[prometheus] Use ecs definition of the 'event.dataset' field

packages/prometheus/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.12.0"
+  changes:
+    - description: Use ecs definition of the 'event.dataset' field
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/7667
 - version: "1.11.0"
   changes:
     - description: Enable TSDB by default for remote_write datastreams. This improves storage usage and query performance. For more details, see https://www.elastic.co/guide/en/elasticsearch/reference/current/tsds.html

packages/prometheus/data_stream/collector/fields/base-fields.yml

@@ -14,7 +14,3 @@
   type: constant_keyword
   description: Event module.
   value: prometheus
-- name: event.dataset
-  type: constant_keyword
-  description: Event dataset.
-  value: prometheus.collector

packages/prometheus/data_stream/collector/fields/ecs.yml

@@ -8,3 +8,5 @@
 - external: ecs
   name: agent.id
   dimension: true
+- external: ecs
+  name: event.dataset

packages/prometheus/data_stream/query/fields/base-fields.yml

@@ -14,7 +14,3 @@
   type: constant_keyword
   description: Event module.
   value: prometheus
-- name: event.dataset
-  type: constant_keyword
-  description: Event dataset.
-  value: prometheus.query

packages/prometheus/data_stream/query/fields/ecs.yml

@@ -8,3 +8,5 @@
 - external: ecs
   name: agent.id
   dimension: true
+- external: ecs
+  name: event.dataset

packages/prometheus/data_stream/remote_write/fields/base-fields.yml

@@ -14,7 +14,3 @@
   type: constant_keyword
   description: Event module.
   value: prometheus
-- name: event.dataset
-  type: constant_keyword
-  description: Event dataset.
-  value: prometheus.remote_write

packages/prometheus/data_stream/remote_write/fields/ecs.yml

@@ -7,3 +7,5 @@
 - external: ecs
   name: agent.id
   dimension: true
+- external: ecs
+  name: event.dataset

packages/prometheus/docs/README.md

@@ -200,7 +200,7 @@ The fields reported are:
 | data_stream.namespace | Data stream namespace. | constant_keyword |  |
 | data_stream.type | Data stream type. | constant_keyword |  |
 | ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |  |
-| event.dataset | Event dataset. | constant_keyword |  |
+| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |  |
 | event.module | Event module. | constant_keyword |  |
 | host.architecture | Operating system architecture. | keyword |  |
 | host.containerized | If the host is a container. | boolean |  |
@@ -414,7 +414,7 @@ The fields reported are:
 | data_stream.namespace | Data stream namespace. | constant_keyword |  |
 | data_stream.type | Data stream type. | constant_keyword |  |
 | ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |  |
-| event.dataset | Event dataset. | constant_keyword |  |
+| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |  |
 | event.module | Event module. | constant_keyword |  |
 | host.architecture | Operating system architecture. | keyword |  |
 | host.containerized | If the host is a container. | boolean |  |
@@ -637,7 +637,7 @@ The fields reported are:
 | data_stream.namespace | Data stream namespace. | constant_keyword |  |
 | data_stream.type | Data stream type. | constant_keyword |  |
 | ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |  |
-| event.dataset | Event dataset. | constant_keyword |  |
+| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |  |
 | event.module | Event module. | constant_keyword |  |
 | host.architecture | Operating system architecture. | keyword |  |
 | host.containerized | If the host is a container. | boolean |  |

packages/prometheus/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 2.10.0
 name: prometheus
 title: Prometheus
-version: 1.11.0
+version: 1.12.0
 description: Collect metrics from Prometheus servers with Elastic Agent.
 type: integration
 categories: