[Fleet] Update Elastic Agent dashboard, package icon, and data stream mappings

packages/elastic_agent/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.0"
+  changes:
+    - description: Update dashboard to CGroup CPU usage and events rates visualization and add Elastic Agent logo
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/1529
 - version: "1.1.1"
   changes:
     - description: Fix missing support for heartbeat metrics and logs

packages/elastic_agent/data_stream/apm_server_logs/fields/base-fields.yml

@@ -10,3 +10,6 @@
 - name: "@timestamp"
   type: date
   description: Event timestamp.
+- name: event.dataset
+  type: constant_keyword
+  description: Event dataset

packages/elastic_agent/data_stream/apm_server_logs/fields/ecs.yml

@@ -0,0 +1,12 @@
+- name: log
+  title: Log
+  group: 2
+  description: "Details about the event's logging mechanism or logging transport.\nThe log.* fields are typically populated with details about the logging mechanism used to create and/or transport the event. For example, syslog details belong under `log.syslog.*`.\nThe details specific to your event source are typically not logged under `log.*`, but rather in `event.*` or in other ECS fields."
+  type: group
+  fields:
+    - name: level
+      level: core
+      type: keyword
+      ignore_above: 1024
+      description: "Original log level of the log event.\nIf the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity).\nSome examples are `warn`, `err`, `i`, `informational`."
+      example: error

packages/elastic_agent/data_stream/apm_server_metrics/fields/beat-fields.yml

@@ -0,0 +1,81 @@
+- name: beat.type
+  descripion: Beat type.
+  type: keyword
+- name: beat.stats
+  description: Beat stats
+  type: group
+  fields:
+    - name: libbeat
+      type: group
+      description: >
+        Fields common to all Beats
+
+      fields:
+        - name: output
+          type: group
+          description: >
+            Output stats
+
+          fields:
+            - name: events
+              type: group
+              description: >
+                Event counters
+
+              fields:
+                - name: acked
+                  type: long
+                  description: >
+                    Number of events acknowledged
+
+                - name: active
+                  type: long
+                  description: >
+                    Number of active events
+
+                - name: batches
+                  type: long
+                  description: >
+                    Number of event batches
+
+                - name: dropped
+                  type: long
+                  description: >
+                    Number of events dropped
+
+                - name: duplicates
+                  type: long
+                  description: >
+                    Number of events duplicated
+
+                - name: failed
+                  type: long
+                  description: >
+                    Number of events failed
+
+                - name: toomany
+                  type: long
+                  description: >
+                    Number of too many events
+
+                - name: total
+                  type: long
+                  description: >
+                    Total number of events
+
+            - name: write
+              type: group
+              description: >
+                Write stats
+
+              fields:
+                - name: bytes
+                  type: long
+                  description: >
+                    Number of bytes written
+
+                - name: errors
+                  type: long
+                  description: >
+                    Number of write errors
+

packages/elastic_agent/data_stream/auditbeat_logs/fields/base-fields.yml

@@ -10,3 +10,6 @@
 - name: "@timestamp"
   type: date
   description: Event timestamp.
+- name: event.dataset
+  type: constant_keyword
+  description: Event dataset

packages/elastic_agent/data_stream/auditbeat_logs/fields/ecs.yml

@@ -0,0 +1,12 @@
+- name: log
+  title: Log
+  group: 2
+  description: "Details about the event's logging mechanism or logging transport.\nThe log.* fields are typically populated with details about the logging mechanism used to create and/or transport the event. For example, syslog details belong under `log.syslog.*`.\nThe details specific to your event source are typically not logged under `log.*`, but rather in `event.*` or in other ECS fields."
+  type: group
+  fields:
+    - name: level
+      level: core
+      type: keyword
+      ignore_above: 1024
+      description: "Original log level of the log event.\nIf the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity).\nSome examples are `warn`, `err`, `i`, `informational`."
+      example: error

packages/elastic_agent/data_stream/auditbeat_metrics/fields/beat-fields.yml

@@ -0,0 +1,81 @@
+- name: beat.type
+  descripion: Beat type.
+  type: keyword
+- name: beat.stats
+  description: Beat stats
+  type: group
+  fields:
+    - name: libbeat
+      type: group
+      description: >
+        Fields common to all Beats
+
+      fields:
+        - name: output
+          type: group
+          description: >
+            Output stats
+
+          fields:
+            - name: events
+              type: group
+              description: >
+                Event counters
+
+              fields:
+                - name: acked
+                  type: long
+                  description: >
+                    Number of events acknowledged
+
+                - name: active
+                  type: long
+                  description: >
+                    Number of active events
+
+                - name: batches
+                  type: long
+                  description: >
+                    Number of event batches
+
+                - name: dropped
+                  type: long
+                  description: >
+                    Number of events dropped
+
+                - name: duplicates
+                  type: long
+                  description: >
+                    Number of events duplicated
+
+                - name: failed
+                  type: long
+                  description: >
+                    Number of events failed
+
+                - name: toomany
+                  type: long
+                  description: >
+                    Number of too many events
+
+                - name: total
+                  type: long
+                  description: >
+                    Total number of events
+
+            - name: write
+              type: group
+              description: >
+                Write stats
+
+              fields:
+                - name: bytes
+                  type: long
+                  description: >
+                    Number of bytes written
+
+                - name: errors
+                  type: long
+                  description: >
+                    Number of write errors
+

packages/elastic_agent/data_stream/elastic_agent_logs/fields/base-fields.yml

@@ -10,3 +10,6 @@
 - name: "@timestamp"
   type: date
   description: Event timestamp.
+- name: event.dataset
+  type: constant_keyword
+  description: Event dataset

packages/elastic_agent/data_stream/elastic_agent_logs/fields/ecs.yml

@@ -0,0 +1,12 @@
+- name: log
+  title: Log
+  group: 2
+  description: "Details about the event's logging mechanism or logging transport.\nThe log.* fields are typically populated with details about the logging mechanism used to create and/or transport the event. For example, syslog details belong under `log.syslog.*`.\nThe details specific to your event source are typically not logged under `log.*`, but rather in `event.*` or in other ECS fields."
+  type: group
+  fields:
+    - name: level
+      level: core
+      type: keyword
+      ignore_above: 1024
+      description: "Original log level of the log event.\nIf the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity).\nSome examples are `warn`, `err`, `i`, `informational`."
+      example: error

packages/elastic_agent/data_stream/elastic_agent_metrics/fields/beat-fields.yml

@@ -0,0 +1,81 @@
+- name: beat.type
+  descripion: Beat type.
+  type: keyword
+- name: beat.stats
+  description: Beat stats
+  type: group
+  fields:
+    - name: libbeat
+      type: group
+      description: >
+        Fields common to all Beats
+
+      fields:
+        - name: output
+          type: group
+          description: >
+            Output stats
+
+          fields:
+            - name: events
+              type: group
+              description: >
+                Event counters
+
+              fields:
+                - name: acked
+                  type: long
+                  description: >
+                    Number of events acknowledged
+
+                - name: active
+                  type: long
+                  description: >
+                    Number of active events
+
+                - name: batches
+                  type: long
+                  description: >
+                    Number of event batches
+
+                - name: dropped
+                  type: long
+                  description: >
+                    Number of events dropped
+
+                - name: duplicates
+                  type: long
+                  description: >
+                    Number of events duplicated
+
+                - name: failed
+                  type: long
+                  description: >
+                    Number of events failed
+
+                - name: toomany
+                  type: long
+                  description: >
+                    Number of too many events
+
+                - name: total
+                  type: long
+                  description: >
+                    Total number of events
+
+            - name: write
+              type: group
+              description: >
+                Write stats
+
+              fields:
+                - name: bytes
+                  type: long
+                  description: >
+                    Number of bytes written
+
+                - name: errors
+                  type: long
+                  description: >
+                    Number of write errors
+