diff --git a/docs/en/ingest-management/elastic-agent/configuration/outputs/output-kafka.asciidoc b/docs/en/ingest-management/elastic-agent/configuration/outputs/output-kafka.asciidoc index 0845fec2c..c8c7c605d 100644 --- a/docs/en/ingest-management/elastic-agent/configuration/outputs/output-kafka.asciidoc +++ b/docs/en/ingest-management/elastic-agent/configuration/outputs/output-kafka.asciidoc @@ -46,11 +46,13 @@ outputs: == Kafka output and using {ls} to index data to {es} -If you are considering using {ls} to ship the data from `kafka` to {es}, please -be aware Elastic is not currently testing this kind of setup. +If you are considering using {ls} to ship the data from `kafka` to {es}, please be aware the +structure of the documents sent from {agent} to `kafka` must not be modified by {ls}. +We suggest disabling `ecs_compatibility` on both the `kafka` input and the `json` codec in order +to make sure the input doesn't edit the fields and their contents. -The structure of the documents sent from {agent} to `kafka` must not be modified by {ls}. -We suggest disabling `ecs_compatibility` on both the `kafka` input and the `json` codec. +The data streams set up by the integrations expect to receive events having the same structure and +field names as they were sent directly from an {agent}. Refer to <> documentation for more details. diff --git a/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc b/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc index ea6f46fc4..9531d372e 100644 --- a/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc +++ b/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc @@ -8,7 +8,12 @@ Specify these settings to send data over a secure connection to Kafka. In the {f == Kafka output and using {ls} to index data to {es} If you are considering using {ls} to ship the data from `kafka` to {es}, please -be aware Elastic is not currently testing this kind of setup. +be aware the structure of the documents sent from {agent} to `kafka` must not be modified by {ls}. +We suggest disabling `ecs_compatibility` on both the `kafka` input and the `json` codec in order +to make sure the input doesn't edit the fields and their contents. + +The data streams setup by the integrations expect to receive events having the same structure and +field names as they were sent directly from an {agent}. The structure of the documents sent from {agent} to `kafka` must not be modified by {ls}. We suggest disabling `ecs_compatibility` on both the `kafka` input and the `json` codec.