[8.18 testing] Validate synthetic_source_keep: "none" is added to mappings for ECS tags

[andrewkroh]

We need to verify that the mapping attribute for synthetic_source_keep carries through from imported ECS mappings. synthetic_source_keep can be specified as an attribute in the ECS schema as of 8.18.

• Update an integration that contains mappings for tags to import the v8.18.0 version of elastic/ecs
• Install it to kibana
• View the associated component template for the integration
• Verify that it contains synthetic_source_keep: none for the tags field

If not present, then we need to open issues to ensure the attribute is plumbed through Fleet to the Elasticsearch mappings.

Related issues

• LogsDB: Add synthetic_source_keep = none to arrays where order/duplicates do not matter ecs#2376

[elasticmachine]

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

[andrewkroh]

Given that synthetic_source_keep is not an available attribute in package-spec, this testing should be deferred until elastic/package-spec#861 is completed.