Index field is not filled in elasticksearch_detection_rule

[HosseinAkhoundi]

In the mapping section, the index field is mapped according to the roll type, but the index field is not filled after translation.
but in socprime index field is filled

[Ginger-Headed]

Thanks for raising this. Took into work.