`[0] parsing field value failed: field "event.outcome"'s value "1" is not one of the allowed values (failure, success, unknown)` "1" => "success" Part of https://github.com/elastic/integrations/issues/3016