[Box Events] Remove non-ECS fields in ECS namespace

[moxarth-rathod]

Proposed commit message

box_events: remove non-ecs fields in ecs namespace

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/box_events directory.
• Run the following command to run tests.

elastic-package test -v

Related issues

• Closes box_events: take care of non-ECS fields in ECS namespace #15338

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[chrisberkhout]

Can't these values be move to actual ECS fields?

For example:

related.location.{lat,lon} --> geo.location.{lat,lon}

[moxarth-rathod]

Can't these values be move to actual ECS fields?

For example:

related.location.{lat,lon} --> geo.location.{lat,lon}

@chrisberkhout they are already present under threat.enrichment, so i think moving them to ECS fields isn’t required.

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 10f830b

History

• 💚 Build #34016 succeeded 7e4185f

cc @moxarth-rathod

[chrisberkhout]

Can't these values be move to actual ECS fields?
For example:

related.location.{lat,lon} --> geo.location.{lat,lon}

@chrisberkhout they are already present under threat.enrichment, so i think moving them to ECS fields isn’t required.

Thanks!

[elastic-vault-github-plugin-prod]

Package box_events - 3.0.0 containing this change is available at https://epr.elastic.co/package/box_events/3.0.0/