Add custom fields to index templates

ecs/agent/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/alerts/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-fim/fields/subset.yml

@@ -8,6 +8,8 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   file:
     fields:
       attributes: {}

ecs/states-inventory-hardware/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-hardware/fields/custom/host.yml

@@ -1,6 +1,6 @@
 ---
 - name: host
   reusable:
-    top_level: false
+    top_level: true
     expected:
-      - agent
+      - { at: agent, as: host }

ecs/states-inventory-hardware/fields/subset.yml

@@ -9,20 +9,23 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   observer:
     fields:
       serial_number: {}
   host:
-    fields:
-      memory:
-        fields:
-          total: {}
-          free: {}
-          used:
-            fields:
-              percentage: {}
-      cpu:
-        fields:
-          name: {}
-          cores: {}
-          speed: {}
+    fields: "*"
+#    fields:
+#      memory:
+#        fields:
+#          total: {}
+#          free: {}
+#          used:
+#            fields:
+#              percentage: {}
+#      cpu:
+#        fields:
+#          name: {}
+#          cores: {}
+#          speed: {}

ecs/states-inventory-hotfixes/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-hotfixes/fields/subset.yml

@@ -9,8 +9,10 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   package:
     fields:
       hotfix:
         fields:
-          name: {}
+          name: {}

ecs/states-inventory-networks/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-networks/fields/subset.yml

@@ -9,6 +9,8 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   host:
     fields:
       ip: {}

ecs/states-inventory-packages/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-packages/fields/subset.yml

@@ -9,6 +9,8 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   package:
     fields:
       architecture: ""

ecs/states-inventory-ports/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-ports/fields/subset.yml

@@ -9,6 +9,8 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   destination:
     fields:
       ip: {}

ecs/states-inventory-processes/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-processes/fields/subset.yml

@@ -8,7 +8,9 @@ fields:
   agent:
     fields:
       id: {}
-      groups: {}
+      groups: {} 
+      host:
+        fields: "*"
   process:
     fields:
       pid: {}

ecs/states-inventory-system/fields/custom/agent.yml

@@ -19,15 +19,9 @@
       type: date
       level: custom
       description: >
-<<<<<<< HEAD:ecs/agent/fields/custom/wazuh-agent.yml
         The agent's last login.
     - name: status
       type: keyword
-=======
-        The last time the agent logged in.
-    - name: is_connected
-      type: boolean
->>>>>>> master:ecs/agent/fields/custom/agent.yml
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.

ecs/states-inventory-system/fields/subset.yml

@@ -9,6 +9,8 @@ fields:
     fields:
       id: {}
       groups: {}
+      host:
+        fields: "*"
   host:
     fields:
       architecture: {}

ecs/states-vulnerabilities/fields/custom/agent.yml

@@ -10,3 +10,23 @@
       level: custom
       description: >
         List of groups the agent belong to.
+    - name: key
+      type: keyword
+      level: custom
+      description: >
+        The registration key of the agent.
+    - name: last_login
+      type: date
+      level: custom
+      description: >
+        The agent's last login.
+    - name: status
+      type: keyword
+      level: custom
+      description: >
+        Agents' interpreted connection status depending on `agent.last_login`.
+      allowed_values:
+        - name: active
+          description: Active agent status
+        - name: disconnected
+          description: Disconnected agent status