From cfe979ee526d0c29201a423fcaf3c903e73f1daa Mon Sep 17 00:00:00 2001
From: Kostas Krikellas <131142368+kkrik-es@users.noreply.github.com>
Date: Fri, 6 Sep 2024 15:56:12 +0300
Subject: [PATCH] Keep array source in logsdb mode

Test this change in nightlies, to decide whether to enable it by default.

Related to https://github.com/elastic/elasticsearch/issues/112354
---
 .../logs/templates/component/track-shared-logsdb-mode.json | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/elastic/logs/templates/component/track-shared-logsdb-mode.json b/elastic/logs/templates/component/track-shared-logsdb-mode.json
index 4d0049b34..a2b08886b 100644
--- a/elastic/logs/templates/component/track-shared-logsdb-mode.json
+++ b/elastic/logs/templates/component/track-shared-logsdb-mode.json
@@ -3,9 +3,12 @@
       "settings": {
         {% if index_mode %}
         "index": {
-            "mode": {{ index_mode | tojson }}
+            "mode": {{ index_mode | tojson }},
+            "mapping": {
+                "synthetic_source_keep": "arrays"
+            }
         }
         {% endif %}
       }
     }
-  }
\ No newline at end of file
+  }