Add processor for health_status field in status_change_logs data stream

Author: MichelLosier

packages/elastic_agent/changelog.yml

@@ -1,7 +1,7 @@
 # newer versions go on top
 - version: "2.6.7"
   changes:
-    - description: Adds health_status field to status change logs data stream
+    - description: Adds processor for health_status field to status change logs data stream
       type: enhancement
       link: https://github.com/elastic/integrations/pull/15852
 - version: "2.6.6"

packages/elastic_agent/data_stream/status_change_logs/elasticsearch/ingest_pipeline/default.yml

@@ -0,0 +1,30 @@
+---
+description: Pipeline for Elastic Agent status change logs.
+processors:
+  - script:
+      description: Derive health_status from status field
+      if: ctx.status != null
+      lang: painless
+      source: |
+        String status = ctx.status;
+        String healthStatus;
+
+        switch (status) {
+          case 'online':
+            healthStatus = 'healthy';
+            break;
+          case 'error':
+          case 'degraded':
+            healthStatus = 'unhealthy';
+            break;
+          case 'updating':
+          case 'enrolling':
+          case 'unenrolling':
+            healthStatus = 'updating';
+            break;
+          default:
+            healthStatus = status;
+        }
+
+        ctx.health_status = healthStatus;
+      ignore_failure: true

packages/elastic_agent/data_stream/status_change_logs/sample_event.json

@@ -1,16 +1,17 @@
 {
-    "@timestamp": 1576280412771,
-    "data_stream": {
-        "type": "logs",
-        "dataset": "elastic_agent.status_change",
-        "namespace": "default"
-    },
-    "agent": {
-        "id": "f2b3c4d5-e6f7-8a9b-b0c1-d2e3f4g5h6i7"
-    },
-    "status": "HEALTHY",
-    "policy_id": "test-policy",
-    "agentless": false,
-    "space_id": "default",
-    "hostname": "test-host"
-}
+  "@timestamp": 1576280412771,
+  "data_stream": {
+    "type": "logs",
+    "dataset": "elastic_agent.status_change",
+    "namespace": "default"
+  },
+  "agent": {
+    "id": "f2b3c4d5-e6f7-8a9b-b0c1-d2e3f4g5h6i7"
+  },
+  "status": "online",
+  "health_status": "healthy",
+  "policy_id": "test-policy",
+  "agentless": false,
+  "space_id": "default",
+  "hostname": "test-host"
+}

packages/elastic_agent/manifest.yml

@@ -7,7 +7,7 @@ format_version: 3.5.0
 categories: ["elastic_stack"]
 conditions:
   kibana:
-    version: "^9.2.2 || ^9.3.0"
+    version: "^8.15.0 || ^9.0.0"
   elastic:
     subscription: basic
 owner: