add log.* mapping for elastic-agent

[jrmolin]

Proposed commit message

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• [ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• Closes https://github.com/elastic/integration-experience/issues/425

Screenshots

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

Package m365_defender 👍(4) 💚(1) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
incident	1067.24	822.03	-245.21 (-22.98%)	💔
vulnerability	10204.08	6357.28	-3846.8 (-37.7%)	💔
vulnerability	10204.08	6535.95	-3668.13 (-35.95%)	💔

Package o365 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
audit	2159.83	1483.68	-676.15 (-31.31%)	💔

To see the full report comment with /test benchmark fullreport

[elasticmachine]

Pinging @elastic/elastic-agent (Team:Elastic-Agent)

[elasticmachine]

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

[elasticmachine]

💔 Build Failed

• Buildkite Build
• Commit: 3a14d86

Failed CI Steps

• Check integrations modsecurity
• Check integrations tanium

History

• 💔 Build #34885 failed 793b17c
• 💔 Build #34884 failed 6b98f72
• 💚 Build #34491 succeeded b998ec6

[mrodm]

I see that this was added because of this error:
https://buildkite.com/elastic/integrations/builds/34885#019adb5a-c571-4e28-86c2-10296b72dde4/112-114

This happens because post-checkout hook failed (due to merge conflicts) and the .buildkite/hooks/pre-command hook was not executed. Once these merge conflicts with the target branch are solved, this failure should disappear.

That variable is set in the pre-command hook and I was supposed to have value in the pre-exit hook too, but this is not the case if post-checkout fails:

integrations/.buildkite/hooks/pre-command

Lines 25 to 28 in bb632b7

	REPO_NAME=$(repo_name "${BUILDKITE_REPO}")
	export REPO_NAME
	export TMP_FOLDER_TEMPLATE_BASE="tmp.${REPO_NAME}"

Looking at the current usages of these variables, I think those variables can be removed completely @jrmolin
You can revert this change, and I'll create a PR to remove those variables. Thereby, this PR just modifies elastic_agent package (so no need to test all the other packages in the repo).

[mrodm]

Created PR for that @jrmolin , I think you can revert that change in favor of the changes in #16233

[mrodm]

Hi @jrmolin
#16233 has been merged, so those variables have been removed.
You would need to update your branch and solve the conflicts (sorry 😅 )