[okta] validate okta.client.ip as IP address

[andrewkroh]

The okta.client.ip value is not validated as an IP address before being copied into client.ip and source.ip. The convert processors type: ip can be used. An on_failure handler can be used to remove the field if it is not a valid IP. All three okta.client.ip, source.ip, and client.ip are mapped as IP data types so that data must be valid to prevent mapping exceptions.

integrations/packages/okta/data_stream/system/elasticsearch/ingest_pipeline/default.yml

Lines 199 to 203 in 045ae3b

	- rename:
	field: json.client.ipAddress
	target_field: okta.client.ip
	ignore_missing: true
	ignore_failure: true

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[adriansr]

as a note, the invalid IP address that is received from the Okta API is "null" (as a string).