From 3b458ff156164350dd8d72e444c54be12f4610be Mon Sep 17 00:00:00 2001
From: oatkiller <robert.austin@elastic.co>
Date: Mon, 6 Jul 2020 09:26:18 -0400
Subject: [PATCH] [Security Solution] Change default index pattern

Add `logs-*` to the Security Solution default index pattern. This should
allow the app to recognize events from the Elastic Endpoint.
---
 x-pack/plugins/security_solution/common/constants.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/x-pack/plugins/security_solution/common/constants.ts b/x-pack/plugins/security_solution/common/constants.ts
index f547bc8185d02..d1c9dd76e4721 100644
--- a/x-pack/plugins/security_solution/common/constants.ts
+++ b/x-pack/plugins/security_solution/common/constants.ts
@@ -51,6 +51,7 @@ export const DEFAULT_INDEX_PATTERN = [
   'filebeat-*',
   'packetbeat-*',
   'winlogbeat-*',
+  'logs-*',
 ];
 
 /** This Kibana Advanced Setting enables the `Security news` feed widget */