filebeat/panw: ingest fails with date parsing error when ingested via logstash

[efd6]

The PANW PANOS module ingest fails with a date parsing error during mapping when the documents have been sent via a logstash-containing path when logstash is 8.x. This appears to be due to logstash by default setting ecs_compatibility to true. This results in event.original being populated and to the ingest pipeline failing before the non-conforming date has been converted, resulting a the ingest failure being noted as being caused by the date format error.

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)