Getting "no field found in the mapping" when creating a scripted field

Elastic Stack Elastic Agent
1

Hi team,
I am using FortiGate integration in my ELK. So I need to create a new scripted fields for more visibility into that logs. Created a scripted field with the following condition.

if ( doc['fortinet.firewall.action'].value == "Add" && doc['fortinet.firewall.cfgpath'].value == "system.admin" ) { def new_field = doc.['fortinet.firewall.cfgobj'].value; }

after creating this field, the getting the error no field found in the mapping.

Added these fields into the component template mapping and also added in the index template.

Still it showing that "no field found in the mapping".
Is the script have any error or any error in the mapping in the templates. Double checked the field name and data types.
The index pattern is managed by fleet.

Thank you

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.