adjust query to include agents without endpoint as unenrolled (elasti…

…c#71715)
kibanamachine · Jul 14, 2020 · 3f95b7a · 3f95b7a
1 parent c16bffc
commit 3f95b7a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/x-pack/plugins/security_solution/server/endpoint/routes/metadata/support/unenroll.ts b/x-pack/plugins/security_solution/server/endpoint/routes/metadata/support/unenroll.ts
@@ -18,7 +18,8 @@ export async function findAllUnenrolledAgentIds(
       page: pageNum,
       perPage: pageSize,
       showInactive: true,
-      kuery: 'fleet-agents.packages:endpoint AND fleet-agents.active:false',
+      kuery:
+        '(fleet-agents.packages : "endpoint" AND fleet-agents.active : false) OR (NOT fleet-agents.packages : "endpoint" AND fleet-agents.active : true)',
     };
   };