From 8d395dc465911918c3a2633bffb58199b524e7fa Mon Sep 17 00:00:00 2001
From: Wes <wlambertts@gmail.com>
Date: Mon, 13 Mar 2023 20:54:13 +0000
Subject: [PATCH] Add Elastic Agent default data stream backing indices for
 management by Curator

---
 salt/curator/defaults.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/salt/curator/defaults.yaml b/salt/curator/defaults.yaml
index 237a50c81..958dd99ef 100644
--- a/salt/curator/defaults.yaml
+++ b/salt/curator/defaults.yaml
@@ -15,6 +15,27 @@ elasticsearch:
     logs-zeek-so:
       close: 30
       delete: 365
+    logs-elastic_agent-metricbeat-default:
+      close: 30
+      delete: 365
+    logs-elastic_agent-osquerybeat-default:
+      close: 30
+      delete: 365
+    logs-elastic_agent-fleet_server-default:
+      close: 30
+      delete: 365
+    logs-elastic_agent-filebeat-default:
+      close: 30
+      delete: 365
+    logs-elastic_agent-default:
+      close: 30
+      delete: 365
+    logs-system-auth-default:
+      close: 30
+      delete: 365
+    logs-system-syslog-default:
+      close: 30
+      delete: 365
     so-beats:
       close: 30
       delete: 365