From e0c23fbae501eb47806bf1f62e19a5cc4f622ea3 Mon Sep 17 00:00:00 2001
From: f-galland <federico.galland@wazuh.com>
Date: Tue, 12 Nov 2024 10:25:20 -0300
Subject: [PATCH] Add agent.host.os and agent.host.risk missing fields

---
 ecs/agent/fields/custom/os.yml   | 6 ++++++
 ecs/agent/fields/custom/risk.yml | 6 ++++++
 2 files changed, 12 insertions(+)
 create mode 100644 ecs/agent/fields/custom/os.yml
 create mode 100644 ecs/agent/fields/custom/risk.yml

diff --git a/ecs/agent/fields/custom/os.yml b/ecs/agent/fields/custom/os.yml
new file mode 100644
index 0000000000000..952c2d6e93a40
--- /dev/null
+++ b/ecs/agent/fields/custom/os.yml
@@ -0,0 +1,6 @@
+---
+- name: os
+  reusable:
+    top_level: false
+    expected:
+      - agent.host
\ No newline at end of file
diff --git a/ecs/agent/fields/custom/risk.yml b/ecs/agent/fields/custom/risk.yml
new file mode 100644
index 0000000000000..1c06213bc6205
--- /dev/null
+++ b/ecs/agent/fields/custom/risk.yml
@@ -0,0 +1,6 @@
+---
+- name: risk
+  reusable:
+    top_level: false
+    expected:
+      - agent.host
\ No newline at end of file