Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing agent.name field #298

Open
rlapond opened this issue Sep 15, 2022 · 1 comment
Open

Missing agent.name field #298

rlapond opened this issue Sep 15, 2022 · 1 comment

Comments

@rlapond
Copy link

rlapond commented Sep 15, 2022

Hi,

The endpoint datastreams are missing the agent.name field in the documents. Normally any document ingested by Elastic Agent using an Integration has agent.name available.

For some datastreams agent.name already exists in the mapping:
https://github.com/elastic/endpoint-package/blob/master/package/endpoint/data_stream/process/fields/fields.yml#L50

@ferullo
Copy link
Contributor

ferullo commented Sep 20, 2022

@pierrehilbert Endpoint does not know the value to use for agent.name. For fields like this, to make sure Endpoint stays in sync with Agent/Beats, Agent has populated a field like fleet.agent.* in the config it sends to Endpoint. Can we do that for fleet.agent.name too?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants