[Fleet] Add o365audit, gcp-pubsup, and azure-eventhub as disallowed agentles inputs (#211262)

Closes https://github.com/elastic/kibana/issues/211092

## Summary

Disallows unsupported input types for security integrations adopting
agentless.

### Checklist

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

cc @jamiehynds @qcorporation @kcreddy
This commit is contained in:
Kyle Pollich 2025-02-20 13:51:13 -05:00 committed by GitHub
parent c4826bdfbf
commit 46812bc00a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -19,4 +19,13 @@ export const AGENTLESS_GLOBAL_TAG_NAME_TEAM = 'team';
export const AGENTLESS_ALLOWED_OUTPUT_TYPES = [outputType.Elasticsearch];
// Input types to disable for agentless integrations
export const AGENTLESS_DISABLED_INPUTS = ['tcp', 'udp', 'filestream', 'http_endpoint', 'winlog'];
export const AGENTLESS_DISABLED_INPUTS = [
'tcp',
'udp',
'filestream',
'http_endpoint',
'winlog',
'o365audit',
'gcp-pubsub',
'azure-eventhub',
];