diff --git a/x-pack/plugins/elastic_assistant/common/anonymization/index.ts b/x-pack/plugins/elastic_assistant/common/anonymization/index.ts
index b9d9718410a9..ebef2dff8bde 100644
--- a/x-pack/plugins/elastic_assistant/common/anonymization/index.ts
+++ b/x-pack/plugins/elastic_assistant/common/anonymization/index.ts
@@ -107,6 +107,7 @@ export const DEFAULT_ALLOW = [
   'user.name',
   'user.risk.calculated_level',
   'user.risk.calculated_score_norm',
+  'user.target.name',
 ];
 
 /** By default, these fields will be anonymized */
@@ -114,6 +115,7 @@ export const DEFAULT_ALLOW_REPLACEMENT = [
   'host.ip', // not a default allow field, but anonymized by default
   'host.name',
   'user.name',
+  'user.target.name',
 ];
 
 export const getDefaultAnonymizationFields = (spaceId: string) => {