"Saved 'field' parameter is now invalid" for SSH login attempts

There is an open issue with this problem: Saved `field` parameter is now invalid. · Issue #6489 · elastic/beats · GitHub

I have found a possible workaround on the forum: