securityonion/salt/elasticsearch/templates/component/elastic-agent/so-elastic-agent-monitor.json

{
  "template": {
    "mappings": {
      "properties": {
        "agent": {
          "type": "object",
          "properties": {
            "hostname": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "last_checkin_status": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "last_checkin": {
              "type": "date"
            },
            "name": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "offline_duration_hours": {
              "type": "integer"
            },
            "policy_id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "status": {
              "ignore_above": 1024,
              "type": "keyword"
            }
          }
        }
      }
    }
  }
}