diff --git a/docs/reference/tab-widgets/esql/esql-getting-started-enrich-policy.asciidoc b/docs/reference/tab-widgets/esql/esql-getting-started-enrich-policy.asciidoc index a1898dffda684..c51a46bdef3b3 100644 --- a/docs/reference/tab-widgets/esql/esql-getting-started-enrich-policy.asciidoc +++ b/docs/reference/tab-widgets/esql/esql-getting-started-enrich-policy.asciidoc @@ -10,7 +10,7 @@ PUT clientips { "mappings": { "properties": { - "client.ip": { + "client_ip": { "type": "keyword" }, "env": { @@ -22,21 +22,21 @@ PUT clientips PUT clientips/_bulk { "index" : {}} -{ "client.ip": "172.21.0.5", "env": "Development" } +{ "client_ip": "172.21.0.5", "env": "Development" } { "index" : {}} -{ "client.ip": "172.21.2.113", "env": "QA" } +{ "client_ip": "172.21.2.113", "env": "QA" } { "index" : {}} -{ "client.ip": "172.21.2.162", "env": "QA" } +{ "client_ip": "172.21.2.162", "env": "QA" } { "index" : {}} -{ "client.ip": "172.21.3.15", "env": "Production" } +{ "client_ip": "172.21.3.15", "env": "Production" } { "index" : {}} -{ "client.ip": "172.21.3.16", "env": "Production" } +{ "client_ip": "172.21.3.16", "env": "Production" } PUT /_enrich/policy/clientip_policy { "match": { "indices": "clientips", - "match_field": "client.ip", + "match_field": "client_ip", "enrich_fields": ["env"] } }