From 4efabacd4ef59128582089bff1f594658dbf40ed Mon Sep 17 00:00:00 2001
From: "Joey F. Poon" <joey.poon@elastic.co>
Date: Wed, 27 Oct 2021 17:38:53 -0500
Subject: [PATCH] [Security Solution] fix endpoint being visible after
 unenrolling agent (#116372)

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
---
 x-pack/plugins/fleet/server/services/agents/helpers.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/x-pack/plugins/fleet/server/services/agents/helpers.ts b/x-pack/plugins/fleet/server/services/agents/helpers.ts
index 609d5ba6c83a..a4a7803d35e2 100644
--- a/x-pack/plugins/fleet/server/services/agents/helpers.ts
+++ b/x-pack/plugins/fleet/server/services/agents/helpers.ts
@@ -42,5 +42,9 @@ export function agentSOAttributesToFleetServerAgentDoc(
     doc.policy_revision_idx = policyRevison;
   }
 
+  if (!doc.updated_at) {
+    doc.updated_at = new Date().toISOString();
+  }
+
   return doc;
 }