elastic / beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash
https://www.elastic.co/products/beats
Other
12.13k stars 4.91k forks source link

[Doc] Two fields.yaml files are melted into one section in the Microsoft fields doc #37465

Open sakurai-youhei opened 8 months ago

sakurai-youhei commented 8 months ago

Issue: network.interface.name and rsa.* fields are listed under the microsoft.defender_atp section on the Microsoft fields doc, but they are supposed to be independent because they originate in different fields.yml.

image

  1. Open the Microsoft fields doc.
  2. Scroll down to the network.interface.name.
  3. No separation exists between microsoft.defender_atp.* and network.interface.name.
elasticmachine commented 7 months ago

Pinging @elastic/sec-windows-platform (Team:Security-Windows Platform)