corrected field name

elastic · Feb 1, 2023 · 5848f45 · 5848f45
1 parent 3eb0d40
commit 5848f45
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/x-pack/filebeat/module/fortinet/firewall/ingest/event.yml b/x-pack/filebeat/module/fortinet/firewall/ingest/event.yml
@@ -106,7 +106,7 @@ processors:
     field: fortinet.firewall.dst_host
     target_field: destination.domain
     ignore_missing: true
-    if: "ctx.destination?.address == null"
+    if: "ctx.destination?.domain == null"
 - convert:
     field: fortinet.firewall.sentbyte
     target_field: source.bytes