Include user_agent.version in dynamic_fields (pipeline tests)

packages/apache/data_stream/access/_dev/test/pipeline/test-common-config.yml

@@ -1,5 +1,9 @@
 dynamic_fields:
   event.ingested: ".*"
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   "@timestamp": "2020-04-28T11:07:58.223Z"
   tags:

packages/auth0/data_stream/logs/_dev/test/pipeline/test-common-config.yml

@@ -1,2 +1,6 @@
 dynamic_fields:
   "event.ingested": ".*"
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'

packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   # Simulate @timestamp value from Filebeat.
   '@timestamp': '2021-11-11T01:02:03.123456789Z'

packages/barracuda/data_stream/waf/_dev/test/pipeline/test-access.log-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^(\d+\.\d+(\.|\..*)?|\d+)$'
 fields:
   tags:
     - preserve_original_event

packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - forwarded

packages/forcepoint_web/data_stream/logs/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - preserve_original_event

packages/forgerock/data_stream/am_access/_dev/test/pipeline/test-common-config.yml

@@ -1,2 +1,7 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 numeric_keyword_fields:
   - "forgerock.response.detail.active"

packages/fortinet_fortiproxy/data_stream/log/_dev/test/pipeline/test-common-config.yml

@@ -0,0 +1,6 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
+

packages/gcp/data_stream/audit/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - preserve_original_event

packages/github/data_stream/audit/_dev/test/pipeline/test-common-config.yml

@@ -3,3 +3,7 @@ fields:
     - preserve_original_event
 dynamic_fields:
   "event.ingested": "^.*$"
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'

packages/iis/data_stream/access/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^(\d+\.\d+(\.|\..*)?|\d+)$'
 fields:
   tags:
     - preserve_original_event

packages/imperva_cloud_waf/data_stream/event/_dev/test/pipeline/test-common-config.yml

@@ -6,3 +6,7 @@ dynamic_fields:
   # This can be removed after ES 8.14 is the minimum version.
   # Relates: https://github.com/elastic/elasticsearch/pull/105689
   url.extension: '^.*$'
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'

packages/modsecurity/data_stream/auditlog/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - preserve_original_event

packages/netskope/data_stream/events/_dev/test/pipeline/test-common-config.yml

@@ -5,3 +5,7 @@ dynamic_fields:
   # This can be removed after ES 8.14 is the minimum version.
   # Relates: https://github.com/elastic/elasticsearch/pull/105689
   netskope.events.url.extension: '^.*$'
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'

packages/nginx/data_stream/access/_dev/test/pipeline/test-common-config.yml

@@ -1,5 +1,9 @@
 dynamic_fields:
   "event.ingested": ".*"
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 multiline:
   first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}"
 fields:

packages/nginx_ingress_controller/data_stream/access/_dev/test/pipeline/test-ingest-raw.log-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 multiline:
   first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}"
 fields:

packages/o365/data_stream/audit/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   "@timestamp": "2020-04-28T11:07:58.223Z"
   "_conf":

packages/okta/data_stream/system/_dev/test/pipeline/test-okta-system-events.log-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   "@timestamp": "2020-04-28T11:07:58.223Z"
   tags:

packages/okta/data_stream/system/_dev/test/pipeline/test-okta-system-no-flattened-events.log-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   "@timestamp": "2020-04-28T11:07:58.223Z"
   tags:

packages/okta/data_stream/system/_dev/test/pipeline/test-okta-system-yes-flattened-events.log-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   "@timestamp": "2020-04-28T11:07:58.223Z"
   tags:

packages/proofpoint_tap/data_stream/clicks_permitted/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - preserve_original_event

packages/slack/data_stream/audit/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - preserve_original_event

packages/sophos/data_stream/xg/_dev/test/pipeline/test-common-config.yml

@@ -1,4 +1,8 @@
 dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
   "network.community_id": ".*"
 fields:
   tags:

packages/suricata/data_stream/eve/_dev/test/pipeline/test-common-config.yml

@@ -1,5 +1,9 @@
 dynamic_fields:
   "event.ingested": ".*"
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   "@timestamp": "2020-04-28T11:07:58.223Z"
   tags:

packages/trend_micro_vision_one/data_stream/detection/_dev/test/pipeline/test-common-config.yml

@@ -1,3 +1,8 @@
+dynamic_fields:
+  # This can be removed after ES 8.16.2 is the latest minimum version
+  # Once removed, it requires to update pipeline tests to remove the trailing dot where required.
+  # Relates:  https://github.com/elastic/elasticsearch/pull/117213
+  "user_agent.version": '^\d+\.\d+(\.|\..*)?$'
 fields:
   tags:
     - preserve_original_event