[RabbitMQ] Added dimension fields for rabbitmq queue datastream

packages/rabbitmq/changelog.yml

@@ -1,3 +1,8 @@
+- version: "1.8.3"
+  changes:
+    - description: Added dimension fields for queue datastream to support TSDB.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/5660
 - version: "1.8.2"
   changes:
     - description: Added dimension fields for node datastream to enable TSDB.

packages/rabbitmq/data_stream/queue/fields/agent.yml

@@ -25,6 +25,7 @@
       ignore_above: 1024
       description: Instance ID of the host machine.
       example: i-1234567890abcdef0
+      dimension: true
     - name: instance.name
       level: extended
       type: keyword
@@ -42,6 +43,7 @@
       ignore_above: 1024
       description: Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean.
       example: aws
+      dimension: true
     - name: region
       level: extended
       type: keyword
@@ -51,6 +53,7 @@
     - name: project.id
       type: keyword
       description: Name of the project in Google Cloud.
+      dimension: true
     - name: image.id
       type: keyword
       description: Image ID for the cloud instance.
@@ -67,6 +70,7 @@
       type: keyword
       ignore_above: 1024
       description: Unique container id.
+      dimension: true
     - name: image.name
       level: extended
       type: keyword
@@ -134,6 +138,7 @@
       level: core
       type: keyword
       ignore_above: 1024
+      dimension: true
       description: 'Name of the host.
 
         It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use.'
@@ -195,4 +200,13 @@
       example: "stretch"
       description: >
         OS codename, if any.
+
+- name: agent
+  title: Agent
+  type: group
+  fields:
+    - name: id
+      type: keyword
+      ignore_above: 1024
+      dimension: true
 

packages/rabbitmq/data_stream/queue/fields/ecs.yml

@@ -2,5 +2,6 @@
   name: ecs.version
 - external: ecs
   name: service.address
+  dimension: true
 - external: ecs
   name: service.type

packages/rabbitmq/data_stream/queue/fields/fields.yml

@@ -3,6 +3,8 @@
   fields:
     - name: name
       type: keyword
+      # Reason for adding as dimension field : There can be same queue names for multiple vhosts.
+      dimension: true
       description: |
         The name of the queue with non-ASCII characters escaped as in C.
     - name: durable

packages/rabbitmq/data_stream/queue/fields/package-fields.yml

@@ -3,5 +3,7 @@
   fields:
     - name: vhost
       type: keyword
+      # Reason for adding as dimension field : There can be multiple vhosts in a cluster.
+      dimension: true
       description: |
         Virtual host name with non-ASCII characters escaped as in C.

packages/rabbitmq/docs/README.md

@@ -594,6 +594,7 @@ An example event for `queue` looks as following:
 | Field | Description | Type |
 |---|---|---|
 | @timestamp | Event timestamp. | date |
+| agent.id |  | keyword |
 | cloud.account.id | The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. | keyword |
 | cloud.availability_zone | Availability zone in which this host is running. | keyword |
 | cloud.image.id | Image ID for the cloud instance. | keyword |

packages/rabbitmq/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 1.0.0
 name: rabbitmq
 title: RabbitMQ Logs
-version: 1.8.2
+version: 1.8.3
 license: basic
 description: Collect and parse logs from RabbitMQ servers with Elastic Agent.
 type: integration