diff --git a/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts b/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts
index 38cbee8d70d8f..2c7b9d332072f 100644
--- a/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts
+++ b/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts
@@ -205,6 +205,7 @@ export const EXCEPTIONABLE_ENDPOINT_EVENT_FIELDS = [
   'process.command_line.caseless',
   'process.command_line.text',
   'process.entity_id',
+  'process.entry_leader.interactive',
   'process.executable',
   'process.executable.caseless',
   'process.executable.text',