I have AWS app running
there are some fields for some guardduty events that are visible to the HF search only
also I see events with all fields visible on the search head as expected
what can be the reason ?
the integration is working with S3
Have you installed the TA on the search head?
The remaining 10% may be either absent or not in a format expected by the app.