Add host schema to agent object

ecs/agent/fields/custom/host.yml

@@ -0,0 +1,18 @@
+---
+- name: host
+  title: Wazuh Agents
+  short: Wazuh Inc. custom fields.
+  level: core
+  type: group
+  group: 0
+  reusable:
+    top_level: false
+    expected:
+      - agent
+  fields:
+    - name: os
+      title: Operating system
+      level: custom
+      type: keyword
+      description: >
+        Agent's operating system

ecs/agent/fields/custom/wazuh-agent.yml

@@ -20,8 +20,19 @@
       level: custom
       description: >
         The agent's last login.
-    - name: is_connected
-      type: boolean
+    - name: status
+      type: keyword
+      level: custom
+      description: >
+        Agents' interpreted connection status depending on `agent.last_login`.
+      allowed_values:
+        - name: active
+          description: Active agent status
+        - name: disconnected
+          description: Disconnected agent status
+    - name: host
+      type: group
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.
+      fields: "*"

ecs/agent/fields/subset.yml

@@ -13,10 +13,11 @@ fields:
       groups: {}
       key: {}
       last_login: {}
-      is_connected: {}
-  host:
-    fields:
-      ip: {}
-      os:
-        fields:
-          full: {}
+      status: {}
+      host:
+        fields: "*"
+#        fields: "*"
+#      ip: {}
+#      os:
+#        fields:
+#          full: {}