From 50b3381e75516069772bb82c987db223d339e393 Mon Sep 17 00:00:00 2001 From: Paulo Henrique Date: Tue, 20 Sep 2022 14:42:25 -0700 Subject: [PATCH] [8.5][Elastic Defend onboarding][Event Filters] Add process.entry_leader.interactive to the Exception List (#141148) --- .../endpoint/exceptions/exceptionable_endpoint_event_fields.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts b/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts index 38cbee8d70d8f..2c7b9d332072f 100644 --- a/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts +++ b/x-pack/plugins/security_solution/common/endpoint/exceptions/exceptionable_endpoint_event_fields.ts @@ -205,6 +205,7 @@ export const EXCEPTIONABLE_ENDPOINT_EVENT_FIELDS = [ 'process.command_line.caseless', 'process.command_line.text', 'process.entity_id', + 'process.entry_leader.interactive', 'process.executable', 'process.executable.caseless', 'process.executable.text',