From 2c1c6a7f76f295bf1b6210177a085e1afa7251f2 Mon Sep 17 00:00:00 2001
From: Adrian Serrano <adrisr83@gmail.com>
Date: Thu, 10 Feb 2022 11:43:58 +0100
Subject: [PATCH] Fix new Recorded Future dashboard

This dashboard had been exported from an 8.1.0-SNAPSHOT version of Kibana
that didn't include this change:

https://github.com/elastic/kibana/pull/123894

After this change was merged, most visualisations in the dashboard
stopped working.

This doesn't affect older dashboards as those are migrated automatically
from an older version.
---
 .../7/dashboard/Filebeat-threatintel-recordedfuture.json      | 4 ++--
 .../kibana/7/lens/037e2af0-df50-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/06744e90-df52-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/139c7da0-df51-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/176bf800-df58-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/2d365f10-8479-11ec-8aa9-11bf914a1ef2.json   | 4 ++--
 .../kibana/7/lens/3c996410-df52-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/4bcc4cb0-df50-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/5e76ef90-df51-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/6b33edb0-8478-11ec-8aa9-11bf914a1ef2.json   | 4 ++--
 .../kibana/7/lens/739274d0-8479-11ec-8aa9-11bf914a1ef2.json   | 4 ++--
 .../kibana/7/lens/790cd040-df51-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/7ed4ce00-df52-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/82fa7420-df58-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/8fb01a00-df51-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/949bc180-df52-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/a0a31740-df51-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/b0837690-df52-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/c2a5c180-df51-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/c6079390-8478-11ec-8aa9-11bf914a1ef2.json   | 4 ++--
 .../kibana/7/lens/dd4a3da0-df50-11eb-8f2b-753caedf727d.json   | 4 ++--
 .../kibana/7/lens/f37f8350-df50-11eb-8f2b-753caedf727d.json   | 4 ++--
 22 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/dashboard/Filebeat-threatintel-recordedfuture.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/dashboard/Filebeat-threatintel-recordedfuture.json
index 9b67e2ce3b65..99d101e0bc5f 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/dashboard/Filebeat-threatintel-recordedfuture.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/dashboard/Filebeat-threatintel-recordedfuture.json
@@ -335,7 +335,7 @@
                                                     "label": "Count of records",
                                                     "operationType": "count",
                                                     "scale": "ratio",
-                                                    "sourceField": "Records"
+                                                    "sourceField": "___records___"
                                                 },
                                                 "dac2417a-0b3b-430a-bd24-23abfcea4a4c": {
                                                     "dataType": "string",
@@ -566,4 +566,4 @@
     "type": "dashboard",
     "updated_at": "2022-02-02T22:58:56.215Z",
     "version": "WzI0MjEsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/037e2af0-df50-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/037e2af0-df50-11eb-8f2b-753caedf727d.json
index a25cc0cda55c..ffd473d7ffe0 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/037e2af0-df50-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/037e2af0-df50-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -97,4 +97,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTAsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/06744e90-df52-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/06744e90-df52-11eb-8f2b-753caedf727d.json
index 2fb0aee75a2f..ac7431fb05d4 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/06744e90-df52-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/06744e90-df52-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTgsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/139c7da0-df51-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/139c7da0-df51-11eb-8f2b-753caedf727d.json
index 96ed37882e2a..0656b75fecc8 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/139c7da0-df51-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/139c7da0-df51-11eb-8f2b-753caedf727d.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "ebb0878f-715a-4987-85f1-87420428c88f": {
                                     "customLabel": true,
@@ -91,4 +91,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMjEsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/176bf800-df58-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/176bf800-df58-11eb-8f2b-753caedf727d.json
index a798cb4ac084..5cc54826d791 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/176bf800-df58-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/176bf800-df58-11eb-8f2b-753caedf727d.json
@@ -17,7 +17,7 @@
                                     "label": "Recorded Future Indicators",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -64,4 +64,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTIsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/2d365f10-8479-11ec-8aa9-11bf914a1ef2.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/2d365f10-8479-11ec-8aa9-11bf914a1ef2.json
index 22195412b6cb..6fe2065fc44a 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/2d365f10-8479-11ec-8aa9-11bf914a1ef2.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/2d365f10-8479-11ec-8aa9-11bf914a1ef2.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:44:53.659Z",
     "version": "WzIzMDksMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/3c996410-df52-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/3c996410-df52-11eb-8f2b-753caedf727d.json
index e5b5e45a586d..69f38f9c330e 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/3c996410-df52-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/3c996410-df52-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMjUsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/4bcc4cb0-df50-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/4bcc4cb0-df50-11eb-8f2b-753caedf727d.json
index a5d5981e2791..43ecf4d3e4bf 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/4bcc4cb0-df50-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/4bcc4cb0-df50-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -98,4 +98,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTMsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/5e76ef90-df51-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/5e76ef90-df51-11eb-8f2b-753caedf727d.json
index 88726d73f767..5bcfd88198b1 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/5e76ef90-df51-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/5e76ef90-df51-11eb-8f2b-753caedf727d.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "ebb0878f-715a-4987-85f1-87420428c88f": {
                                     "customLabel": true,
@@ -91,4 +91,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMjMsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/6b33edb0-8478-11ec-8aa9-11bf914a1ef2.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/6b33edb0-8478-11ec-8aa9-11bf914a1ef2.json
index 8c21bae89963..7f71fe860c21 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/6b33edb0-8478-11ec-8aa9-11bf914a1ef2.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/6b33edb0-8478-11ec-8aa9-11bf914a1ef2.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:44:40.916Z",
     "version": "WzIyOTksMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/739274d0-8479-11ec-8aa9-11bf914a1ef2.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/739274d0-8479-11ec-8aa9-11bf914a1ef2.json
index 5ca9d1f7d593..c1d016c20181 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/739274d0-8479-11ec-8aa9-11bf914a1ef2.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/739274d0-8479-11ec-8aa9-11bf914a1ef2.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "d5b0eba3-5cb3-40fe-adb6-8f1a1de50e57": {
                                     "customLabel": true,
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:45:05.207Z",
     "version": "WzIzMTksMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/790cd040-df51-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/790cd040-df51-11eb-8f2b-753caedf727d.json
index ccd919a8372a..4e64acede689 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/790cd040-df51-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/790cd040-df51-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMjYsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/7ed4ce00-df52-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/7ed4ce00-df52-11eb-8f2b-753caedf727d.json
index 6eb073cdb7dc..3731cd6da426 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/7ed4ce00-df52-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/7ed4ce00-df52-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTUsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/82fa7420-df58-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/82fa7420-df58-11eb-8f2b-753caedf727d.json
index 1bfb63f05851..9d2141feb6a5 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/82fa7420-df58-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/82fa7420-df58-11eb-8f2b-753caedf727d.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "8f48381c-5786-43f4-8602-5c23ba146a60": {
                                     "customLabel": true,
@@ -93,4 +93,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTYsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/8fb01a00-df51-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/8fb01a00-df51-11eb-8f2b-753caedf727d.json
index a50d451682d2..873f2a9c5905 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/8fb01a00-df51-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/8fb01a00-df51-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMjQsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/949bc180-df52-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/949bc180-df52-11eb-8f2b-753caedf727d.json
index 14b23658acc7..a66ba4accf31 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/949bc180-df52-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/949bc180-df52-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:19:12.496Z",
     "version": "WzE4MDEsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/a0a31740-df51-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/a0a31740-df51-11eb-8f2b-753caedf727d.json
index 9b908ac525c6..9c26c5233828 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/a0a31740-df51-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/a0a31740-df51-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMjIsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/b0837690-df52-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/b0837690-df52-11eb-8f2b-753caedf727d.json
index ce645b1467ba..c554c4e487d3 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/b0837690-df52-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/b0837690-df52-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -95,4 +95,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:22:45.852Z",
     "version": "WzE4NzEsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c2a5c180-df51-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c2a5c180-df51-11eb-8f2b-753caedf727d.json
index 754d218cdd8b..c025b23d7926 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c2a5c180-df51-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c2a5c180-df51-11eb-8f2b-753caedf727d.json
@@ -36,7 +36,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 }
                             },
                             "incompleteColumns": {}
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-01T15:45:07.866Z",
     "version": "WzExMTcsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c6079390-8478-11ec-8aa9-11bf914a1ef2.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c6079390-8478-11ec-8aa9-11bf914a1ef2.json
index 12e7bc1c5611..40a2f75e7d44 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c6079390-8478-11ec-8aa9-11bf914a1ef2.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/c6079390-8478-11ec-8aa9-11bf914a1ef2.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "dac2417a-0b3b-430a-bd24-23abfcea4a4c": {
                                     "customLabel": true,
@@ -92,4 +92,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:44:25.698Z",
     "version": "WzIyOTEsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/dd4a3da0-df50-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/dd4a3da0-df50-11eb-8f2b-753caedf727d.json
index b2cf8d5d7dfd..8c69ab70ff20 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/dd4a3da0-df50-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/dd4a3da0-df50-11eb-8f2b-753caedf727d.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "ebb0878f-715a-4987-85f1-87420428c88f": {
                                     "customLabel": true,
@@ -91,4 +91,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:49:03.254Z",
     "version": "WzIzNzQsMV0="
-}
\ No newline at end of file
+}
diff --git a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/f37f8350-df50-11eb-8f2b-753caedf727d.json b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/f37f8350-df50-11eb-8f2b-753caedf727d.json
index 9410fba54b03..71b8b565fd30 100644
--- a/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/f37f8350-df50-11eb-8f2b-753caedf727d.json
+++ b/x-pack/filebeat/module/threatintel/_meta/kibana/7/lens/f37f8350-df50-11eb-8f2b-753caedf727d.json
@@ -17,7 +17,7 @@
                                     "label": "Count of records",
                                     "operationType": "count",
                                     "scale": "ratio",
-                                    "sourceField": "Records"
+                                    "sourceField": "___records___"
                                 },
                                 "ebb0878f-715a-4987-85f1-87420428c88f": {
                                     "customLabel": true,
@@ -91,4 +91,4 @@
     "type": "lens",
     "updated_at": "2022-02-02T22:49:17.011Z",
     "version": "WzIzODEsMV0="
-}
\ No newline at end of file
+}