We currently search for data in .monitoring-* and metricbeat-*, but once packages are an option, we'll need to search against the correct metrics-{dataset}-* data stream pattern(s). And because we no longer plan to support metricbeat-* indices, we should remove that pattern from the search.

AC:

• metricbeat-* is removed from the search pattern for Stack Monitoring queries
• metrics-* is added to the search pattern for Stack Monitoring queries -- there are two options for how to do this correctly
  • Option 1: we use the correct datasets for the patterns (metrics-{dataset}-*)
  • Option 2: we search metrics-* but use a "constant_keyword" field value as part of the query
• Understand what changes are needed for functional tests and fix or log a ticket to update (note: esarchiver has had issues with data streams in the past)