add heartbeat billable field

[joeypoon]

Change Summary

Adds a new boolean field billable to the heartbeat mapping. This field is used to determine whether a particular heartbeat document should be included in billing calculations.

Sample values

Sample document:

{
    "@timestamp": "2023-07-18T20:40:09.279939Z",
    "agent": {
        "id": "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
    },
    "data_stream": {
        "dataset": "endpoint.heartbeat",
        "namespace": "default",
        "type": ".logs"
    },
    "message": "Endpoint heartbeat",
    "event": {
        "ingested": "2023-07-18T20:40:09.279939Z"
    },
    "billable": true
}

Release Target

8.15

For mapping changes:

• I ran make after making the schema changes, and committed all changes

[elasticmachine]

Package endpoint - 8.15.0 containing this change is available at https://epr.elastic.co/search?package=endpoint