Could you please add a keyword field on the http.url mapping to be able to aggregate the url field, because it's currently only text which cannot be aggregated. Most, if not all, text field other beat agent have also has an additional keyword field to be able to aggregate on the field.
I want to be able to "group by" the urls all my heartbeat agents monitor.