[sei] Add checks to avoid overriding event.original if present

[marc-gr]

Proposed commit message

Add checks to avoid overriding event.original if present.
On some setups (ie Logstash sends data to ES) event.original might be already present in the event body. Currently most of our integrations do not have a null check for it before trying to set it, leading to errors on these circumstances. By adding the required checks we improve handling in this setups.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Related issues

• Closes [SEI] Add check for event.original rename/set to avoid issues with Logstash events #8146

[elasticmachine]

Package slack - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=slack

[elasticmachine]

Package snort - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=snort

[elasticmachine]

Package snyk - 1.17.0 containing this change is available at https://epr.elastic.co/search?package=snyk

[elasticmachine]

Package sonicwall_firewall - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=sonicwall_firewall

[elasticmachine]

Package sophos - 3.5.0 containing this change is available at https://epr.elastic.co/search?package=sophos

[elasticmachine]

Package sophos_central - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=sophos_central

[elasticmachine]

Package suricata - 2.19.0 containing this change is available at https://epr.elastic.co/search?package=suricata

[elasticmachine]

Package tanium - 1.6.0 containing this change is available at https://epr.elastic.co/search?package=tanium

[elasticmachine]

Package tenable_io - 2.5.0 containing this change is available at https://epr.elastic.co/search?package=tenable_io

[elasticmachine]

Package tenable_sc - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=tenable_sc

[elasticmachine]

Package ti_abusech - 1.22.0 containing this change is available at https://epr.elastic.co/search?package=ti_abusech

[elasticmachine]

Package ti_cybersixgill - 1.23.0 containing this change is available at https://epr.elastic.co/search?package=ti_cybersixgill

[elasticmachine]

Package ti_maltiverse - 0.6.0 containing this change is available at https://epr.elastic.co/search?package=ti_maltiverse

[elasticmachine]

Package ti_otx - 1.20.0 containing this change is available at https://epr.elastic.co/search?package=ti_otx

[elasticmachine]

Package ti_rapid7_threat_command - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=ti_rapid7_threat_command

[elasticmachine]

Package ti_recordedfuture - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=ti_recordedfuture

[elasticmachine]

Package ti_threatq - 1.21.0 containing this change is available at https://epr.elastic.co/search?package=ti_threatq

[elasticmachine]

Package tines - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=tines

[elasticmachine]

Package trellix_edr_cloud - 0.5.0 containing this change is available at https://epr.elastic.co/search?package=trellix_edr_cloud

[elasticmachine]

Package trellix_epo_cloud - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=trellix_epo_cloud

[elasticmachine]

Package trend_micro_vision_one - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=trend_micro_vision_one

[elasticmachine]

Package vectra_detect - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=vectra_detect

[elasticmachine]

Package zeek - 2.20.0 containing this change is available at https://epr.elastic.co/search?package=zeek

[elasticmachine]

Package zerofox - 1.20.0 containing this change is available at https://epr.elastic.co/search?package=zerofox

[elasticmachine]

Package zeronetworks - 1.9.0 containing this change is available at https://epr.elastic.co/search?package=zeronetworks

[elasticmachine]

Package zscaler_zia - 2.16.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zia

[elasticmachine]

Package zscaler_zpa - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zpa