Open
Description
Pipeline failure is:
Processor 'rename' with tag '' failed with message 'cannot set [id] with parent object of type [java.lang.String] as part of path [organization.id]'
Where the field causing the failure is organization
below:
"division": "engineering",
"organization": "security",
"team": "security-service-integrations",
Agentless policies add the division, organization, and team as global data tags:
Global data tags get injected via add_fields processors when the policy is created:
Until this will be fixed in elastic/kibana#221312, a workaround should be applied in the current agentless integrations simialr to #14056
Metadata
Metadata
Assignees
Labels
ArmisAWSBeyondTrust PRAClaroty xDomeSecurity Posture ManagementCrowdStrikeElasticsearch Service Billing (Community supported)Google Security Command CenterGoogle SecOpsGoogle WorkspaceMicrosoft M365 DefenderMicrosoft Defender for EndpointMicrosoft SentinelMicrosoft Office 365OktaPalo Alto Cortex XDRPalo Alto Prisma CloudProofpoint ITMQualys VMDRSentinelOneSplunkSublime SecurityTenable Vulnerability ManagementAbuseCHRecorded FutureThreatQuotient (Partner supported)Vectra RUXWizZscaler Internet AccessSecurity Service Integrations team [elastic/security-service-integrations]Agentless related issues