From adddcb06a93170bccab5ed714306172af590a72b Mon Sep 17 00:00:00 2001 From: Kyle Pollich Date: Wed, 26 Feb 2025 08:27:32 -0500 Subject: [PATCH] [Fleet] Disable logfile input for agentless integrations (#212455) ## Summary Closes https://github.com/elastic/kibana/issues/212448 cc @qcorporation --------- Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com> (cherry picked from commit 8972d5b97338792611cf1c715d6d6da3f107a004) # Conflicts: # x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts --- .../shared/fleet/common/constants/agentless.ts | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts b/x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts index 3b231762ec7d8..0c7e09efc352e 100644 --- a/x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts +++ b/x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts @@ -19,4 +19,14 @@ export const AGENTLESS_GLOBAL_TAG_NAME_TEAM = 'team'; export const AGENTLESS_ALLOWED_OUTPUT_TYPES = [outputType.Elasticsearch]; // Input types to disable for agentless integrations -export const AGENTLESS_DISABLED_INPUTS = ['tcp', 'udp', 'filestream', 'http_endpoint', 'winlog']; +export const AGENTLESS_DISABLED_INPUTS = [ + 'tcp', + 'udp', + 'filestream', + 'http_endpoint', + 'winlog', + 'o365audit', + 'gcp-pubsub', + 'azure-eventhub', + 'logfile', +];