[1password] Add new event.action to 1Password item usages

[anthonythleung]

What does this PR do?

This PR adds the event.action field to Item Usages stream and remove the newly added location field in favour of the built in GeoIP processor on 1Password Events Reporting integration package.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• I have added the new processor rule to the item usages and sign in attempts elasticsearch ingest pipeline
• I have updated the tests to match the addition

Related

#2367

1Password Events API Reference

Screenshots

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
[](https://ci-stats.elastic.co/app/apm/services/beats-ci/transactions/view?rangeFrom=2022-03-07T16:56:42.371Z&rangeTo=2022-03-07T17:16:42.371Z&transactionName=BUILD Ingest-manager/integrations/PR-{number}&transactionType=job&latencyAggregationType=avg&traceId=db918342264c5b22ca32cc3e18bdef3c&transactionId=2fbff5c3dc9ce2d2)

Expand to view the summary

Build stats

• Start Time: 2022-03-07T17:06:42.371+0000

• Duration: 13 min 7 sec

Test stats 🧪

Test	Results
Failed	0
Passed	25
Skipped	0
Total	25

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[andrewkroh]

/test

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[andrewkroh]

There was a CI failure for:

[2022-03-07T16:17:58.186Z] README.md is outdated. Rebuild the package with 'elastic-package build'
[2022-03-07T16:17:58.186Z] Error: checking package failed: checking readme files are up-to-date failed: checking readme files are up-to-date failed

[P1llus]

/test

[P1llus]

Much appreciated @anthonythleung!

I will merge this a bit later, and the new version should appear for users a bit after that.