other related information where applicable:
Doc URL: https://www.elastic.co/guide/en/fleet/8.12/release-notes-8.12.0.html#known-issues-8.12.0
GH Link to feature: https://github.com/elastic/ingest-dev/issues/3257

Which documentation set needs improvement?

ESS only

Software version

This was added in 8.12.0 and the docs should be updated from there onwards.

A note could likely be added to this page: https://www.elastic.co/guide/en/fleet/current/remote-elasticsearch-output.html

[kilfoyle]

Thanks for the suggestion @ScottElastic!

I've opened this PR to add a prominent warning: #1639

Unfortunately, I'm not able to update previous versions of the docs. We have a policy not to do so based on agreement with the Development team, since we explicitly state that those docs aren't updated, and we don't want to mislead anyone. Sorry about that! The change will go into the 8.17 and future versions of the docs.