Currently we don't have the clear understanding which fields are used by the security analysts for performing filtering and data searching for the Alerts.
This telemetry data could help us to keep the alert index fields to fit the user needs without the mappings explosion.
Currently we don't have the clear understanding which fields are used by the security analysts for performing filtering and data searching for the Alerts. This telemetry data could help us to keep the alert index fields to fit the user needs without the mappings explosion.