We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 3ca53aa commit 582242aCopy full SHA for 582242a
1 file changed
x-pack/filebeat/module/threatintel/otx/ingest/pipeline.yml
@@ -89,7 +89,7 @@ processors:
89
field: threatintel.otx.indicator
90
target_field: threatintel.indicator.url.full
91
ignore_missing: true
92
- if: "ctx?.threatintel?.otx?.type == 'url' && ctx?.threatintel?.indicator?.url?.original == null"
+ if: "ctx?.threatintel?.otx?.type == 'URL' && ctx?.threatintel?.indicator?.url?.original == null"
93
- rename:
94
95
target_field: threatintel.indicator.url.path
0 commit comments