diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.apm_server@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.apm_server@package.json
new file mode 100644
index 000000000..b26b7fcd4
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.apm_server@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.apm_server@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.apm_server-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.auditbeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.auditbeat@package.json
new file mode 100644
index 000000000..2bb67d287
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.auditbeat@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.auditbeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.auditbeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.cloudbeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.cloudbeat@package.json
new file mode 100644
index 000000000..10ac8dfef
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.cloudbeat@package.json
@@ -0,0 +1,347 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.cloudbeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.cloudbeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "decision_id",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "message": {
+                "type": "match_only_text"
+              },
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "result": {
+                "type": "object"
+              },
+              "input": {
+                "type": "object"
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "decision_id": {
+                "type": "text"
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.endpoint_security@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.endpoint_security@package.json
new file mode 100644
index 000000000..fee2bb3ab
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.endpoint_security@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.endpoint_security@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.endpoint_security-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.filebeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.filebeat@package.json
new file mode 100644
index 000000000..c03976ec2
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.filebeat@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.filebeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.filebeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.fleet_server@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.fleet_server@package.json
new file mode 100644
index 000000000..378225a50
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.fleet_server@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.fleet_server@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.fleet_server-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.heartbeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.heartbeat@package.json
new file mode 100644
index 000000000..523305d3e
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.heartbeat@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.heartbeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.heartbeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.metricbeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.metricbeat@package.json
new file mode 100644
index 000000000..65ab6d0ff
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.metricbeat@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.metricbeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.metricbeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.osquerybeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.osquerybeat@package.json
new file mode 100644
index 000000000..6c59b3b53
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.osquerybeat@package.json
@@ -0,0 +1,337 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.osquerybeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.osquerybeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.packetbeat@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.packetbeat@package.json
new file mode 100644
index 000000000..fe8c6ede4
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent.packetbeat@package.json
@@ -0,0 +1,330 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent.packetbeat@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent.packetbeat-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}
diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent@package.json b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent@package.json
new file mode 100644
index 000000000..c3eb4bc18
--- /dev/null
+++ b/salt/elasticsearch/templates/component/elastic-agent/logs-elastic_agent@package.json
@@ -0,0 +1,390 @@
+{
+  "component_templates": [
+    {
+      "name": "logs-elastic_agent@package",
+      "component_template": {
+        "template": {
+          "settings": {
+            "index": {
+              "lifecycle": {
+                "name": "logs"
+              },
+              "codec": "best_compression",
+              "default_pipeline": "logs-elastic_agent-1.7.0",
+              "mapping": {
+                "total_fields": {
+                  "limit": "10000"
+                }
+              },
+              "query": {
+                "default_field": [
+                  "cloud.account.id",
+                  "cloud.availability_zone",
+                  "cloud.instance.id",
+                  "cloud.instance.name",
+                  "cloud.machine.type",
+                  "cloud.provider",
+                  "cloud.region",
+                  "cloud.project.id",
+                  "cloud.image.id",
+                  "container.id",
+                  "container.image.name",
+                  "container.name",
+                  "host.architecture",
+                  "host.hostname",
+                  "host.id",
+                  "host.mac",
+                  "host.name",
+                  "host.os.family",
+                  "host.os.kernel",
+                  "host.os.name",
+                  "host.os.platform",
+                  "host.os.version",
+                  "host.os.build",
+                  "host.os.codename",
+                  "host.type",
+                  "ecs.version",
+                  "agent.build.original",
+                  "agent.ephemeral_id",
+                  "agent.id",
+                  "agent.name",
+                  "agent.type",
+                  "agent.version",
+                  "log.level",
+                  "message",
+                  "elastic_agent.id",
+                  "elastic_agent.process",
+                  "elastic_agent.version",
+                  "component.id",
+                  "component.type",
+                  "component.binary",
+                  "component.state",
+                  "component.old_state",
+                  "unit.id",
+                  "unit.type",
+                  "unit.state",
+                  "unit.old_state"
+                ]
+              }
+            }
+          },
+          "mappings": {
+            "dynamic": false,
+            "dynamic_templates": [
+              {
+                "container.labels": {
+                  "path_match": "container.labels.*",
+                  "mapping": {
+                    "type": "keyword"
+                  },
+                  "match_mapping_type": "string"
+                }
+              }
+            ],
+            "properties": {
+              "container": {
+                "properties": {
+                  "image": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "agent": {
+                "properties": {
+                  "build": {
+                    "properties": {
+                      "original": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ephemeral_id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "log": {
+                "properties": {
+                  "level": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "elastic_agent": {
+                "properties": {
+                  "process": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "snapshot": {
+                    "type": "boolean"
+                  }
+                }
+              },
+              "message": {
+                "type": "text"
+              },
+              "cloud": {
+                "properties": {
+                  "availability_zone": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "image": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "instance": {
+                    "properties": {
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "provider": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "machine": {
+                    "properties": {
+                      "type": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "project": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "region": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "account": {
+                    "properties": {
+                      "id": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  }
+                }
+              },
+              "component": {
+                "properties": {
+                  "binary": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "old_state": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "wildcard"
+                  },
+                  "state": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "unit": {
+                "properties": {
+                  "old_state": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "wildcard"
+                  },
+                  "state": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "@timestamp": {
+                "type": "date"
+              },
+              "ecs": {
+                "properties": {
+                  "version": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "data_stream": {
+                "properties": {
+                  "namespace": {
+                    "type": "constant_keyword"
+                  },
+                  "type": {
+                    "type": "constant_keyword"
+                  },
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              },
+              "host": {
+                "properties": {
+                  "hostname": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "os": {
+                    "properties": {
+                      "build": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "kernel": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "codename": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "name": {
+                        "ignore_above": 1024,
+                        "type": "keyword",
+                        "fields": {
+                          "text": {
+                            "type": "text"
+                          }
+                        }
+                      },
+                      "family": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "version": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      },
+                      "platform": {
+                        "ignore_above": 1024,
+                        "type": "keyword"
+                      }
+                    }
+                  },
+                  "domain": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "ip": {
+                    "type": "ip"
+                  },
+                  "containerized": {
+                    "type": "boolean"
+                  },
+                  "name": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "id": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "type": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "mac": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  },
+                  "architecture": {
+                    "ignore_above": 1024,
+                    "type": "keyword"
+                  }
+                }
+              },
+              "event": {
+                "properties": {
+                  "dataset": {
+                    "type": "constant_keyword"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "_meta": {
+          "package": {
+            "name": "elastic_agent"
+          },
+          "managed_by": "fleet",
+          "managed": true
+        }
+      }
+    }
+  ]
+}