[sei packages] Undefined log.file.* fields breaking tests for filestream inputs

[bhapas]

What does this PR do?

Issue described in #7687

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Related issues

• Relates [8.10] Undefined log.file.* fields breaking tests for filestream inputs #7687

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2023-10-03T10:41:20.168+0000

• Duration: 19 min 28 sec

Test stats 🧪

Test	Results
Failed	0
Passed	180
Skipped	0
Total	180

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (12/12)	💚
Files	87.5% (49/56)	👎 -12.5
Classes	87.5% (49/56)	👎 -12.5
Methods	92.678% (443/478)	👍 16.92
Lines	85.884% (13349/15543)	👎 -14.116
Conditionals	100.0% (0/0)	💚

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[elasticmachine]

Package cisco_ise - 1.17.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ise

[elasticmachine]

Package cisco_nexus - 0.19.0 containing this change is available at https://epr.elastic.co/search?package=cisco_nexus

[elasticmachine]

Package f5_bigip - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=f5_bigip

[elasticmachine]

Package fortinet_fortimail - 2.10.0 containing this change is available at https://epr.elastic.co/search?package=fortinet_fortimail

[elasticmachine]

Package fortinet_fortimanager - 2.8.0 containing this change is available at https://epr.elastic.co/search?package=fortinet_fortimanager

[elasticmachine]

Package hid_bravura_monitor - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=hid_bravura_monitor

[elasticmachine]

Package juniper_srx - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=juniper_srx

[elasticmachine]

Package keycloak - 1.17.0 containing this change is available at https://epr.elastic.co/search?package=keycloak

[elasticmachine]

Package mysql_enterprise - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=mysql_enterprise

[elasticmachine]

Package sysmon_linux - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=sysmon_linux

[elasticmachine]

Package trendmicro - 1.6.0 containing this change is available at https://epr.elastic.co/search?package=trendmicro