Skip to content

wiz: Add transform requirement for standalone agent #14394

Open
@kcreddy

Description

@kcreddy

Transforms inside Wiz integration requires event.ingested field. .fleet_final_pipeline-1 pipeline adds event.ingested for all Fleet integrations.
But when using standalone Elastic Agent, since this pipeline is not executed. Users must add event.ingested preferably using @custom pipeline.

Document this requirement in README.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Integration:wizWizTeam:Sit-CrestCrest developers on the Security Integrations team [elastic/sit-crest-contractors]documentationImprovements or additions to documentation. Applied to PRs that modify *.md files.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions