[elasticsearch] Align mappings with metricbeat (#3928)

* align ecs fields * add index_stats property group * remove unused version index_recovery property * align node_stats fields type * turn dynamic off for cluster_stats mappings * bump kibana minimum version * lint * disable dynamic mappings for every data streams * add missing shard property

Author: klacabane

packages/elasticsearch/data_stream/ccr/fields/base-fields.yml

@@ -7,6 +7,3 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
-- name: '@timestamp'
- type: date
- description: Event timestamp.

packages/elasticsearch/data_stream/ccr/fields/ecs.yml

@@ -1,2 +1,19 @@
-- external: ecs
- name: '@timestamp'
+- name: '@timestamp'
+ external: ecs
+- name: ecs.version
+ external: ecs
+- name: event.dataset
+ external: ecs
+- name: event.duration
+ external: ecs
+- name: event.module
+ external: ecs
+- name: host.name
+ external: ecs
+- name: service.address
+ type: keyword
+ description: Service address
+- name: service.type
+ external: ecs
+- name: service.name
+ external: ecs

packages/elasticsearch/data_stream/ccr/manifest.yml

@@ -1,6 +1,10 @@
 type: metrics
 title: Elasticsearch ccr metrics
 release: experimental
+elasticsearch:
+ index_template:
+ mappings:
+ dynamic: false
 streams:
  - input: elasticsearch/metrics
  title: CCR metrics

packages/elasticsearch/data_stream/cluster_stats/fields/base-fields.yml

@@ -7,6 +7,3 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
-- name: '@timestamp'
- type: date
- description: Event timestamp.

packages/elasticsearch/data_stream/cluster_stats/fields/ecs.yml

@@ -1,5 +1,15 @@
+- name: '@timestamp'
+ external: ecs
 - name: ecs.version
  external: ecs
+- name: event.dataset
+ external: ecs
+- name: event.duration
+ external: ecs
+- name: event.module
+ external: ecs
+- name: host.name
+ external: ecs
 - name: service.address
  type: keyword
  description: Service address

packages/elasticsearch/data_stream/cluster_stats/manifest.yml

@@ -1,6 +1,10 @@
 type: metrics
 title: Elasticsearch cluster_stats metrics
 release: experimental
+elasticsearch:
+ index_template:
+ mappings:
+ dynamic: false
 streams:
  - input: elasticsearch/metrics
  title: Cluster stats

packages/elasticsearch/data_stream/enrich/fields/base-fields.yml

@@ -7,6 +7,3 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
-- name: '@timestamp'
- type: date
- description: Event timestamp.

packages/elasticsearch/data_stream/enrich/fields/ecs.yml

@@ -1,5 +1,15 @@
+- name: '@timestamp'
+ external: ecs
 - name: ecs.version
  external: ecs
+- name: event.dataset
+ external: ecs
+- name: event.duration
+ external: ecs
+- name: event.module
+ external: ecs
+- name: host.name
+ external: ecs
 - name: service.address
  type: keyword
  description: Service address

packages/elasticsearch/data_stream/enrich/manifest.yml

@@ -1,6 +1,10 @@
 type: metrics
 title: Elasticsearch enrich metrics
 release: experimental
+elasticsearch:
+ index_template:
+ mappings:
+ dynamic: false
 streams:
  - input: elasticsearch/metrics
  title: Enrich policies metrics

packages/elasticsearch/data_stream/index/fields/base-fields.yml

@@ -7,6 +7,3 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
-- name: '@timestamp'
- type: date
- description: Event timestamp.