set transforms to be unattended (#401)

pzl · web-flow · commit dedd58840fe8 · 2023-08-14T07:56:43.000-04:00
diff --git a/package/endpoint/elasticsearch/transform/metadata_current/transform.yml b/package/endpoint/elasticsearch/transform/metadata_current/transform.yml
@@ -18,3 +18,5 @@ sync:
   time:
     field: event.ingested
     delay: 1s
+settings:
+  unattended: true
diff --git a/package/endpoint/elasticsearch/transform/metadata_united/transform.yml b/package/endpoint/elasticsearch/transform/metadata_united/transform.yml
@@ -21,6 +21,8 @@ pivot:
     agent.id:
       terms:
         field: agent.id
+settings:
+  unattended: true
 description: Merges latest Endpoint and Agent metadata documents
 _meta:
   managed: true
