Skip to content

[Fleet] Mapping does not reflect the fields definition in package #160403

@tetianakravchenko

Description

@tetianakravchenko

Kibana version:
8.8.0
Elasticsearch version:
8.8.0
Server OS version:

Browser version:

Browser OS version:

Original install method (e.g. download page, yum, from source, etc.):
tested in elastic-package and cloud

Description of the problem including expected versus actual behavior:
package field definitions are not respected and mapping does not include expected configuration. Example: in package field defined as a of type scaled_float , in mapping this field appear as long (seems like dynamic mapping applies here). Some other metadata is not respected as well (like unit and metric_type) and are missing

Steps to reproduce:

  1. Install system package - specifically diskio data_stream
  2. Check the mapping of the host.disk.read.bytes field:
mapping:
"host": {
       "properties": {
         "architecture": {
           "type": "keyword",
           "ignore_above": 1024
         },
         "containerized": {
           "type": "boolean"
         },
         "disk": {
           "properties": {
             "read": {
               "properties": {
                 "bytes": {
                   "type": "long"
                 }
               }
             },
             "write": {
               "properties": {
                 "bytes": {
                   "type": "long"
                 }
               }
             }
           }
         },
  1. compare to the package definition - https://github.com/elastic/integrations/blob/main/packages/system/data_stream/diskio/fields/fields.yml#L123-L137
- name: host
  type: group
  fields:
    - name: disk.read.bytes
      type: scaled_float
      unit: byte
      metric_type: gauge
      description: |
        The total number of bytes read successfully in a given period of time.

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Describe the feature:

Metadata

Metadata

Assignees

Labels

Team:FleetTeam label for Observability Data Collection Fleet team

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions