Adding default templates for Metricbeat ECS data (#81744)

This PR adds four new templates that are automatically installed from the Monitoring plugin.

In 8.x, Metricbeat will be writing its data in ECS compliant format, even when used with xpack 
mode enabled (stack monitoring). In order to continue to support the legacy data format, new 
mappings have been created with the new ECS fields for indexing data, and alias fields for the 
legacy format which point to the corresponding ECS fields.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: Mat Schaffer <mat@schaffer.me>

docs/reference/monitoring/indices.asciidoc

@@ -15,7 +15,7 @@ GET /_template/.monitoring-*
 By default, the template configures one shard and one replica for the
 monitoring indices. To override the default settings, add your own template:
 
-. Set the `template` pattern to `.monitoring-*`.
+. Set the `template` patterns to match existing `.monitoring-{product}-7-*` indices.
 . Set the template `order` to `1`. This ensures your template is
 applied after the default template, which has an order of 0.
 . Specify the `number_of_shards` and/or `number_of_replicas` in the `settings`
@@ -28,7 +28,7 @@ and the number of replicas to two.
 ----------------------------------
 PUT /_template/custom_monitoring
 {
-  "index_patterns": ".monitoring-*",
+  "index_patterns": [".monitoring-beats-7-*", ".monitoring-es-7-*", ".monitoring-kibana-7-*", ".monitoring-logstash-7-*"],
   "order": 1,
   "settings": {
     "number_of_shards": 5,

x-pack/plugin/core/src/main/resources/monitoring-beats-mb.json

@@ -0,0 +1,2198 @@
+{
+  "index_patterns": [".monitoring-beats-${xpack.stack.monitoring.template.version}-*"],
+  "version": ${xpack.stack.monitoring.template.release.version},
+  "template": {
+    "mappings": {
+      "properties": {
+        "beat": {
+          "properties": {
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "state": {
+              "properties": {
+                "beat": {
+                  "properties": {
+                    "host": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "type": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "uuid": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "version": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "cluster": {
+                  "properties": {
+                    "uuid": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "host": {
+                  "properties": {
+                    "containerized": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "os": {
+                      "properties": {
+                        "kernel": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "name": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "platform": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "version": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        }
+                      }
+                    }
+                  }
+                },
+                "input": {
+                  "properties": {
+                    "count": {
+                      "type": "long"
+                    },
+                    "names": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "management": {
+                  "properties": {
+                    "enabled": {
+                      "type": "boolean"
+                    }
+                  }
+                },
+                "module": {
+                  "properties": {
+                    "count": {
+                      "type": "long"
+                    },
+                    "names": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "output": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "queue": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "service": {
+                  "properties": {
+                    "id": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "version": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                }
+              }
+            },
+            "stats": {
+              "properties": {
+                "apm_server": {
+                  "properties": {
+                    "acm": {
+                      "properties": {
+                        "request": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "response": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            },
+                            "errors": {
+                              "properties": {
+                                "closed": {
+                                  "type": "long"
+                                },
+                                "count": {
+                                  "type": "long"
+                                },
+                                "decode": {
+                                  "type": "long"
+                                },
+                                "forbidden": {
+                                  "type": "long"
+                                },
+                                "internal": {
+                                  "type": "long"
+                                },
+                                "invalidquery": {
+                                  "type": "long"
+                                },
+                                "method": {
+                                  "type": "long"
+                                },
+                                "notfound": {
+                                  "type": "long"
+                                },
+                                "queue": {
+                                  "type": "long"
+                                },
+                                "ratelimit": {
+                                  "type": "long"
+                                },
+                                "toolarge": {
+                                  "type": "long"
+                                },
+                                "unauthorized": {
+                                  "type": "long"
+                                },
+                                "unavailable": {
+                                  "type": "long"
+                                },
+                                "validate": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "request": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "unset": {
+                              "type": "long"
+                            },
+                            "valid": {
+                              "properties": {
+                                "accepted": {
+                                  "type": "long"
+                                },
+                                "count": {
+                                  "type": "long"
+                                },
+                                "notmodified": {
+                                  "type": "long"
+                                },
+                                "ok": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "decoder": {
+                      "properties": {
+                        "deflate": {
+                          "properties": {
+                            "content-length": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "gzip": {
+                          "properties": {
+                            "content-length": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "missing-content-length": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "reader": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            },
+                            "size": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "uncompressed": {
+                          "properties": {
+                            "content-length": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "processor": {
+                      "properties": {
+                        "error": {
+                          "properties": {
+                            "decoding": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "frames": {
+                              "type": "long"
+                            },
+                            "spans": {
+                              "type": "long"
+                            },
+                            "stacktraces": {
+                              "type": "long"
+                            },
+                            "transformations": {
+                              "type": "long"
+                            },
+                            "validation": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "metric": {
+                          "properties": {
+                            "decoding": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "transformations": {
+                              "type": "long"
+                            },
+                            "validation": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "sourcemap": {
+                          "properties": {
+                            "counter": {
+                              "type": "long"
+                            },
+                            "decoding": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "validation": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "span": {
+                          "properties": {
+                            "transformations": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "transaction": {
+                          "properties": {
+                            "decoding": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "frames": {
+                              "type": "long"
+                            },
+                            "spans": {
+                              "type": "long"
+                            },
+                            "stacktraces": {
+                              "type": "long"
+                            },
+                            "transactions": {
+                              "type": "long"
+                            },
+                            "transformations": {
+                              "type": "long"
+                            },
+                            "validation": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "errors": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "server": {
+                      "properties": {
+                        "concurrent": {
+                          "properties": {
+                            "wait": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "request": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "response": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            },
+                            "errors": {
+                              "properties": {
+                                "closed": {
+                                  "type": "long"
+                                },
+                                "concurrency": {
+                                  "type": "long"
+                                },
+                                "count": {
+                                  "type": "long"
+                                },
+                                "decode": {
+                                  "type": "long"
+                                },
+                                "forbidden": {
+                                  "type": "long"
+                                },
+                                "internal": {
+                                  "type": "long"
+                                },
+                                "method": {
+                                  "type": "long"
+                                },
+                                "queue": {
+                                  "type": "long"
+                                },
+                                "ratelimit": {
+                                  "type": "long"
+                                },
+                                "toolarge": {
+                                  "type": "long"
+                                },
+                                "unauthorized": {
+                                  "type": "long"
+                                },
+                                "validate": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "valid": {
+                              "properties": {
+                                "accepted": {
+                                  "type": "long"
+                                },
+                                "count": {
+                                  "type": "long"
+                                },
+                                "ok": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "beat": {
+                  "properties": {
+                    "host": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "type": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "uuid": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "version": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "cgroup": {
+                  "properties": {
+                    "cpu": {
+                      "properties": {
+                        "cfs": {
+                          "properties": {
+                            "period": {
+                              "properties": {
+                                "us": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "quota": {
+                              "properties": {
+                                "us": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "id": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "stats": {
+                          "properties": {
+                            "periods": {
+                              "type": "long"
+                            },
+                            "throttled": {
+                              "properties": {
+                                "ns": {
+                                  "type": "long"
+                                },
+                                "periods": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "cpuacct": {
+                      "properties": {
+                        "id": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "total": {
+                          "properties": {
+                            "ns": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "memory": {
+                      "properties": {
+                        "id": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "mem": {
+                          "properties": {
+                            "limit": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "usage": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "cpu": {
+                  "properties": {
+                    "system": {
+                      "properties": {
+                        "ticks": {
+                          "type": "long"
+                        },
+                        "time": {
+                          "properties": {
+                            "ms": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "total": {
+                      "properties": {
+                        "ticks": {
+                          "type": "long"
+                        },
+                        "time": {
+                          "properties": {
+                            "ms": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "value": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "user": {
+                      "properties": {
+                        "ticks": {
+                          "type": "long"
+                        },
+                        "time": {
+                          "properties": {
+                            "ms": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "handles": {
+                  "properties": {
+                    "limit": {
+                      "properties": {
+                        "hard": {
+                          "type": "long"
+                        },
+                        "soft": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "open": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "info": {
+                  "properties": {
+                    "ephemeral_id": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "host": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "type": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "uptime": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "uuid": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    },
+                    "version": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "libbeat": {
+                  "properties": {
+                    "config": {
+                      "properties": {
+                        "running": {
+                          "type": "short"
+                        },
+                        "starts": {
+                          "type": "short"
+                        },
+                        "stops": {
+                          "type": "short"
+                        }
+                      }
+                    },
+                    "output": {
+                      "properties": {
+                        "events": {
+                          "properties": {
+                            "acked": {
+                              "type": "long"
+                            },
+                            "active": {
+                              "type": "long"
+                            },
+                            "batches": {
+                              "type": "long"
+                            },
+                            "dropped": {
+                              "type": "long"
+                            },
+                            "duplicates": {
+                              "type": "long"
+                            },
+                            "failed": {
+                              "type": "long"
+                            },
+                            "toomany": {
+                              "type": "long"
+                            },
+                            "total": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "read": {
+                          "properties": {
+                            "bytes": {
+                              "type": "long"
+                            },
+                            "errors": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "type": {
+                          "type": "keyword",
+                          "ignore_above": 1024
+                        },
+                        "write": {
+                          "properties": {
+                            "bytes": {
+                              "type": "long"
+                            },
+                            "errors": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "pipeline": {
+                      "properties": {
+                        "clients": {
+                          "type": "long"
+                        },
+                        "events": {
+                          "properties": {
+                            "active": {
+                              "type": "long"
+                            },
+                            "dropped": {
+                              "type": "long"
+                            },
+                            "failed": {
+                              "type": "long"
+                            },
+                            "filtered": {
+                              "type": "long"
+                            },
+                            "published": {
+                              "type": "long"
+                            },
+                            "retry": {
+                              "type": "long"
+                            },
+                            "total": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "queue": {
+                          "properties": {
+                            "acked": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "memstats": {
+                  "properties": {
+                    "gc_next": {
+                      "type": "long"
+                    },
+                    "memory": {
+                      "properties": {
+                        "alloc": {
+                          "type": "long"
+                        },
+                        "total": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "rss": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "runtime": {
+                  "properties": {
+                    "goroutines": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "system": {
+                  "properties": {
+                    "cpu": {
+                      "properties": {
+                        "cores": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "load": {
+                      "properties": {
+                        "1": {
+                          "type": "double"
+                        },
+                        "5": {
+                          "type": "double"
+                        },
+                        "15": {
+                          "type": "double"
+                        },
+                        "norm": {
+                          "properties": {
+                            "1": {
+                              "type": "double"
+                            },
+                            "5": {
+                              "type": "double"
+                            },
+                            "15": {
+                              "type": "double"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "uptime": {
+                  "properties": {
+                    "ms": {
+                      "type": "long"
+                    }
+                  }
+                }
+              }
+            },
+            "type": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "beats_state": {
+          "properties": {
+            "beat": {
+              "properties": {
+                "host": {
+                  "type": "alias",
+                  "path": "beat.state.beat.host"
+                },
+                "name": {
+                  "type": "alias",
+                  "path": "beat.state.beat.name"
+                },
+                "type": {
+                  "type": "alias",
+                  "path": "beat.state.beat.type"
+                },
+                "uuid": {
+                  "type": "alias",
+                  "path": "beat.state.beat.uuid"
+                },
+                "version": {
+                  "type": "alias",
+                  "path": "beat.state.beat.version"
+                }
+              }
+            },
+            "state": {
+              "properties": {
+                "beat": {
+                  "properties": {
+                    "name": {
+                      "type": "alias",
+                      "path": "beat.state.beat.name"
+                    }
+                  }
+                },
+                "host": {
+                  "properties": {
+                    "architecture": {
+                      "type": "alias",
+                      "path": "host.architecture"
+                    },
+                    "hostname": {
+                      "type": "alias",
+                      "path": "host.hostname"
+                    },
+                    "name": {
+                      "type": "alias",
+                      "path": "host.name"
+                    },
+                    "os": {
+                      "properties": {
+                        "platform": {
+                          "type": "alias",
+                          "path": "beat.state.host.os.platform"
+                        },
+                        "version": {
+                          "type": "alias",
+                          "path": "beat.state.host.os.version"
+                        }
+                      }
+                    }
+                  }
+                },
+                "input": {
+                  "properties": {
+                    "count": {
+                      "type": "alias",
+                      "path": "beat.state.input.count"
+                    },
+                    "names": {
+                      "type": "alias",
+                      "path": "beat.state.input.names"
+                    }
+                  }
+                },
+                "module": {
+                  "properties": {
+                    "count": {
+                      "type": "alias",
+                      "path": "beat.state.module.count"
+                    },
+                    "names": {
+                      "type": "alias",
+                      "path": "beat.state.module.names"
+                    }
+                  }
+                },
+                "output": {
+                  "properties": {
+                    "name": {
+                      "type": "alias",
+                      "path": "beat.state.output.name"
+                    }
+                  }
+                },
+                "service": {
+                  "properties": {
+                    "id": {
+                      "type": "alias",
+                      "path": "beat.state.service.id"
+                    },
+                    "name": {
+                      "type": "alias",
+                      "path": "beat.state.service.name"
+                    },
+                    "version": {
+                      "type": "alias",
+                      "path": "beat.state.service.version"
+                    }
+                  }
+                }
+              }
+            },
+            "timestamp": {
+              "type": "alias",
+              "path": "@timestamp"
+            }
+          }
+        },
+        "beats_stats": {
+          "properties": {
+            "apm-server": {
+              "properties": {
+                "acm": {
+                  "properties": {
+                    "request": {
+                      "properties": {
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.acm.request.count"
+                        }
+                      }
+                    },
+                    "response": {
+                      "properties": {
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.acm.response.count"
+                        },
+                        "errors": {
+                          "properties": {
+                            "closed": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.closed"
+                            },
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.count"
+                            },
+                            "decode": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.decode"
+                            },
+                            "forbidden": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.forbidden"
+                            },
+                            "internal": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.internal"
+                            },
+                            "invalidquery": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.invalidquery"
+                            },
+                            "method": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.method"
+                            },
+                            "notfound": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.notfound"
+                            },
+                            "queue": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.queue"
+                            },
+                            "ratelimit": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.ratelimit"
+                            },
+                            "toolarge": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.toolarge"
+                            },
+                            "unauthorized": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.unauthorized"
+                            },
+                            "unavailable": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.unavailable"
+                            },
+                            "validate": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.errors.validate"
+                            }
+                          }
+                        },
+                        "request": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.request.count"
+                            }
+                          }
+                        },
+                        "unset": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.acm.response.unset"
+                        },
+                        "valid": {
+                          "properties": {
+                            "accepted": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.valid.accepted"
+                            },
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.valid.count"
+                            },
+                            "notmodified": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.valid.notmodified"
+                            },
+                            "ok": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.acm.response.valid.ok"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "decoder": {
+                  "properties": {
+                    "deflate": {
+                      "properties": {
+                        "content-length": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.deflate.content-length"
+                        },
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.deflate.count"
+                        }
+                      }
+                    },
+                    "gzip": {
+                      "properties": {
+                        "content-length": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.gzip.content-length"
+                        },
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.gzip.count"
+                        }
+                      }
+                    },
+                    "missing-content-length": {
+                      "properties": {
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.missing-content-length.count"
+                        }
+                      }
+                    },
+                    "reader": {
+                      "properties": {
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.reader.count"
+                        },
+                        "size": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.reader.size"
+                        }
+                      }
+                    },
+                    "uncompressed": {
+                      "properties": {
+                        "content-length": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.uncompressed.content-length"
+                        },
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.decoder.uncompressed.count"
+                        }
+                      }
+                    }
+                  }
+                },
+                "processor": {
+                  "properties": {
+                    "error": {
+                      "properties": {
+                        "decoding": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.error.decoding.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.error.decoding.errors"
+                            }
+                          }
+                        },
+                        "frames": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.error.frames"
+                        },
+                        "spans": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.error.spans"
+                        },
+                        "stacktraces": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.error.stacktraces"
+                        },
+                        "transformations": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.error.transformations"
+                        },
+                        "validation": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.error.validation.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.error.validation.errors"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "metric": {
+                      "properties": {
+                        "decoding": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.metric.decoding.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.metric.decoding.errors"
+                            }
+                          }
+                        },
+                        "transformations": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.metric.transformations"
+                        },
+                        "validation": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.metric.validation.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.metric.validation.errors"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "sourcemap": {
+                      "properties": {
+                        "counter": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.sourcemap.counter"
+                        },
+                        "decoding": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.sourcemap.decoding.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.sourcemap.decoding.errors"
+                            }
+                          }
+                        },
+                        "validation": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.sourcemap.validation.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.sourcemap.validation.errors"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "span": {
+                      "properties": {
+                        "transformations": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.span.transformations"
+                        }
+                      }
+                    },
+                    "transaction": {
+                      "properties": {
+                        "decoding": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.transaction.decoding.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.transaction.decoding.errors"
+                            }
+                          }
+                        },
+                        "frames": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.transaction.frames"
+                        },
+                        "spans": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.transaction.spans"
+                        },
+                        "stacktraces": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.transaction.stacktraces"
+                        },
+                        "transactions": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.transaction.transactions"
+                        },
+                        "transformations": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.processor.transaction.transformations"
+                        },
+                        "validation": {
+                          "properties": {
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.transaction.validation.count"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.processor.transaction.validation.errors"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "server": {
+                  "properties": {
+                    "concurrent": {
+                      "properties": {
+                        "wait": {
+                          "properties": {
+                            "ms": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.concurrent.wait.ms"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "request": {
+                      "properties": {
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.server.request.count"
+                        }
+                      }
+                    },
+                    "response": {
+                      "properties": {
+                        "count": {
+                          "type": "alias",
+                          "path": "beat.stats.apm_server.server.response.count"
+                        },
+                        "errors": {
+                          "properties": {
+                            "closed": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.closed"
+                            },
+                            "concurrency": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.concurrency"
+                            },
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.count"
+                            },
+                            "decode": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.decode"
+                            },
+                            "forbidden": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.forbidden"
+                            },
+                            "internal": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.internal"
+                            },
+                            "method": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.method"
+                            },
+                            "queue": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.queue"
+                            },
+                            "ratelimit": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.ratelimit"
+                            },
+                            "toolarge": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.toolarge"
+                            },
+                            "unauthorized": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.unauthorized"
+                            },
+                            "validate": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.errors.validate"
+                            }
+                          }
+                        },
+                        "valid": {
+                          "properties": {
+                            "accepted": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.valid.accepted"
+                            },
+                            "count": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.valid.count"
+                            },
+                            "ok": {
+                              "type": "alias",
+                              "path": "beat.stats.apm_server.server.response.valid.ok"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "beat": {
+              "properties": {
+                "host": {
+                  "type": "alias",
+                  "path": "beat.stats.beat.host"
+                },
+                "name": {
+                  "type": "alias",
+                  "path": "beat.stats.beat.name"
+                },
+                "type": {
+                  "type": "alias",
+                  "path": "beat.stats.beat.type"
+                },
+                "uuid": {
+                  "type": "alias",
+                  "path": "beat.stats.beat.uuid"
+                },
+                "version": {
+                  "type": "alias",
+                  "path": "beat.stats.beat.version"
+                }
+              }
+            },
+            "metrics": {
+              "properties": {
+                "beat": {
+                  "properties": {
+                    "cgroup": {
+                      "properties": {
+                        "cpu": {
+                          "properties": {
+                            "cfs": {
+                              "properties": {
+                                "period": {
+                                  "properties": {
+                                    "us": {
+                                      "type": "alias",
+                                      "path": "beat.stats.cgroup.cpu.cfs.period.us"
+                                    }
+                                  }
+                                },
+                                "quota": {
+                                  "properties": {
+                                    "us": {
+                                      "type": "alias",
+                                      "path": "beat.stats.cgroup.cpu.cfs.quota.us"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "id": {
+                              "type": "alias",
+                              "path": "beat.stats.cgroup.cpu.id"
+                            },
+                            "stats": {
+                              "properties": {
+                                "periods": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cgroup.cpu.stats.periods"
+                                },
+                                "throttled": {
+                                  "properties": {
+                                    "ns": {
+                                      "type": "alias",
+                                      "path": "beat.stats.cgroup.cpu.stats.throttled.ns"
+                                    },
+                                    "periods": {
+                                      "type": "alias",
+                                      "path": "beat.stats.cgroup.cpu.stats.throttled.periods"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "cpuacct": {
+                          "properties": {
+                            "id": {
+                              "type": "alias",
+                              "path": "beat.stats.cgroup.cpuacct.id"
+                            },
+                            "total": {
+                              "properties": {
+                                "ns": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cgroup.cpuacct.total.ns"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "mem": {
+                          "properties": {
+                            "limit": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cgroup.memory.mem.limit.bytes"
+                                }
+                              }
+                            },
+                            "usage": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cgroup.memory.mem.usage.bytes"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "memory": {
+                          "properties": {
+                            "id": {
+                              "type": "alias",
+                              "path": "beat.stats.cgroup.memory.id"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "cpu": {
+                      "properties": {
+                        "system": {
+                          "properties": {
+                            "ticks": {
+                              "type": "alias",
+                              "path": "beat.stats.cpu.system.ticks"
+                            },
+                            "time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cpu.system.time.ms"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "total": {
+                          "properties": {
+                            "ticks": {
+                              "type": "alias",
+                              "path": "beat.stats.cpu.total.ticks"
+                            },
+                            "time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cpu.total.time.ms"
+                                }
+                              }
+                            },
+                            "value": {
+                              "type": "alias",
+                              "path": "beat.stats.cpu.total.value"
+                            }
+                          }
+                        },
+                        "user": {
+                          "properties": {
+                            "ticks": {
+                              "type": "alias",
+                              "path": "beat.stats.cpu.user.ticks"
+                            },
+                            "time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "alias",
+                                  "path": "beat.stats.cpu.user.time.ms"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "handles": {
+                      "properties": {
+                        "limit": {
+                          "properties": {
+                            "hard": {
+                              "type": "alias",
+                              "path": "beat.stats.handles.limit.hard"
+                            },
+                            "soft": {
+                              "type": "alias",
+                              "path": "beat.stats.handles.limit.soft"
+                            }
+                          }
+                        },
+                        "open": {
+                          "type": "alias",
+                          "path": "beat.stats.handles.open"
+                        }
+                      }
+                    },
+                    "info": {
+                      "properties": {
+                        "ephemeral_id": {
+                          "type": "alias",
+                          "path": "beat.stats.info.ephemeral_id"
+                        },
+                        "uptime": {
+                          "properties": {
+                            "ms": {
+                              "type": "alias",
+                              "path": "beat.stats.info.uptime.ms"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "memstats": {
+                      "properties": {
+                        "gc_next": {
+                          "type": "alias",
+                          "path": "beat.stats.memstats.gc_next"
+                        },
+                        "memory_alloc": {
+                          "type": "alias",
+                          "path": "beat.stats.memstats.memory.alloc"
+                        },
+                        "memory_total": {
+                          "type": "alias",
+                          "path": "beat.stats.memstats.memory.total"
+                        },
+                        "rss": {
+                          "type": "alias",
+                          "path": "beat.stats.memstats.rss"
+                        }
+                      }
+                    }
+                  }
+                },
+                "libbeat": {
+                  "properties": {
+                    "config": {
+                      "properties": {
+                        "module": {
+                          "properties": {
+                            "running": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.config.running"
+                            },
+                            "starts": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.config.starts"
+                            },
+                            "stops": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.config.stops"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "output": {
+                      "properties": {
+                        "events": {
+                          "properties": {
+                            "acked": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.acked"
+                            },
+                            "active": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.active"
+                            },
+                            "batches": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.batches"
+                            },
+                            "dropped": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.dropped"
+                            },
+                            "duplicated": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.duplicates"
+                            },
+                            "failed": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.failed"
+                            },
+                            "toomany": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.toomany"
+                            },
+                            "total": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.events.total"
+                            }
+                          }
+                        },
+                        "read": {
+                          "properties": {
+                            "bytes": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.read.bytes"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.read.errors"
+                            }
+                          }
+                        },
+                        "type": {
+                          "type": "alias",
+                          "path": "beat.stats.libbeat.output.type"
+                        },
+                        "write": {
+                          "properties": {
+                            "bytes": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.write.bytes"
+                            },
+                            "errors": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.output.write.errors"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "pipeline": {
+                      "properties": {
+                        "clients": {
+                          "type": "alias",
+                          "path": "beat.stats.libbeat.pipeline.clients"
+                        },
+                        "event": {
+                          "properties": {
+                            "active": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.active"
+                            },
+                            "dropped": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.dropped"
+                            },
+                            "failed": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.failed"
+                            },
+                            "filtered": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.filtered"
+                            },
+                            "published": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.published"
+                            },
+                            "retry": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.retry"
+                            },
+                            "total": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.events.total"
+                            }
+                          }
+                        },
+                        "queue": {
+                          "properties": {
+                            "acked": {
+                              "type": "alias",
+                              "path": "beat.stats.libbeat.pipeline.queue.acked"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "system": {
+                  "properties": {
+                    "cpu": {
+                      "properties": {
+                        "cores": {
+                          "type": "alias",
+                          "path": "beat.stats.system.cpu.cores"
+                        }
+                      }
+                    },
+                    "load": {
+                      "properties": {
+                        "1": {
+                          "type": "alias",
+                          "path": "beat.stats.system.load.1"
+                        },
+                        "5": {
+                          "type": "alias",
+                          "path": "beat.stats.system.load.5"
+                        },
+                        "15": {
+                          "type": "alias",
+                          "path": "beat.stats.system.load.15"
+                        },
+                        "norm": {
+                          "properties": {
+                            "1": {
+                              "type": "alias",
+                              "path": "beat.stats.system.load.norm.1"
+                            },
+                            "5": {
+                              "type": "alias",
+                              "path": "beat.stats.system.load.norm.5"
+                            },
+                            "15": {
+                              "type": "alias",
+                              "path": "beat.stats.system.load.norm.15"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "timestamp": {
+              "type": "alias",
+              "path": "@timestamp"
+            }
+          }
+        },
+        "@timestamp": {
+          "type": "date"
+        },
+        "timestamp": {
+          "type": "alias",
+          "path": "@timestamp"
+        },
+        "host": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "architecture": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "hostname": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "metricset": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "period": {
+              "type": "long"
+            }
+          }
+        },
+        "service": {
+          "properties": {
+            "address": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "environment": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ephemeral_id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "hostname": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "node": {
+              "properties": {
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "origin": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "state": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "target": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "type": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "version": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "event": {
+          "properties": {
+            "action": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "agent_id_status": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "category": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "code": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "created": {
+              "type": "date"
+            },
+            "dataset": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "duration": {
+              "type": "long"
+            },
+            "end": {
+              "type": "date"
+            },
+            "hash": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ingested": {
+              "type": "date"
+            },
+            "kind": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "module": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "original": {
+              "type": "keyword",
+              "index": false,
+              "doc_values": false,
+              "ignore_above": 1024
+            },
+            "outcome": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "provider": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reason": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reference": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "risk_score": {
+              "type": "float"
+            },
+            "risk_score_norm": {
+              "type": "float"
+            },
+            "sequence": {
+              "type": "long"
+            },
+            "severity": {
+              "type": "long"
+            },
+            "start": {
+              "type": "date"
+            },
+            "timezone": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "type": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "url": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "elasticsearch": {
+          "properties": {
+            "cluster": {
+              "properties": {
+                "id": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                }
+              }
+            }
+          }
+        },
+        "cluster_uuid": {
+          "type": "alias",
+          "path": "elasticsearch.cluster.id"
+        }
+      }
+    }
+  },
+  "data_stream": {}
+}

x-pack/plugin/core/src/main/resources/monitoring-es-mb.json

@@ -0,0 +1,3299 @@
+{
+  "index_patterns": [".monitoring-es-${xpack.stack.monitoring.template.version}-*"],
+  "version": ${xpack.stack.monitoring.template.release.version},
+  "template": {
+    "mappings": {
+      "properties": {
+        "@timestamp": {
+          "type": "date"
+        },
+        "elasticsearch": {
+          "properties": {
+            "cluster": {
+              "properties": {
+                "name": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "id": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "state": {
+                  "properties": {
+                    "id": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "stats": {
+                  "properties": {
+                    "license": {
+                      "properties": {
+                        "expiry_date_in_millis": {
+                          "type": "long"
+                        },
+                        "type": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "status": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    },
+                    "indices": {
+                      "properties": {
+                        "shards": {
+                          "properties": {
+                            "primaries": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "total": {
+                          "type": "long"
+                        },
+                        "docs": {
+                          "properties": {
+                            "total": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "fielddata": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "store": {
+                          "properties": {
+                            "size": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "stack": {
+                      "properties": {
+                        "xpack": {
+                          "properties": {
+                            "ccr": {
+                              "properties": {
+                                "available": {
+                                  "type": "boolean"
+                                },
+                                "enabled": {
+                                  "type": "boolean"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "apm": {
+                          "properties": {
+                            "found": {
+                              "type": "boolean"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "nodes": {
+                      "properties": {
+                        "jvm": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "heap": {
+                                  "properties": {
+                                    "max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "used": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "max_uptime": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "data": {
+                          "type": "long"
+                        },
+                        "stats": {
+                          "properties": {
+                            "data": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "count": {
+                          "type": "long"
+                        },
+                        "fs": {
+                          "properties": {
+                            "total": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "available": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "master": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "state": {
+                      "properties": {
+                        "nodes_hash": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "master_node": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "state_uuid": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "version": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    },
+                    "version": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "status": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "pending_task": {
+                  "properties": {
+                    "time_in_queue": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "source": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "priority": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "insert_order": {
+                      "type": "long"
+                    }
+                  }
+                }
+              }
+            },
+            "node": {
+              "properties": {
+                "name": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "mlockall": {
+                  "type": "boolean"
+                },
+                "id": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "master": {
+                  "type": "boolean"
+                },
+                "jvm": {
+                  "properties": {
+                    "memory": {
+                      "properties": {
+                        "heap": {
+                          "properties": {
+                            "init": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "max": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "nonheap": {
+                          "properties": {
+                            "init": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "max": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "version": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "process": {
+                  "properties": {
+                    "mlockall": {
+                      "type": "boolean"
+                    }
+                  }
+                },
+                "version": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "stats": {
+                  "properties": {
+                    "jvm": {
+                      "properties": {
+                        "mem": {
+                          "properties": {
+                            "pools": {
+                              "properties": {
+                                "young": {
+                                  "properties": {
+                                    "max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "peak": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "peak_max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "used": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                },
+                                "old": {
+                                  "properties": {
+                                    "max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "peak": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "peak_max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "used": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                },
+                                "survivor": {
+                                  "properties": {
+                                    "max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "peak": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "peak_max": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "used": {
+                                      "properties": {
+                                        "bytes": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "heap": {
+                              "properties": {
+                                "max": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                },
+                                "used": {
+                                  "properties": {
+                                    "pct": {
+                                      "type": "double"
+                                    },
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "gc": {
+                          "properties": {
+                            "collectors": {
+                              "properties": {
+                                "young": {
+                                  "properties": {
+                                    "collection": {
+                                      "properties": {
+                                        "ms": {
+                                          "type": "long"
+                                        },
+                                        "count": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                },
+                                "old": {
+                                  "properties": {
+                                    "collection": {
+                                      "properties": {
+                                        "ms": {
+                                          "type": "long"
+                                        },
+                                        "count": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "indices": {
+                      "properties": {
+                        "search": {
+                          "properties": {
+                            "query_total": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "query_time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "query_cache": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "docs": {
+                          "properties": {
+                            "deleted": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "fielddata": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "indexing": {
+                          "properties": {
+                            "index_time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "index_total": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "throttle_time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "store": {
+                          "properties": {
+                            "size": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "request_cache": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "segments": {
+                          "properties": {
+                            "version_map": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "norms": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "terms": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "stored_fields": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "index_writer": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "count": {
+                              "type": "long"
+                            },
+                            "fixed_bit_set": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "term_vectors": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "doc_values": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "points": {
+                              "properties": {
+                                "memory": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "process": {
+                      "properties": {
+                        "cpu": {
+                          "properties": {
+                            "pct": {
+                              "type": "double"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "os": {
+                      "properties": {
+                        "cpu": {
+                          "properties": {
+                            "load_avg": {
+                              "properties": {
+                                "1m": {
+                                  "type": "half_float"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "cgroup": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "control_group": {
+                                  "ignore_above": 1024,
+                                  "type": "keyword"
+                                },
+                                "usage": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                },
+                                "limit": {
+                                  "properties": {
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "cpu": {
+                              "properties": {
+                                "cfs": {
+                                  "properties": {
+                                    "quota": {
+                                      "properties": {
+                                        "us": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                },
+                                "stat": {
+                                  "properties": {
+                                    "elapsed_periods": {
+                                      "properties": {
+                                        "count": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "times_throttled": {
+                                      "properties": {
+                                        "count": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    },
+                                    "time_throttled": {
+                                      "properties": {
+                                        "ns": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "cpuacct": {
+                              "properties": {
+                                "usage": {
+                                  "properties": {
+                                    "ns": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "thread_pool": {
+                      "properties": {
+                        "search": {
+                          "properties": {
+                            "rejected": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "queue": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "get": {
+                          "properties": {
+                            "rejected": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "queue": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "index": {
+                          "properties": {
+                            "rejected": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "queue": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "bulk": {
+                          "properties": {
+                            "rejected": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "queue": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "write": {
+                          "properties": {
+                            "rejected": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "queue": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "fs": {
+                      "properties": {
+                        "summary": {
+                          "properties": {
+                            "total": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "available": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "free": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "io_stats": {
+                          "properties": {
+                            "total": {
+                              "properties": {
+                                "operations": {
+                                  "properties": {
+                                    "count": {
+                                      "type": "long"
+                                    }
+                                  }
+                                },
+                                "read": {
+                                  "properties": {
+                                    "operations": {
+                                      "properties": {
+                                        "count": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                },
+                                "write": {
+                                  "properties": {
+                                    "operations": {
+                                      "properties": {
+                                        "count": {
+                                          "type": "long"
+                                        }
+                                      }
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "total": {
+                          "properties": {
+                            "total_in_bytes": {
+                              "type": "long"
+                            },
+                            "available_in_bytes": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "ml": {
+              "properties": {
+                "job": {
+                  "properties": {
+                    "data": {
+                      "properties": {
+                        "invalid_date": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "data_counts": {
+                      "properties": {
+                        "invalid_date_count": {
+                          "type": "long"
+                        },
+                        "processed_record_count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "id": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "state": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "forecasts_stats": {
+                      "properties": {
+                        "total": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "model_size": {
+                      "properties": {
+                        "memory_status": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "version": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "enrich": {
+              "properties": {
+                "executed_searches": {
+                  "properties": {
+                    "total": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "remote_requests": {
+                  "properties": {
+                    "current": {
+                      "type": "long"
+                    },
+                    "total": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "executing_policy": {
+                  "properties": {
+                    "task": {
+                      "properties": {
+                        "task": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "parent_task_id": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "action": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "id": {
+                          "type": "long"
+                        },
+                        "time": {
+                          "properties": {
+                            "running": {
+                              "properties": {
+                                "nano": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "start": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "cancellable": {
+                          "type": "boolean"
+                        }
+                      }
+                    },
+                    "name": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "queue": {
+                  "properties": {
+                    "size": {
+                      "type": "long"
+                    }
+                  }
+                }
+              }
+            },
+            "index": {
+              "properties": {
+                "shards": {
+                  "properties": {
+                    "total": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "primaries": {
+                  "properties": {
+                    "search": {
+                      "properties": {
+                        "query_total": {
+                          "type": "long"
+                        },
+                        "query_time_in_millis": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "query_cache": {
+                      "properties": {
+                        "miss_count": {
+                          "type": "long"
+                        },
+                        "memory_size_in_bytes": {
+                          "type": "long"
+                        },
+                        "hit_count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "docs": {
+                      "properties": {
+                        "deleted": {
+                          "type": "long"
+                        },
+                        "count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "indexing": {
+                      "properties": {
+                        "throttle_time_in_millis": {
+                          "type": "long"
+                        },
+                        "index_time_in_millis": {
+                          "type": "long"
+                        },
+                        "index_total": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "refresh": {
+                      "properties": {
+                        "external_total_time_in_millis": {
+                          "type": "long"
+                        },
+                        "total_time_in_millis": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "request_cache": {
+                      "properties": {
+                        "miss_count": {
+                          "type": "long"
+                        },
+                        "memory_size_in_bytes": {
+                          "type": "long"
+                        },
+                        "evictions": {
+                          "type": "long"
+                        },
+                        "hit_count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "store": {
+                      "properties": {
+                        "size_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "segments": {
+                      "properties": {
+                        "version_map_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "norms_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "count": {
+                          "type": "long"
+                        },
+                        "term_vectors_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "points_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "index_writer_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "terms_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "doc_values_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "stored_fields_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "fixed_bit_set_memory_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "merges": {
+                      "properties": {
+                        "total_size_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                },
+                "total": {
+                  "properties": {
+                    "search": {
+                      "properties": {
+                        "query_total": {
+                          "type": "long"
+                        },
+                        "query_time_in_millis": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "query_cache": {
+                      "properties": {
+                        "miss_count": {
+                          "type": "long"
+                        },
+                        "memory_size_in_bytes": {
+                          "type": "long"
+                        },
+                        "evictions": {
+                          "type": "long"
+                        },
+                        "hit_count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "docs": {
+                      "properties": {
+                        "deleted": {
+                          "type": "long"
+                        },
+                        "count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "fielddata": {
+                      "properties": {
+                        "memory_size_in_bytes": {
+                          "type": "long"
+                        },
+                        "evictions": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "indexing": {
+                      "properties": {
+                        "throttle_time_in_millis": {
+                          "type": "long"
+                        },
+                        "index_time_in_millis": {
+                          "type": "long"
+                        },
+                        "index_total": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "refresh": {
+                      "properties": {
+                        "external_total_time_in_millis": {
+                          "type": "long"
+                        },
+                        "total_time_in_millis": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "store": {
+                      "properties": {
+                        "size": {
+                          "properties": {
+                            "bytes": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "size_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "request_cache": {
+                      "properties": {
+                        "miss_count": {
+                          "type": "long"
+                        },
+                        "memory_size_in_bytes": {
+                          "type": "long"
+                        },
+                        "evictions": {
+                          "type": "long"
+                        },
+                        "hit_count": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "merges": {
+                      "properties": {
+                        "total_size_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "segments": {
+                      "properties": {
+                        "version_map_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "norms_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "memory": {
+                          "properties": {
+                            "bytes": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "count": {
+                          "type": "long"
+                        },
+                        "term_vectors_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "points_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "index_writer_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "terms_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "doc_values_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "stored_fields_memory_in_bytes": {
+                          "type": "long"
+                        },
+                        "fixed_bit_set_memory_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                },
+                "hidden": {
+                  "type": "boolean"
+                },
+                "created": {
+                  "type": "long"
+                },
+                "name": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "uuid": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "status": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "recovery": {
+                  "properties": {
+                    "stop_time": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "translog": {
+                      "properties": {
+                        "total_on_start": {
+                          "type": "long"
+                        },
+                        "total": {
+                          "type": "long"
+                        },
+                        "percent": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    },
+                    "verify_index": {
+                      "properties": {
+                        "total_time": {
+                          "properties": {
+                            "ms": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "check_index_time": {
+                          "properties": {
+                            "ms": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "index": {
+                      "properties": {
+                        "size": {
+                          "properties": {
+                            "total_in_bytes": {
+                              "type": "long"
+                            },
+                            "reused_in_bytes": {
+                              "type": "long"
+                            },
+                            "recovered_in_bytes": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "files": {
+                          "properties": {
+                            "recovered": {
+                              "type": "long"
+                            },
+                            "total": {
+                              "type": "long"
+                            },
+                            "percent": {
+                              "ignore_above": 1024,
+                              "type": "keyword"
+                            },
+                            "reused": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "source": {
+                      "properties": {
+                        "transport_address": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "host": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "name": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "id": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    },
+                    "type": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "target": {
+                      "properties": {
+                        "transport_address": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "host": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "name": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "id": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    },
+                    "start_time": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "stage": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "name": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "id": {
+                      "type": "long"
+                    },
+                    "total_time": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "primary": {
+                      "type": "boolean"
+                    }
+                  }
+                },
+                "summary": {
+                  "properties": {
+                    "primaries": {
+                      "properties": {
+                        "search": {
+                          "properties": {
+                            "query": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "time": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "docs": {
+                          "properties": {
+                            "deleted": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "indexing": {
+                          "properties": {
+                            "index": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "time": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "store": {
+                          "properties": {
+                            "size": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "bulk": {
+                          "properties": {
+                            "operations": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "size": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "time": {
+                              "properties": {
+                                "avg": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    },
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                },
+                                "count": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "segments": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "total": {
+                      "properties": {
+                        "search": {
+                          "properties": {
+                            "query": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "time": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "docs": {
+                          "properties": {
+                            "deleted": {
+                              "type": "long"
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "indexing": {
+                          "properties": {
+                            "index": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                },
+                                "time": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "is_throttled": {
+                              "type": "boolean"
+                            },
+                            "throttle_time": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "store": {
+                          "properties": {
+                            "size": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "bulk": {
+                          "properties": {
+                            "operations": {
+                              "properties": {
+                                "count": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "size": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "time": {
+                              "properties": {
+                                "avg": {
+                                  "properties": {
+                                    "ms": {
+                                      "type": "long"
+                                    },
+                                    "bytes": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "segments": {
+                          "properties": {
+                            "memory": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "shard": {
+              "properties": {
+                "number": {
+                  "type": "long"
+                },
+                "source_node": {
+                  "properties": {
+                    "name": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "uuid": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "relocating_node": {
+                  "properties": {
+                    "name": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "id": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "state": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "primary": {
+                  "type": "boolean"
+                }
+              }
+            },
+            "ccr": {
+              "properties": {
+                "leader": {
+                  "properties": {
+                    "index": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "max_seq_no": {
+                      "type": "long"
+                    },
+                    "global_checkpoint": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "follower": {
+                  "properties": {
+                    "operations": {
+                      "properties": {
+                        "read": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "time_since_last_read": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "index": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "settings_version": {
+                      "type": "long"
+                    },
+                    "shard": {
+                      "properties": {
+                        "number": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "max_seq_no": {
+                      "type": "long"
+                    },
+                    "mapping_version": {
+                      "type": "long"
+                    },
+                    "aliases_version": {
+                      "type": "long"
+                    },
+                    "operations_written": {
+                      "type": "long"
+                    },
+                    "global_checkpoint": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "remote_cluster": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "read_exceptions": {
+                  "type": "nested"
+                },
+                "shard_id": {
+                  "type": "long"
+                },
+                "bytes_read": {
+                  "type": "long"
+                },
+                "requests": {
+                  "properties": {
+                    "outstanding": {
+                      "properties": {
+                        "read": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "write": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "failed": {
+                      "properties": {
+                        "read": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "write": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "successful": {
+                      "properties": {
+                        "read": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "write": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "auto_follow": {
+                  "properties": {
+                    "success": {
+                      "properties": {
+                        "follow_indices": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "failed": {
+                      "properties": {
+                        "follow_indices": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "remote_cluster_state_requests": {
+                          "properties": {
+                            "count": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "total_time": {
+                  "properties": {
+                    "read": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        },
+                        "remote_exec": {
+                          "properties": {
+                            "ms": {
+                              "type": "long"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "write": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                },
+                "last_requested_seq_no": {
+                  "type": "long"
+                },
+                "write_buffer": {
+                  "properties": {
+                    "size": {
+                      "properties": {
+                        "bytes": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "operation": {
+                      "properties": {
+                        "count": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "cluster_uuid": {
+          "path": "elasticsearch.cluster.id",
+          "type": "alias"
+        },
+        "source_node": {
+          "properties": {
+            "name": {
+              "path": "elasticsearch.node.name",
+              "type": "alias"
+            },
+            "uuid": {
+              "path": "elasticsearch.node.id",
+              "type": "alias"
+            }
+          }
+        },
+        "timestamp": {
+          "path": "@timestamp",
+          "type": "alias"
+        },
+        "job_stats": {
+          "properties": {
+            "job_id": {
+              "path": "elasticsearch.ml.job.id",
+              "type": "alias"
+            },
+            "forecasts_stats": {
+              "properties": {
+                "total": {
+                  "path": "elasticsearch.ml.job.forecasts_stats.total",
+                  "type": "alias"
+                }
+              }
+            }
+          }
+        },
+        "ecs": {
+          "properties": {
+            "version": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            }
+          }
+        },
+        "service": {
+          "properties": {
+            "address": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "name": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "type": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "environment": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ephemeral_id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "hostname": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "node": {
+              "properties": {
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "origin": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "state": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "target": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "version": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "license": {
+          "properties": {
+            "type": {
+              "path": "elasticsearch.cluster.stats.license.type",
+              "type": "alias"
+            },
+            "status": {
+              "path": "elasticsearch.cluster.stats.license.status",
+              "type": "alias"
+            }
+          }
+        },
+        "cluster_state": {
+          "properties": {
+            "nodes_hash": {
+              "path": "elasticsearch.cluster.stats.state.nodes_hash",
+              "type": "alias"
+            },
+            "master_node": {
+              "path": "elasticsearch.cluster.stats.state.master_node",
+              "type": "alias"
+            },
+            "state_uuid": {
+              "path": "elasticsearch.cluster.stats.state.state_uuid",
+              "type": "alias"
+            },
+            "version": {
+              "path": "elasticsearch.cluster.stats.state.version",
+              "type": "alias"
+            },
+            "status": {
+              "path": "elasticsearch.cluster.stats.status",
+              "type": "alias"
+            }
+          }
+        },
+        "cluster_stats": {
+          "properties": {
+            "indices": {
+              "properties": {
+                "shards": {
+                  "properties": {
+                    "total": {
+                      "path": "elasticsearch.cluster.stats.indices.shards.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "count": {
+                  "path": "elasticsearch.cluster.stats.indices.total",
+                  "type": "alias"
+                }
+              }
+            },
+            "nodes": {
+              "properties": {
+                "jvm": {
+                  "properties": {
+                    "max_uptime_in_millis": {
+                      "path": "elasticsearch.cluster.stats.nodes.jvm.max_uptime.ms",
+                      "type": "alias"
+                    },
+                    "mem": {
+                      "properties": {
+                        "heap_max_in_bytes": {
+                          "path": "elasticsearch.cluster.stats.nodes.jvm.memory.heap.max.bytes",
+                          "type": "alias"
+                        },
+                        "heap_used_in_bytes": {
+                          "path": "elasticsearch.cluster.stats.nodes.jvm.memory.heap.used.bytes",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "count": {
+                  "properties": {
+                    "total": {
+                      "path": "elasticsearch.cluster.stats.nodes.count",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "stack_stats": {
+          "properties": {
+            "xpack": {
+              "properties": {
+                "ccr": {
+                  "properties": {
+                    "available": {
+                      "path": "elasticsearch.cluster.stats.stack.xpack.ccr.available",
+                      "type": "alias"
+                    },
+                    "enabled": {
+                      "path": "elasticsearch.cluster.stats.stack.xpack.ccr.enabled",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "apm": {
+              "properties": {
+                "found": {
+                  "path": "elasticsearch.cluster.stats.stack.apm.found",
+                  "type": "alias"
+                }
+              }
+            }
+          }
+        },
+        "index_recovery": {
+          "properties": {
+            "shards": {
+              "properties": {
+                "stop_time_in_millis": {
+                  "path": "elasticsearch.index.recovery.stop_time.ms",
+                  "type": "alias"
+                },
+                "start_time_in_millis": {
+                  "path": "elasticsearch.index.recovery.start_time.ms",
+                  "type": "alias"
+                }
+              }
+            }
+          }
+        },
+        "indices_stats": {
+          "properties": {
+            "_all": {
+              "properties": {
+                "primaries": {
+                  "properties": {
+                    "indexing": {
+                      "properties": {
+                        "index_time_in_millis": {
+                          "path": "elasticsearch.index.summary.primaries.indexing.index.time.ms",
+                          "type": "alias"
+                        },
+                        "index_total": {
+                          "path": "elasticsearch.index.summary.primaries.indexing.index.count",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "total": {
+                  "properties": {
+                    "search": {
+                      "properties": {
+                        "query_total": {
+                          "path": "elasticsearch.index.summary.total.search.query.count",
+                          "type": "alias"
+                        },
+                        "query_time_in_millis": {
+                          "path": "elasticsearch.index.summary.total.search.query.time.ms",
+                          "type": "alias"
+                        }
+                      }
+                    },
+                    "indexing": {
+                      "properties": {
+                        "index_total": {
+                          "path": "elasticsearch.index.summary.total.indexing.index.count",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "shard": {
+          "properties": {
+            "node": {
+              "path": "elasticsearch.node.id",
+              "type": "alias"
+            },
+            "index": {
+              "path": "elasticsearch.index.name",
+              "type": "alias"
+            },
+            "state": {
+              "path": "elasticsearch.shard.state",
+              "type": "alias"
+            },
+            "shard": {
+              "path": "elasticsearch.shard.number",
+              "type": "alias"
+            },
+            "primary": {
+              "path": "elasticsearch.shard.primary",
+              "type": "alias"
+            }
+          }
+        },
+        "version": {
+          "type": "long"
+        },
+        "ccr_auto_follow_stats": {
+          "properties": {
+            "number_of_failed_remote_cluster_state_requests": {
+              "path": "elasticsearch.ccr.auto_follow.failed.remote_cluster_state_requests.count",
+              "type": "alias"
+            },
+            "follower": {
+              "properties": {
+                "failed_read_requests": {
+                  "path": "elasticsearch.ccr.requests.failed.read.count",
+                  "type": "alias"
+                }
+              }
+            },
+            "number_of_failed_follow_indices": {
+              "path": "elasticsearch.ccr.auto_follow.failed.follow_indices.count",
+              "type": "alias"
+            },
+            "number_of_successful_follow_indices": {
+              "path": "elasticsearch.ccr.auto_follow.success.follow_indices.count",
+              "type": "alias"
+            }
+          }
+        },
+        "ccr_stats": {
+          "properties": {
+            "write_buffer_size_in_bytes": {
+              "path": "elasticsearch.ccr.write_buffer.size.bytes",
+              "type": "alias"
+            },
+            "leader_global_checkpoint": {
+              "path": "elasticsearch.ccr.leader.global_checkpoint",
+              "type": "alias"
+            },
+            "follower_index": {
+              "path": "elasticsearch.ccr.follower.index",
+              "type": "alias"
+            },
+            "leader_max_seq_no": {
+              "path": "elasticsearch.ccr.leader.max_seq_no",
+              "type": "alias"
+            },
+            "last_requested_seq_no": {
+              "path": "elasticsearch.ccr.last_requested_seq_no",
+              "type": "alias"
+            },
+            "follower_settings_version": {
+              "path": "elasticsearch.ccr.follower.settings_version",
+              "type": "alias"
+            },
+            "successful_write_requests": {
+              "path": "elasticsearch.ccr.requests.successful.write.count",
+              "type": "alias"
+            },
+            "remote_cluster": {
+              "path": "elasticsearch.ccr.remote_cluster",
+              "type": "alias"
+            },
+            "outstanding_write_requests": {
+              "path": "elasticsearch.ccr.requests.outstanding.write.count",
+              "type": "alias"
+            },
+            "total_read_time_millis": {
+              "path": "elasticsearch.ccr.total_time.read.ms",
+              "type": "alias"
+            },
+            "outstanding_read_requests": {
+              "path": "elasticsearch.ccr.requests.outstanding.read.count",
+              "type": "alias"
+            },
+            "total_write_time_millis": {
+              "path": "elasticsearch.ccr.total_time.write.ms",
+              "type": "alias"
+            },
+            "failed_write_requests": {
+              "path": "elasticsearch.ccr.requests.failed.write.count",
+              "type": "alias"
+            },
+            "failed_read_requests": {
+              "path": "elasticsearch.ccr.requests.failed.read.count",
+              "type": "alias"
+            },
+            "bytes_read": {
+              "path": "elasticsearch.ccr.bytes_read",
+              "type": "alias"
+            },
+            "leader_index": {
+              "path": "elasticsearch.ccr.leader.index",
+              "type": "alias"
+            },
+            "follower_max_seq_no": {
+              "path": "elasticsearch.ccr.follower.max_seq_no",
+              "type": "alias"
+            },
+            "operations_written": {
+              "path": "elasticsearch.ccr.follower.operations_written",
+              "type": "alias"
+            },
+            "write_buffer_operation_count": {
+              "path": "elasticsearch.ccr.write_buffer.operation.count",
+              "type": "alias"
+            },
+            "successful_read_requests": {
+              "path": "elasticsearch.ccr.requests.successful.read.count",
+              "type": "alias"
+            },
+            "shard_id": {
+              "path": "elasticsearch.ccr.follower.shard.number",
+              "type": "alias"
+            },
+            "follower_mapping_version": {
+              "path": "elasticsearch.ccr.follower.mapping_version",
+              "type": "alias"
+            },
+            "follower_aliases_version": {
+              "path": "elasticsearch.ccr.follower.aliases_version",
+              "type": "alias"
+            },
+            "follower_global_checkpoint": {
+              "path": "elasticsearch.ccr.follower.global_checkpoint",
+              "type": "alias"
+            },
+            "total_read_remote_exec_time_millis": {
+              "path": "elasticsearch.ccr.total_time.read.remote_exec.ms",
+              "type": "alias"
+            },
+            "operations_read": {
+              "path": "elasticsearch.ccr.follower.operations.read.count",
+              "type": "alias"
+            }
+          }
+        },
+        "node_stats": {
+          "properties": {
+            "jvm": {
+              "properties": {
+                "mem": {
+                  "properties": {
+                    "heap_used_percent": {
+                      "path": "elasticsearch.node.stats.jvm.mem.heap.used.pct",
+                      "type": "alias"
+                    },
+                    "heap_max_in_bytes": {
+                      "path": "elasticsearch.node.stats.jvm.mem.heap.max.bytes",
+                      "type": "alias"
+                    },
+                    "heap_used_in_bytes": {
+                      "path": "elasticsearch.node.stats.jvm.mem.heap.used.bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "gc": {
+                  "properties": {
+                    "collectors": {
+                      "properties": {
+                        "young": {
+                          "properties": {
+                            "collection_count": {
+                              "path": "elasticsearch.node.stats.jvm.gc.collectors.young.collection.count",
+                              "type": "alias"
+                            },
+                            "collection_time_in_millis": {
+                              "path": "elasticsearch.node.stats.jvm.gc.collectors.young.collection.ms",
+                              "type": "alias"
+                            }
+                          }
+                        },
+                        "old": {
+                          "properties": {
+                            "collection_count": {
+                              "path": "elasticsearch.node.stats.jvm.gc.collectors.old.collection.count",
+                              "type": "alias"
+                            },
+                            "collection_time_in_millis": {
+                              "path": "elasticsearch.node.stats.jvm.gc.collectors.old.collection.ms",
+                              "type": "alias"
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "indices": {
+              "properties": {
+                "search": {
+                  "properties": {
+                    "query_total": {
+                      "path": "elasticsearch.node.stats.indices.search.query_total.count",
+                      "type": "alias"
+                    },
+                    "query_time_in_millis": {
+                      "path": "elasticsearch.node.stats.indices.search.query_time.ms",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "query_cache": {
+                  "properties": {
+                    "memory_size_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.query_cache.memory.bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "docs": {
+                  "properties": {
+                    "count": {
+                      "path": "elasticsearch.node.stats.indices.docs.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "indexing": {
+                  "properties": {
+                    "throttle_time_in_millis": {
+                      "path": "elasticsearch.node.stats.indices.indexing.throttle_time.ms",
+                      "type": "alias"
+                    },
+                    "index_time_in_millis": {
+                      "path": "elasticsearch.node.stats.indices.indexing.index_time.ms",
+                      "type": "alias"
+                    },
+                    "index_total": {
+                      "path": "elasticsearch.node.stats.indices.indexing.index_total.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "fielddata": {
+                  "properties": {
+                    "memory_size_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.fielddata.memory.bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "store": {
+                  "properties": {
+                    "size": {
+                      "properties": {
+                        "bytes": {
+                          "path": "elasticsearch.node.stats.indices.store.size.bytes",
+                          "type": "alias"
+                        }
+                      }
+                    },
+                    "size_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.store.size.bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "request_cache": {
+                  "properties": {
+                    "memory_size_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.request_cache.memory.bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "segments": {
+                  "properties": {
+                    "version_map_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.version_map.memory.bytes",
+                      "type": "alias"
+                    },
+                    "norms_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.norms.memory.bytes",
+                      "type": "alias"
+                    },
+                    "count": {
+                      "path": "elasticsearch.node.stats.indices.segments.count",
+                      "type": "alias"
+                    },
+                    "term_vectors_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.term_vectors.memory.bytes",
+                      "type": "alias"
+                    },
+                    "points_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.points.memory.bytes",
+                      "type": "alias"
+                    },
+                    "index_writer_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.index_writer.memory.bytes",
+                      "type": "alias"
+                    },
+                    "memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.memory.bytes",
+                      "type": "alias"
+                    },
+                    "doc_values_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.doc_values.memory.bytes",
+                      "type": "alias"
+                    },
+                    "terms_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.terms.memory.bytes",
+                      "type": "alias"
+                    },
+                    "fixed_bit_set_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.fixed_bit_set.memory.bytes",
+                      "type": "alias"
+                    },
+                    "stored_fields_memory_in_bytes": {
+                      "path": "elasticsearch.node.stats.indices.segments.stored_fields.memory.bytes",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "process": {
+              "properties": {
+                "cpu": {
+                  "properties": {
+                    "percent": {
+                      "path": "elasticsearch.node.stats.process.cpu.pct",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "os": {
+              "properties": {
+                "cpu": {
+                  "properties": {
+                    "load_average": {
+                      "properties": {
+                        "1m": {
+                          "path": "elasticsearch.node.stats.os.cpu.load_avg.1m",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "cgroup": {
+                  "properties": {
+                    "memory": {
+                      "properties": {
+                        "usage_in_bytes": {
+                          "path": "elasticsearch.node.stats.os.cgroup.memory.usage.bytes",
+                          "type": "alias"
+                        },
+                        "control_group": {
+                          "path": "elasticsearch.node.stats.os.cgroup.memory.control_group",
+                          "type": "alias"
+                        },
+                        "limit_in_bytes": {
+                          "path": "elasticsearch.node.stats.os.cgroup.memory.limit.bytes",
+                          "type": "alias"
+                        }
+                      }
+                    },
+                    "cpu": {
+                      "properties": {
+                        "stat": {
+                          "properties": {
+                            "number_of_elapsed_periods": {
+                              "path": "elasticsearch.node.stats.os.cgroup.cpu.stat.elapsed_periods.count",
+                              "type": "alias"
+                            },
+                            "number_of_times_throttled": {
+                              "path": "elasticsearch.node.stats.os.cgroup.cpu.stat.times_throttled.count",
+                              "type": "alias"
+                            },
+                            "time_throttled_nanos": {
+                              "path": "elasticsearch.node.stats.os.cgroup.cpu.stat.time_throttled.ns",
+                              "type": "alias"
+                            }
+                          }
+                        },
+                        "cfs_quota_micros": {
+                          "path": "elasticsearch.node.stats.os.cgroup.cpu.cfs.quota.us",
+                          "type": "alias"
+                        }
+                      }
+                    },
+                    "cpuacct": {
+                      "properties": {
+                        "usage_nanos": {
+                          "path": "elasticsearch.node.stats.os.cgroup.cpuacct.usage.ns",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "thread_pool": {
+              "properties": {
+                "search": {
+                  "properties": {
+                    "rejected": {
+                      "path": "elasticsearch.node.stats.thread_pool.search.rejected.count",
+                      "type": "alias"
+                    },
+                    "queue": {
+                      "path": "elasticsearch.node.stats.thread_pool.search.queue.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "get": {
+                  "properties": {
+                    "rejected": {
+                      "path": "elasticsearch.node.stats.thread_pool.get.rejected.count",
+                      "type": "alias"
+                    },
+                    "queue": {
+                      "path": "elasticsearch.node.stats.thread_pool.get.queue.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "index": {
+                  "properties": {
+                    "rejected": {
+                      "path": "elasticsearch.node.stats.thread_pool.index.rejected.count",
+                      "type": "alias"
+                    },
+                    "queue": {
+                      "path": "elasticsearch.node.stats.thread_pool.index.queue.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "bulk": {
+                  "properties": {
+                    "rejected": {
+                      "path": "elasticsearch.node.stats.thread_pool.bulk.rejected.count",
+                      "type": "alias"
+                    },
+                    "queue": {
+                      "path": "elasticsearch.node.stats.thread_pool.bulk.queue.count",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "write": {
+                  "properties": {
+                    "rejected": {
+                      "path": "elasticsearch.node.stats.thread_pool.write.rejected.count",
+                      "type": "alias"
+                    },
+                    "queue": {
+                      "path": "elasticsearch.node.stats.thread_pool.write.queue.count",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "fs": {
+              "properties": {
+                "summary": {
+                  "properties": {
+                    "total": {
+                      "properties": {
+                        "bytes": {
+                          "path": "elasticsearch.node.stats.fs.summary.total.bytes",
+                          "type": "alias"
+                        }
+                      }
+                    },
+                    "available": {
+                      "properties": {
+                        "bytes": {
+                          "path": "elasticsearch.node.stats.fs.summary.available.bytes",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "io_stats": {
+                  "properties": {
+                    "total": {
+                      "properties": {
+                        "write_operations": {
+                          "path": "elasticsearch.node.stats.fs.io_stats.total.write.operations.count",
+                          "type": "alias"
+                        },
+                        "operations": {
+                          "path": "elasticsearch.node.stats.fs.io_stats.total.operations.count",
+                          "type": "alias"
+                        },
+                        "read_operations": {
+                          "path": "elasticsearch.node.stats.fs.io_stats.total.read.operations.count",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "total": {
+                  "properties": {
+                    "total_in_bytes": {
+                      "path": "elasticsearch.node.stats.fs.summary.total.bytes",
+                      "type": "alias"
+                    },
+                    "available_in_bytes": {
+                      "path": "elasticsearch.node.stats.fs.summary.available.bytes",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "node_id": {
+              "path": "elasticsearch.node.id",
+              "type": "alias"
+            }
+          }
+        },
+        "host": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "architecture": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "hostname": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "metricset": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "period": {
+              "type": "long"
+            }
+          }
+        },
+        "event": {
+          "properties": {
+            "action": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "agent_id_status": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "category": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "code": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "created": {
+              "type": "date"
+            },
+            "dataset": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "duration": {
+              "type": "long"
+            },
+            "end": {
+              "type": "date"
+            },
+            "hash": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ingested": {
+              "type": "date"
+            },
+            "kind": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "module": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "original": {
+              "type": "keyword",
+              "index": false,
+              "doc_values": false,
+              "ignore_above": 1024
+            },
+            "outcome": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "provider": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reason": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reference": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "risk_score": {
+              "type": "float"
+            },
+            "risk_score_norm": {
+              "type": "float"
+            },
+            "sequence": {
+              "type": "long"
+            },
+            "severity": {
+              "type": "long"
+            },
+            "start": {
+              "type": "date"
+            },
+            "timezone": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "type": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "url": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "index_stats": {
+          "properties": {
+            "index": {
+              "type": "alias",
+              "path": "elasticsearch.index.name"
+            },
+            "primaries": {
+              "properties": {
+                "docs": {
+                  "properties": {
+                    "count": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.docs.count"
+                    }
+                  }
+                },
+                "indexing": {
+                  "properties": {
+                    "index_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.indexing.index_time_in_millis"
+                    },
+                    "index_total": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.indexing.index_total"
+                    },
+                    "throttle_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.indexing.throttle_time_in_millis"
+                    }
+                  }
+                },
+                "merges": {
+                  "properties": {
+                    "total_size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.merges.total_size_in_bytes"
+                    }
+                  }
+                },
+                "refresh": {
+                  "properties": {
+                    "total_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.refresh.total_time_in_millis"
+                    }
+                  }
+                },
+                "segments": {
+                  "properties": {
+                    "count": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.segments.count"
+                    }
+                  }
+                },
+                "store": {
+                  "properties": {
+                    "size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.primaries.store.size_in_bytes"
+                    }
+                  }
+                }
+              }
+            },
+            "total": {
+              "properties": {
+                "fielddata": {
+                  "properties": {
+                    "memory_size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.fielddata.memory_size_in_bytes"
+                    }
+                  }
+                },
+                "indexing": {
+                  "properties": {
+                    "index_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.indexing.index_time_in_millis"
+                    },
+                    "index_total": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.indexing.index_total"
+                    },
+                    "throttle_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.indexing.throttle_time_in_millis"
+                    }
+                  }
+                },
+                "merges": {
+                  "properties": {
+                    "total_size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.merges.total_size_in_bytes"
+                    }
+                  }
+                },
+                "query_cache": {
+                  "properties": {
+                    "memory_size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.query_cache.memory_size_in_bytes"
+                    }
+                  }
+                },
+                "refresh": {
+                  "properties": {
+                    "total_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.refresh.total_time_in_millis"
+                    }
+                  }
+                },
+                "request_cache": {
+                  "properties": {
+                    "memory_size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.request_cache.memory_size_in_bytes"
+                    }
+                  }
+                },
+                "search": {
+                  "properties": {
+                    "query_time_in_millis": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.search.query_time_in_millis"
+                    },
+                    "query_total": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.search.query_total"
+                    }
+                  }
+                },
+                "segments": {
+                  "properties": {
+                    "count": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.count"
+                    },
+                    "doc_values_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.doc_values_memory_in_bytes"
+                    },
+                    "fixed_bit_set_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.fixed_bit_set_memory_in_bytes"
+                    },
+                    "index_writer_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.index_writer_memory_in_bytes"
+                    },
+                    "memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.memory_in_bytes"
+                    },
+                    "norms_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.norms_memory_in_bytes"
+                    },
+                    "points_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.points_memory_in_bytes"
+                    },
+                    "stored_fields_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.stored_fields_memory_in_bytes"
+                    },
+                    "term_vectors_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.term_vectors_memory_in_bytes"
+                    },
+                    "terms_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.terms_memory_in_bytes"
+                    },
+                    "version_map_memory_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.segments.version_map_memory_in_bytes"
+                    }
+                  }
+                },
+                "store": {
+                  "properties": {
+                    "size_in_bytes": {
+                      "type": "alias",
+                      "path": "elasticsearch.index.total.store.size_in_bytes"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "settings": {
+      "index.mapping.total_fields.limit": 2000
+    }
+  },
+  "data_stream": {}
+}

x-pack/plugin/core/src/main/resources/monitoring-kibana-mb.json

@@ -0,0 +1,651 @@
+{
+  "index_patterns": [".monitoring-kibana-${xpack.stack.monitoring.template.version}-*"],
+  "version": ${xpack.stack.monitoring.template.release.version},
+  "template": {
+    "mappings": {
+      "properties": {
+        "process": {
+          "properties": {
+            "pid": {
+              "type": "long"
+            }
+          }
+        },
+        "@timestamp": {
+          "type": "date"
+        },
+        "ecs": {
+          "properties": {
+            "version": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            }
+          }
+        },
+        "elasticsearch": {
+          "properties": {
+            "cluster": {
+              "properties": {
+                "id": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                }
+              }
+            }
+          }
+        },
+        "service": {
+          "properties": {
+            "address": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "name": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "id": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "type": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "version": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "environment": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ephemeral_id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "hostname": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "node": {
+              "properties": {
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "origin": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "state": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "target": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            }
+          }
+        },
+        "kibana": {
+          "properties": {
+            "stats": {
+              "properties": {
+                "request": {
+                  "properties": {
+                    "total": {
+                      "type": "long"
+                    },
+                    "disconnects": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "process": {
+                  "properties": {
+                    "memory": {
+                      "properties": {
+                        "resident_set_size": {
+                          "properties": {
+                            "bytes": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "heap": {
+                          "properties": {
+                            "total": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "used": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "size_limit": {
+                              "properties": {
+                                "bytes": {
+                                  "type": "long"
+                                }
+                              }
+                            },
+                            "uptime": {
+                              "properties": {
+                                "ms": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "event_loop_delay": {
+                      "properties": {
+                        "ms": {
+                          "scaling_factor": 1000,
+                          "type": "scaled_float"
+                        }
+                      }
+                    },
+                    "uptime": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                },
+                "os": {
+                  "properties": {
+                    "distroRelease": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "distro": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "memory": {
+                      "properties": {
+                        "used_in_bytes": {
+                          "type": "long"
+                        },
+                        "total_in_bytes": {
+                          "type": "long"
+                        },
+                        "free_in_bytes": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "load": {
+                      "properties": {
+                        "5m": {
+                          "type": "half_float"
+                        },
+                        "15m": {
+                          "type": "half_float"
+                        },
+                        "1m": {
+                          "type": "half_float"
+                        }
+                      }
+                    },
+                    "platformRelease": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    },
+                    "platform": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "usage": {
+                  "properties": {
+                    "index": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "name": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "host": {
+                  "properties": {
+                    "name": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "index": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "response_time": {
+                  "properties": {
+                    "avg": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "max": {
+                      "properties": {
+                        "ms": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                },
+                "kibana": {
+                  "properties": {
+                    "status": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "concurrent_connections": {
+                  "type": "long"
+                },
+                "snapshot": {
+                  "type": "boolean"
+                },
+                "status": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                }
+              }
+            },
+            "status": {
+              "properties": {
+                "name": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "metrics": {
+                  "properties": {
+                    "requests": {
+                      "properties": {
+                        "total": {
+                          "type": "long"
+                        },
+                        "disconnects": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "concurrent_connections": {
+                      "type": "long"
+                    }
+                  }
+                },
+                "status": {
+                  "properties": {
+                    "overall": {
+                      "properties": {
+                        "state": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "kibana_stats": {
+          "properties": {
+            "process": {
+              "properties": {
+                "memory": {
+                  "properties": {
+                    "resident_set_size_in_bytes": {
+                      "path": "kibana.stats.process.memory.resident_set_size.bytes",
+                      "type": "alias"
+                    },
+                    "heap": {
+                      "properties": {
+                        "size_limit": {
+                          "path": "kibana.stats.process.memory.heap.size_limit.bytes",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "event_loop_delay": {
+                  "path": "kibana.stats.process.event_loop_delay.ms",
+                  "type": "alias"
+                },
+                "uptime_in_millis": {
+                  "path": "kibana.stats.process.uptime.ms",
+                  "type": "alias"
+                }
+              }
+            },
+            "os": {
+              "properties": {
+                "memory": {
+                  "properties": {
+                    "free_in_bytes": {
+                      "path": "kibana.stats.os.memory.free_in_bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "load": {
+                  "properties": {
+                    "5m": {
+                      "path": "kibana.stats.os.load.5m",
+                      "type": "alias"
+                    },
+                    "15m": {
+                      "path": "kibana.stats.os.load.15m",
+                      "type": "alias"
+                    },
+                    "1m": {
+                      "path": "kibana.stats.os.load.1m",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "response_times": {
+              "properties": {
+                "average": {
+                  "path": "kibana.stats.response_time.avg.ms",
+                  "type": "alias"
+                },
+                "max": {
+                  "path": "kibana.stats.response_time.max.ms",
+                  "type": "alias"
+                }
+              }
+            },
+            "requests": {
+              "properties": {
+                "total": {
+                  "path": "kibana.stats.request.total",
+                  "type": "alias"
+                },
+                "disconnects": {
+                  "path": "kibana.stats.request.disconnects",
+                  "type": "alias"
+                }
+              }
+            },
+            "kibana": {
+              "properties": {
+                "response_time": {
+                  "properties": {
+                    "max": {
+                      "path": "kibana.stats.response_time.max.ms",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "status": {
+                  "path": "kibana.stats.status",
+                  "type": "alias"
+                },
+                "uuid": {
+                  "type": "alias",
+                  "path": "service.id"
+                }
+              }
+            },
+            "concurrent_connections": {
+              "path": "kibana.stats.concurrent_connections",
+              "type": "alias"
+            },
+            "timestamp": {
+              "type": "alias",
+              "path": "@timestamp"
+            }
+          }
+        },
+        "timestamp": {
+          "type": "alias",
+          "path": "@timestamp"
+        },
+        "host": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "architecture": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "hostname": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "metricset": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "period": {
+              "type": "long"
+            }
+          }
+        },
+        "event": {
+          "properties": {
+            "action": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "agent_id_status": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "category": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "code": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "created": {
+              "type": "date"
+            },
+            "dataset": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "duration": {
+              "type": "long"
+            },
+            "end": {
+              "type": "date"
+            },
+            "hash": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ingested": {
+              "type": "date"
+            },
+            "kind": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "module": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "original": {
+              "type": "keyword",
+              "index": false,
+              "doc_values": false,
+              "ignore_above": 1024
+            },
+            "outcome": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "provider": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reason": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reference": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "risk_score": {
+              "type": "float"
+            },
+            "risk_score_norm": {
+              "type": "float"
+            },
+            "sequence": {
+              "type": "long"
+            },
+            "severity": {
+              "type": "long"
+            },
+            "start": {
+              "type": "date"
+            },
+            "timezone": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "type": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "url": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "cluster_uuid": {
+          "type": "alias",
+          "path": "elasticsearch.cluster.id"
+        }
+      }
+    },
+    "settings": {
+      "index.mapping.total_fields.limit": 2000
+    }
+  },
+  "data_stream": {}
+}

x-pack/plugin/core/src/main/resources/monitoring-logstash-mb.json

@@ -0,0 +1,642 @@
+{
+  "index_patterns": [".monitoring-logstash-${xpack.stack.monitoring.template.version}-*"],
+  "version": ${xpack.stack.monitoring.template.release.version},
+  "template": {
+    "mappings": {
+      "properties": {
+        "logstash": {
+          "properties": {
+            "node": {
+              "properties": {
+                "jvm": {
+                  "properties": {
+                    "version": {
+                      "ignore_above": 1024,
+                      "type": "keyword"
+                    }
+                  }
+                },
+                "stats": {
+                  "properties": {
+                    "jvm": {
+                      "properties": {
+                        "mem": {
+                          "properties": {
+                            "heap_max_in_bytes": {
+                              "type": "long"
+                            },
+                            "heap_used_in_bytes": {
+                              "type": "long"
+                            }
+                          }
+                        },
+                        "uptime_in_millis": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "logstash": {
+                      "properties": {
+                        "uuid": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "version": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        }
+                      }
+                    },
+                    "process": {
+                      "properties": {
+                        "cpu": {
+                          "properties": {
+                            "percent": {
+                              "type": "double"
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "pipelines": {
+                      "type": "nested"
+                    },
+                    "os": {
+                      "properties": {
+                        "cpu": {
+                          "properties": {
+                            "load_average": {
+                              "properties": {
+                                "5m": {
+                                  "type": "long"
+                                },
+                                "15m": {
+                                  "type": "long"
+                                },
+                                "1m": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        },
+                        "cgroup": {
+                          "properties": {
+                            "cpu": {
+                              "properties": {
+                                "stat": {
+                                  "properties": {
+                                    "number_of_elapsed_periods": {
+                                      "type": "long"
+                                    },
+                                    "number_of_times_throttled": {
+                                      "type": "long"
+                                    },
+                                    "time_throttled_nanos": {
+                                      "type": "long"
+                                    }
+                                  }
+                                }
+                              }
+                            },
+                            "cpuacct": {
+                              "properties": {
+                                "usage_nanos": {
+                                  "type": "long"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
+                    "events": {
+                      "properties": {
+                        "filtered": {
+                          "type": "long"
+                        },
+                        "in": {
+                          "type": "long"
+                        },
+                        "duration_in_millis": {
+                          "type": "long"
+                        },
+                        "out": {
+                          "type": "long"
+                        }
+                      }
+                    },
+                    "queue": {
+                      "properties": {
+                        "events_count": {
+                          "type": "long"
+                        }
+                      }
+                    }
+                  }
+                },
+                "state": {
+                  "properties": {
+                    "pipeline": {
+                      "properties": {
+                        "id": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "hash": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "batch_size": {
+                          "type": "long"
+                        },
+                        "ephemeral_id": {
+                          "ignore_above": 1024,
+                          "type": "keyword"
+                        },
+                        "workers": {
+                          "type": "long"
+                        },
+                        "representation": {
+                          "properties": {
+                            "type": {
+                              "ignore_above": 1024,
+                              "type": "keyword"
+                            },
+                            "version": {
+                              "ignore_above": 1024,
+                              "type": "keyword"
+                            },
+                            "hash": {
+                              "ignore_above": 1024,
+                              "type": "keyword"
+                            },
+                            "graph": {
+                              "properties": {
+                                "vertices": {
+                                  "type": "object"
+                                },
+                                "edges": {
+                                  "type": "object"
+                                }
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                },
+                "host": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "id": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                },
+                "version": {
+                  "ignore_above": 1024,
+                  "type": "keyword"
+                }
+              }
+            }
+          }
+        },
+        "logstash_state": {
+          "properties": {
+            "pipeline": {
+              "properties": {
+                "id": {
+                  "path": "logstash.node.state.pipeline.id",
+                  "type": "alias"
+                },
+                "hash": {
+                  "path": "logstash.node.state.pipeline.hash",
+                  "type": "alias"
+                }
+              }
+            }
+          }
+        },
+        "process": {
+          "properties": {
+            "pid": {
+              "type": "long"
+            }
+          }
+        },
+        "@timestamp": {
+          "type": "date"
+        },
+        "logstash_stats": {
+          "properties": {
+            "jvm": {
+              "properties": {
+                "mem": {
+                  "properties": {
+                    "heap_max_in_bytes": {
+                      "path": "logstash.node.stats.jvm.mem.heap_max_in_bytes",
+                      "type": "alias"
+                    },
+                    "heap_used_in_bytes": {
+                      "path": "logstash.node.stats.jvm.mem.heap_used_in_bytes",
+                      "type": "alias"
+                    }
+                  }
+                },
+                "uptime_in_millis": {
+                  "path": "logstash.node.stats.jvm.uptime_in_millis",
+                  "type": "alias"
+                }
+              }
+            },
+            "logstash": {
+              "properties": {
+                "uuid": {
+                  "path": "logstash.node.stats.logstash.uuid",
+                  "type": "alias"
+                },
+                "version": {
+                  "path": "logstash.node.stats.logstash.version",
+                  "type": "alias"
+                }
+              }
+            },
+            "process": {
+              "properties": {
+                "cpu": {
+                  "properties": {
+                    "percent": {
+                      "path": "logstash.node.stats.process.cpu.percent",
+                      "type": "alias"
+                    }
+                  }
+                }
+              }
+            },
+            "pipelines": {
+              "type": "nested"
+            },
+            "os": {
+              "properties": {
+                "cpu": {
+                  "properties": {
+                    "stat": {
+                      "properties": {
+                        "number_of_elapsed_periods": {
+                          "path": "logstash.node.stats.os.cgroup.cpu.stat.number_of_elapsed_periods",
+                          "type": "alias"
+                        },
+                        "number_of_times_throttled": {
+                          "path": "logstash.node.stats.os.cgroup.cpu.stat.number_of_times_throttled",
+                          "type": "alias"
+                        },
+                        "time_throttled_nanos": {
+                          "path": "logstash.node.stats.os.cgroup.cpu.stat.time_throttled_nanos",
+                          "type": "alias"
+                        }
+                      }
+                    },
+                    "load_average": {
+                      "properties": {
+                        "5m": {
+                          "path": "logstash.node.stats.os.cpu.load_average.5m",
+                          "type": "alias"
+                        },
+                        "15m": {
+                          "path": "logstash.node.stats.os.cpu.load_average.15m",
+                          "type": "alias"
+                        },
+                        "1m": {
+                          "path": "logstash.node.stats.os.cpu.load_average.1m",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                },
+                "cgroup": {
+                  "properties": {
+                    "cpuacct": {
+                      "properties": {
+                        "usage_nanos": {
+                          "path": "logstash.node.stats.os.cgroup.cpuacct.usage_nanos",
+                          "type": "alias"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "events": {
+              "properties": {
+                "in": {
+                  "path": "logstash.node.stats.events.in",
+                  "type": "alias"
+                },
+                "duration_in_millis": {
+                  "path": "logstash.node.stats.events.duration_in_millis",
+                  "type": "alias"
+                },
+                "out": {
+                  "path": "logstash.node.stats.events.out",
+                  "type": "alias"
+                }
+              }
+            },
+            "queue": {
+              "properties": {
+                "events_count": {
+                  "path": "logstash.node.stats.queue.events_count",
+                  "type": "alias"
+                }
+              }
+            }
+          }
+        },
+        "ecs": {
+          "properties": {
+            "version": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            }
+          }
+        },
+        "service": {
+          "properties": {
+            "hostname": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "address": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "name": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "id": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "type": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "version": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "environment": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ephemeral_id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "node": {
+              "properties": {
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "origin": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            },
+            "state": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "target": {
+              "properties": {
+                "address": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "environment": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "ephemeral_id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "id": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "name": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "node": {
+                  "properties": {
+                    "name": {
+                      "type": "keyword",
+                      "ignore_above": 1024
+                    }
+                  }
+                },
+                "state": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "type": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                },
+                "version": {
+                  "type": "keyword",
+                  "ignore_above": 1024
+                }
+              }
+            }
+          }
+        },
+        "host": {
+          "properties": {
+            "hostname": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "architecture": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        },
+        "timestamp": {
+          "type": "alias",
+          "path": "@timestamp"
+        },
+        "metricset": {
+          "properties": {
+            "name": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "period": {
+              "type": "long"
+            }
+          }
+        },
+        "event": {
+          "properties": {
+            "action": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "agent_id_status": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "category": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "code": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "created": {
+              "type": "date"
+            },
+            "dataset": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "duration": {
+              "type": "long"
+            },
+            "end": {
+              "type": "date"
+            },
+            "hash": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "id": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "ingested": {
+              "type": "date"
+            },
+            "kind": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "module": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "original": {
+              "type": "keyword",
+              "index": false,
+              "doc_values": false,
+              "ignore_above": 1024
+            },
+            "outcome": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "provider": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reason": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "reference": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "risk_score": {
+              "type": "float"
+            },
+            "risk_score_norm": {
+              "type": "float"
+            },
+            "sequence": {
+              "type": "long"
+            },
+            "severity": {
+              "type": "long"
+            },
+            "start": {
+              "type": "date"
+            },
+            "timezone": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "type": {
+              "type": "keyword",
+              "ignore_above": 1024
+            },
+            "url": {
+              "type": "keyword",
+              "ignore_above": 1024
+            }
+          }
+        }
+      }
+    },
+    "settings": {
+      "index.mapping.total_fields.limit": 2000
+    }
+  },
+  "data_stream": {}
+}

x-pack/plugin/monitoring/src/main/java/org/elasticsearch/xpack/monitoring/MonitoringTemplateRegistry.java

@@ -11,6 +11,7 @@ import org.apache.logging.log4j.LogManager;
 import org.apache.logging.log4j.Logger;
 import org.elasticsearch.Version;
 import org.elasticsearch.client.Client;
+import org.elasticsearch.cluster.metadata.ComposableIndexTemplate;
 import org.elasticsearch.cluster.service.ClusterService;
 import org.elasticsearch.common.settings.Setting;
 import org.elasticsearch.common.settings.Settings;
@@ -29,6 +30,13 @@ import java.util.Map;
 import java.util.Optional;
 import java.util.stream.Collectors;
 
+/**
+ * Template registry for monitoring templates. Templates are loaded and installed shortly after cluster startup.
+ *
+ * This template registry manages templates for two purposes:
+ * 1) Internal Monitoring Collection (.monitoring-{product}-7-*)
+ * 2) Stack Monitoring templates for bridging ECS format data to legacy monitoring data (.monitoring-{product}-8-*)
+ */
 public class MonitoringTemplateRegistry extends IndexTemplateRegistry {
     private static final Logger logger = LogManager.getLogger(MonitoringTemplateRegistry.class);
 
@@ -51,6 +59,17 @@ public class MonitoringTemplateRegistry extends IndexTemplateRegistry {
     private static final String TEMPLATE_VERSION_VARIABLE = "xpack.monitoring.template.version";
     private static final Map<String, String> ADDITIONAL_TEMPLATE_VARIABLES = Map.of(TEMPLATE_VERSION_VARIABLE, TEMPLATE_VERSION);
 
+    /**
+     * The stack monitoring template registry version. This is the version id for templates used by Metricbeat in version 8.x. Metricbeat
+     * writes monitoring data in ECS format as of 8.0. These templates define the ECS schema as well as alias fields for the old monitoring
+     * mappings that point to the corresponding ECS fields.
+     */
+    public static final int STACK_MONITORING_REGISTRY_VERSION = Version.V_8_0_0.id;
+    private static final String STACK_MONITORING_REGISTRY_VERSION_VARIABLE = "xpack.stack.monitoring.template.release.version";
+    private static final String STACK_TEMPLATE_VERSION = "8";
+    private static final String STACK_TEMPLATE_VERSION_VARIABLE = "xpack.stack.monitoring.template.version";
+    private static final Map<String, String> STACK_TEMPLATE_VARIABLES = Map.of(STACK_TEMPLATE_VERSION_VARIABLE, STACK_TEMPLATE_VERSION);
+
     public static final Setting<Boolean> MONITORING_TEMPLATES_ENABLED = Setting.boolSetting(
         "xpack.monitoring.templates.enabled",
         true,
@@ -121,6 +140,54 @@ public class MonitoringTemplateRegistry extends IndexTemplateRegistry {
         ADDITIONAL_TEMPLATE_VARIABLES
     );
 
+    //////////////////////////////////////////////////////////
+    // Beats metricbeat template (for matching ".monitoring-beats-8-*" indices)
+    //////////////////////////////////////////////////////////
+    public static final String BEATS_STACK_INDEX_TEMPLATE_NAME = ".monitoring-beats-mb";
+    public static final IndexTemplateConfig BEATS_STACK_INDEX_TEMPLATE = new IndexTemplateConfig(
+        BEATS_STACK_INDEX_TEMPLATE_NAME,
+        "/monitoring-beats-mb.json",
+        STACK_MONITORING_REGISTRY_VERSION,
+        STACK_MONITORING_REGISTRY_VERSION_VARIABLE,
+        STACK_TEMPLATE_VARIABLES
+    );
+
+    //////////////////////////////////////////////////////////
+    // ES metricbeat template (for matching ".monitoring-es-8-*" indices)
+    //////////////////////////////////////////////////////////
+    public static final String ES_STACK_INDEX_TEMPLATE_NAME = ".monitoring-es-mb";
+    public static final IndexTemplateConfig ES_STACK_INDEX_TEMPLATE = new IndexTemplateConfig(
+        ES_STACK_INDEX_TEMPLATE_NAME,
+        "/monitoring-es-mb.json",
+        STACK_MONITORING_REGISTRY_VERSION,
+        STACK_MONITORING_REGISTRY_VERSION_VARIABLE,
+        STACK_TEMPLATE_VARIABLES
+    );
+
+    //////////////////////////////////////////////////////////
+    // Kibana metricbeat template (for matching ".monitoring-kibana-8-*" indices)
+    //////////////////////////////////////////////////////////
+    public static final String KIBANA_STACK_INDEX_TEMPLATE_NAME = ".monitoring-kibana-mb";
+    public static final IndexTemplateConfig KIBANA_STACK_INDEX_TEMPLATE = new IndexTemplateConfig(
+        KIBANA_STACK_INDEX_TEMPLATE_NAME,
+        "/monitoring-kibana-mb.json",
+        STACK_MONITORING_REGISTRY_VERSION,
+        STACK_MONITORING_REGISTRY_VERSION_VARIABLE,
+        STACK_TEMPLATE_VARIABLES
+    );
+
+    //////////////////////////////////////////////////////////
+    // Logstash metricbeat template (for matching ".monitoring-logstash-8-*" indices)
+    //////////////////////////////////////////////////////////
+    public static final String LOGSTASH_STACK_INDEX_TEMPLATE_NAME = ".monitoring-logstash-mb";
+    public static final IndexTemplateConfig LOGSTASH_STACK_INDEX_TEMPLATE = new IndexTemplateConfig(
+        LOGSTASH_STACK_INDEX_TEMPLATE_NAME,
+        "/monitoring-logstash-mb.json",
+        STACK_MONITORING_REGISTRY_VERSION,
+        STACK_MONITORING_REGISTRY_VERSION_VARIABLE,
+        STACK_TEMPLATE_VARIABLES
+    );
+
     public static final String[] TEMPLATE_NAMES = new String[] {
         ALERTS_INDEX_TEMPLATE_NAME,
         BEATS_INDEX_TEMPLATE_NAME,
@@ -186,6 +253,20 @@ public class MonitoringTemplateRegistry extends IndexTemplateRegistry {
         }
     }
 
+    @Override
+    protected Map<String, ComposableIndexTemplate> getComposableTemplateConfigs() {
+        if (monitoringTemplatesEnabled) {
+            return parseComposableTemplates(
+                BEATS_STACK_INDEX_TEMPLATE,
+                ES_STACK_INDEX_TEMPLATE,
+                KIBANA_STACK_INDEX_TEMPLATE,
+                LOGSTASH_STACK_INDEX_TEMPLATE
+            );
+        } else {
+            return Collections.emptyMap();
+        }
+    }
+
     @Override
     protected String getOrigin() {
         return ClientHelper.MONITORING_ORIGIN;