fix(Mimecast): fix issue on email.from.address

SEKOIA-IO · Jan 9, 2025 · 6454e75 · 6454e75
1 parent 6021049
commit 6454e75
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 10 deletions.
diff --git a/Mimecast/mimecast-email-security/ingest/parser.yml b/Mimecast/mimecast-email-security/ingest/parser.yml
@@ -45,10 +45,6 @@ stages:
 
           email.message_id: "{{parse_event.message.messageId.lstrip('<').rstrip('>')}}"
           email.subject: "{{parse_event.message.subject}}"
-          email.from.address:
-            [
-              "{{parse_event.message.senderEnvelope or parse_event.message.senderHeader}}",
-            ]
 
           mimecast.siem.rejection.code: "{{parse_event.message.rejectionCode}}"
           mimecast.siem.rejection.info: "{{parse_event.message.rejectionInfo}}"

diff --git a/Mimecast/mimecast-email-security/tests/test_attachment_protect.json b/Mimecast/mimecast-email-security/tests/test_attachment_protect.json
@@ -22,12 +22,7 @@
             "name": "tpsreport.docx"
           }
         }
-      ],
-      "from": {
-        "address": [
-          "null"
-        ]
-      }
+      ]
     },
     "mimecast": {
       "siem": {