address pr comment

elastic · Apr 2, 2024 · 11e01d5 · 11e01d5
1 parent d1b3671
commit 11e01d5
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/packages/ti_recordedfuture/data_stream/threat/elasticsearch/ingest_pipeline/default.yml b/packages/ti_recordedfuture/data_stream/threat/elasticsearch/ingest_pipeline/default.yml
@@ -237,10 +237,10 @@ processors:
   - rename:
       field: json
       target_field: recordedfuture
-  - set:
-      field: recordedfuture.list
-      copy_from: _conf.list
-      ignore_empty_value: true
+  - rename:
+      target_field: recordedfuture.list
+      field: _conf.list
+      if: ctx._conf?.list != null
 
 #
 # Cleanup