diff --git a/Mimecast/mimecast-email-security/ingest/parser.yml b/Mimecast/mimecast-email-security/ingest/parser.yml
index 28f51161d..d5f5cd38f 100644
--- a/Mimecast/mimecast-email-security/ingest/parser.yml
+++ b/Mimecast/mimecast-email-security/ingest/parser.yml
@@ -45,10 +45,6 @@ stages:
 
           email.message_id: "{{parse_event.message.messageId.lstrip('<').rstrip('>')}}"
           email.subject: "{{parse_event.message.subject}}"
-          email.from.address:
-            [
-              "{{parse_event.message.senderEnvelope or parse_event.message.senderHeader}}",
-            ]
 
           mimecast.siem.rejection.code: "{{parse_event.message.rejectionCode}}"
           mimecast.siem.rejection.info: "{{parse_event.message.rejectionInfo}}"
diff --git a/Mimecast/mimecast-email-security/tests/test_attachment_protect.json b/Mimecast/mimecast-email-security/tests/test_attachment_protect.json
index b08a7c78b..b4a3345f7 100644
--- a/Mimecast/mimecast-email-security/tests/test_attachment_protect.json
+++ b/Mimecast/mimecast-email-security/tests/test_attachment_protect.json
@@ -22,12 +22,7 @@
             "name": "tpsreport.docx"
           }
         }
-      ],
-      "from": {
-        "address": [
-          "null"
-        ]
-      }
+      ]
     },
     "mimecast": {
       "siem": {