Skip to content

[Fleet] Prevent output changing types from Elasticsearch -> Logstash if a Fleet Server policy uses it #152234

@kpollich

Description

@kpollich

Fleet Server can only output to Elasticsearch. We've made one key change in #148896 wherein a policy containing the Fleet Server integration cannot have its output set to a Logstash output. However, we need to ensure that the same validation applies when an existing output is edited to have its type changed from Elasticsearch to Output.

If a Fleet Server policy exists that's pointing at an output, prevent its type attribute from being changed off of Elasticsearch. Users should be creating a separate output for their agents that output to Logstash, and this will prevent breaking their Fleet environment.

image

image

Metadata

Metadata

Assignees

Labels

Team:FleetTeam label for Observability Data Collection Fleet teambugFixes for quality problems that affect the customer experience

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions