This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Configure updates for protection artifacts Configure self-healing rollback for Windows endpoints »
Elastic Docs ›Elastic Security Solution [8.16] ›Configure endpoint protection with Elastic Defend ›Configure an integration policy for Elastic Defend

Turn off diagnostic data for Elastic Defend

edit

Turn off diagnostic data for Elastic Defend

edit

By default, Elastic Defend streams diagnostic data to your cluster, which Elastic uses to tune protection features. You can stop producing this diagnostic data by configuring the advanced settings in the Elastic Defend integration policy.

Kibana also collects usage telemetry, which includes Elastic Defend diagnostic data. You can modify telemetry preferences in Advanced Settings.

  1. To view the Endpoints list, find Endpoints in the navigation menu or by using the global search field.
  2. Locate the endpoint for which you want to disable diagnostic data, then click the integration policy in the Policy column.
  3. Scroll down to the bottom of the policy and click Show advanced settings.

  4. Enter false for these settings:

    • windows.advanced.diagnostic.enabled
    • linux.advanced.diagnostic.enabled
    • mac.advanced.diagnostic.enabled
  5. Click Save.
« Configure updates for protection artifacts Configure self-healing rollback for Windows endpoints »