Update dynamic template for url.original and url.full (import_mappings setting)

[mrodm]

Relates #2285

At least, system tests are failing in cef package due to a type set in the mapping for url.original different from ECS.

That mapping comes from the dynamic templates created with the import_mappings setting.

This PR tries to solve this error in cef package by updating the ECS mappings that elastic-package adds automatically via the import_mappings setting.

Currently, the embedded dynamic template created by elastic-package when import_mappings is enabled does not take any effect (it does not match path_match):

 { "_embedded_ecs-url_original_to_multifield": { "path_match": "*.url.original", "mapping": { "fields": { "text": { "type": "match_only_text" } }, "type": "wildcard" } } },

The goal of this PR is to update that dynamic template to be as similar as possible to the ecs@mappings component template (without unmatch_mapping_type parameter since it is not supported in 8.6.x):

 { "ecs_path_match_wildcard_and_match_only_text": { "path_match": [ "*.body.content", "*url.full", "*url.original" ], "unmatch_mapping_type": "object", "mapping": { "fields": { "text": { "type": "match_only_text" } }, "type": "wildcard" } } },

This PR has been tested:

• Test packages of integrations repository with current validation based on fields
  • https://buildkite.com/elastic/integrations/builds/20364
• Test packages of integrations repository with the validation based on mappings (including latest changes in Validate fields based on their mappings and the dynamic templates set #2285)
  • https://buildkite.com/elastic/integrations/builds/20366

[mrodm]

test integrations

[elastic-vault-github-plugin-prod]

Created or updated PR in integrations repository to test this version. Check elastic/integrations#12337

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: e785a1a

History

• 💚 Build #4637 succeeded 6c3710c
• 💚 Build #4628 succeeded 8aa72e9

cc @mrodm

[mrodm]

Updated dynamic templates to be as similar as possible to the ecs@mappings component template:
https://github.com/elastic/elasticsearch/blob/09df99393193b2c53d92899662a8b8b3c55b45cd/x-pack/plugin/core/template-resources/src/main/resources/ecs%40mappings.json#L54-L69

Packages that rely on these dynamic templates should publish a new version in order to get the changes.