From 6389c2a8a5d1848a7135cceaec988c50a669a2ff Mon Sep 17 00:00:00 2001 From: "Insuk (Chris) Cho" Date: Wed, 15 Jan 2025 12:49:55 -0800 Subject: [PATCH] Update agent-policies.asciidoc (#1527) * Update agent-policies.asciidoc Defend Integration ignores the Custom Fields added in Agent Policy UI as it uses the advanced settings below in the Elastic Defend Integration configuration: - `windows.advanced.document_enrichment.fields` - `mac.advanced.document_enrichment.fields` - `linux.advanced.document_enrichment.fields` * Update docs/en/ingest-management/agent-policies.asciidoc Accepting the suggestions! Thanks! Co-authored-by: David Kilfoyle <41695641+kilfoyle@users.noreply.github.com> --------- Co-authored-by: David Kilfoyle <41695641+kilfoyle@users.noreply.github.com> (cherry picked from commit 930b49002d03b8d234071314082768d3010064c6) --- docs/en/ingest-management/agent-policies.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/en/ingest-management/agent-policies.asciidoc b/docs/en/ingest-management/agent-policies.asciidoc index f744f0449..28b311ceb 100644 --- a/docs/en/ingest-management/agent-policies.asciidoc +++ b/docs/en/ingest-management/agent-policies.asciidoc @@ -305,6 +305,7 @@ Note that adding custom tags is not supported for a small set of inputs: * `cloud-defend` * `fleet-server` * `pf-elastic-collector`, `pf-elastic-symbolizer`, and `pf-host-agent` +* `endpoint` inputs. Instead, use the advanced settings (`*.advanced.document_enrichment.fields`) of the {elastic-defend} Integration. [discrete]