Description
We discovered a limitation when using Remote Elasticsearch output, it doesn't work together with Elastic Defend response actions.
We should document this limitation, it is there since the remote ES output feature was introduced in 8.12.
See linked issue for details.
Resources
https://www.elastic.co/guide/en/fleet/current/remote-elasticsearch-output.html
https://github.com/elastic/ingest-dev/issues/3939
Collaboration
The documentation team will investigate the issue and create the initial content.
Point of contact.
Main contact: @juliaElastic
Stakeholders: @elastic/fleet