• Breaking change

Proposed commit message

Please explain:

• WHAT: We change the default value of the cloudwatch_lods data_stream.dataset to aws.cloudwatch_logs
• WHY: This needs to match the package name cloudwatch_logs in order the preinstalled ingest mappings/templates for the given datastream to apply

Checklist

• I have reviewedtips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package'schangelog.yml file.
• I have verified that Kibana version constraints are current according toguidelines.
• I have verified that any added dashboard complies with Kibana'sDashboard good practices

How to test this PR locally

• Clone dir
• cd packages/integrations/kubernetes
• elastic-package build
• elastic-package stack up -d -vvv --version=9.0.0-SNAPSHOT
• Create an elastic-agent policy
• Add kubernetes integration. The version 2.45.0 should be available

Related issues

• Closes #AWS CloudWatch logs: should we change the predefined custom dataset name? #12640

Screenshots

This is how the discalimer is displayed:

The default ingest template is displayed below:

So we changed the datastream.dataset toaws.cloudwatch_logs

Successful processing of cloudwatch events:

Important: We enable the preserve_original event that is defined iningest pipeline

This one works fine as you can see in previous image

But we test again with version 2.44.0:

See that event.original is not present and that that preserve_original.event is present that indicates that the option was enabled.