Update .agents index data model

ecs/agent/fields/custom/host.yml

@@ -0,0 +1,6 @@
+---
+- name: host
+  reusable:
+    top_level: false
+    expected:
+      - agent

ecs/agent/fields/custom/os.yml

@@ -0,0 +1,6 @@
+---
+- name: os
+  reusable:
+    top_level: false
+    expected:
+      - agent.host

ecs/agent/fields/custom/risk.yml

@@ -0,0 +1,6 @@
+---
+- name: risk
+  reusable:
+    top_level: false
+    expected:
+      - agent.host

ecs/agent/fields/custom/wazuh-agent.yml

@@ -20,8 +20,13 @@
       level: custom
       description: >
         The agent's last login.
-    - name: is_connected
-      type: boolean
+    - name: status
+      type: keyword
       level: custom
       description: >
         Agents' interpreted connection status depending on `agent.last_login`.
+      allowed_values:
+        - name: active
+          description: Active agent status
+        - name: disconnected
+          description: Disconnected agent status

ecs/agent/fields/subset.yml

@@ -13,10 +13,6 @@ fields:
       groups: {}
       key: {}
       last_login: {}
-      is_connected: {}
-  host:
-    fields:
-      ip: {}
-      os:
-        fields:
-          full: {}
+      status: {}
+      host:
+        fields: "*"