[ecs] Upgrade okta to ecs 1.8.0 and move js processor to ingest pipel…

…ine (elastic#23929)

* Upgrade okta to ecs 1.8.0 and move js processor to ingest pipeline

* Add description field and set _id properly

CHANGELOG.next.asciidoc

@@ -846,6 +846,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Upgrade sophos/xg fileset to ECS 1.8.0. {issue}23118[23118] {pull}23967[23967]
 - Upgrade system/auth to ECS 1.8 {issue}23118[23118] {pull}23961[23961]
 - Upgrade elasticsearch/audit to ECS 1.8 {issue}23118[23118] {pull}24000[24000]
+- Upgrade okta to ecs 1.8.0 and move js processor to ingest pipeline {issue}23118[23118] {pull}23929[23929]
 
 *Heartbeat*
 

x-pack/filebeat/module/okta/system/config/input.yml

@@ -50,12 +50,16 @@ tags: {{.tags | tojson}}
 publisher_pipeline.disable_host: {{ inList .tags "forwarded" }}
 
 processors:
-  - script:
-      lang: javascript
-      id: okta_system_script
-      file: ${path.home}/module/okta/system/config/pipeline.js
-      params:
-        keep_original_message: {{ .keep_original_message }}
+  - decode_json_fields:
+      fields:
+        - message
+      target: json
+{{ if eq .keep_original_message true }}
+  - rename:
+      fields:
+        - from: message
+          to: event.original
+{{ end }}
   - add_fields:
       target: ''
       fields: