While working on an Integration for Elastic Agent, I noticed there are some discrepancies between the use of : or - separators for MAC addresses throughout some Elastic products. According to ECS Host Fields, the standard should be -, but as of 8.6.2, Elastic Endpoint is still using : separators for MAC addresses.
While working on an Integration for Elastic Agent, I noticed there are some discrepancies between the use of
:or-separators for MAC addresses throughout some Elastic products. According to ECS Host Fields, the standard should be-, but as of 8.6.2, Elastic Endpoint is still using:separators for MAC addresses.