improve validation of risk_message fields

[patel-bhavin]

One of the errors that is seen during integration testing is the tokenized field $field$ is not present in the search output. Lets add check this in validate so that we can catch this earlier before integration testing.