I have a saved search with three fields: Time, agent.hostname, message. When I download a CSV report or generate it through the reporting interface with that saved search I end up with only the “message” field.
I’m having this problem of saving the fields and the exported CSV is blank only with Wazuh-alerts *
Hi this issue has been fixed by this PR in latest Opensearch 1.0. Please try it out
@Mlopes @opoplawski