From 37eda8ea97684116e6fe3ce4972d965e0630dac1 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Wed, 15 Jan 2025 16:17:11 -0500 Subject: [PATCH] Update agent-policies.asciidoc (#1527) (#1624) * Update agent-policies.asciidoc Defend Integration ignores the Custom Fields added in Agent Policy UI as it uses the advanced settings below in the Elastic Defend Integration configuration: - `windows.advanced.document_enrichment.fields` - `mac.advanced.document_enrichment.fields` - `linux.advanced.document_enrichment.fields` * Update docs/en/ingest-management/agent-policies.asciidoc Accepting the suggestions! Thanks! Co-authored-by: David Kilfoyle <41695641+kilfoyle@users.noreply.github.com> --------- Co-authored-by: David Kilfoyle <41695641+kilfoyle@users.noreply.github.com> (cherry picked from commit 930b49002d03b8d234071314082768d3010064c6) Co-authored-by: Insuk (Chris) Cho (cherry picked from commit cd2145052fab43554ab66f7ec36bf589e3a867fb) --- docs/en/ingest-management/agent-policies.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/en/ingest-management/agent-policies.asciidoc b/docs/en/ingest-management/agent-policies.asciidoc index f744f0449..28b311ceb 100644 --- a/docs/en/ingest-management/agent-policies.asciidoc +++ b/docs/en/ingest-management/agent-policies.asciidoc @@ -305,6 +305,7 @@ Note that adding custom tags is not supported for a small set of inputs: * `cloud-defend` * `fleet-server` * `pf-elastic-collector`, `pf-elastic-symbolizer`, and `pf-host-agent` +* `endpoint` inputs. Instead, use the advanced settings (`*.advanced.document_enrichment.fields`) of the {elastic-defend} Integration. [discrete]