Skip to content

[DOCS] Add ECS-compatible disclaimer to additional docs #346

@jmikell821

Description

@jmikell821

We've been experiencing a number of user issues (via discuss and SDH) that involve problems they're having when trying to use non ECS-compatible data/data sources with the Security App. I think we need add a more explicit notice of this requirement in our docs.

Today, we have a clear message in the Advanced Settings page. "Important: Elastic Security requires ECS-compliant data. If you use third-party data collectors to ship data to Elasticsearch, the data must be mapped to ECS. Elastic Security ECS field reference lists ECS fields used in Elastic Security."

Can we repeat this message in a prominent location on one or more or all of these more prominent pages?

https://elastic.slack.com/archives/C013W8WME2Z/p1604498907006900

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions