From 0d2698bc1e151f028a8660c71a9d16979d78a0d6 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Tue, 6 Feb 2024 23:17:18 +0000
Subject: [PATCH] added check for threat intel (#849)

Signed-off-by: Amardeepsingh Siglani <amardeep7194@gmail.com>
(cherry picked from commit 9d5613884907fcaa93f5757e46abffb941c2e558)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 .../containers/ConfigureFieldMapping.tsx              | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx b/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx
index 4561009c3..16a9e178b 100644
--- a/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx
+++ b/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx
@@ -276,9 +276,14 @@ export default class ConfigureFieldMapping extends Component<
             mappingsView.response.properties[ruleFieldName].path;
         });
         let threatIntelFeedFields = new Set();
-        mappingsView.response.threat_intel_field_aliases?.forEach(({ fields }) => {
-          fields.forEach((field) => threatIntelFeedFields.add(field));
-        });
+
+        // Only if threat_intel is enabled, we want to show the relevant fields for mapping
+        if (this.state.detector.threat_intel_enabled) {
+          mappingsView.response.threat_intel_field_aliases?.forEach(({ fields }) => {
+            fields.forEach((field) => threatIntelFeedFields.add(field));
+          });
+        }
+
         mappingsView.response.unmapped_field_aliases?.forEach((ruleFieldName) => {
           if (
             !ruleFieldsForEnabledRules.has(ruleFieldName) &&