[Fleet] 'index: false' is ignored in fields when installing templates

[axw]

Kibana version:

8.0.0-SNAPSHOT

Elasticsearch version:

8.0.0-SNAPSHOT

Describe the bug:

When Fleet installs the Elasticsearch index template for an integration, it ignores index: false on fields. I think it's because of this:

kibana/x-pack/plugins/fleet/server/services/epm/elasticsearch/template/template.ts

Lines 280 to 282 in b382500

	if (field.index) {
	properties.index = field.index;
	}

(That should probably check field.index is defined, rather than falsy?)

Steps to reproduce:

1. Install an integration package with a field that specifies index: false
2. Check the installed index template in Kibana, field is searchable

Expected behavior:

Field should not be searchable (not indexed).

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[elasticmachine]

Pinging @elastic/fleet (Feature:EPM)

[hop-dev]

Detailed steps to reproduce/test :

• Synthetics has the field client.x509.public_key_exponent set not to index here
• add the synthetics integration to a policy
• GET /_index_template/synthetics-http
• observe that client.x509.public_key_exponent does not have index : false or if fixed should look like:

"public_key_exponent" : {
  "index" : false,
  "type" : "long"
},

[axw]

Thanks @hop-dev! ❤️