diff --git a/data/managed/log_sources/cloudflare/tables/http_request.yml b/data/managed/log_sources/cloudflare/tables/http_request.yml
index cb79c290..6d005a98 100644
--- a/data/managed/log_sources/cloudflare/tables/http_request.yml
+++ b/data/managed/log_sources/cloudflare/tables/http_request.yml
@@ -496,7 +496,7 @@ transform: |
   if err == null {
       .url = parsed
       if .url.query != null {
-        .url.query = decode_percent!(split!(.json.ClientRequestReferer, "?")[1])
+        .url.query = decode_percent(split!(.json.ClientRequestReferer, "?")[1]) ?? null
       }
       .url.domain = del(.url.host)
   }