updated example + added changelog entry

elastic · Dec 21, 2023 · e82d19e · e82d19e
1 parent 507f5b5
commit e82d19e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.next.md b/CHANGELOG.next.md
@@ -17,6 +17,7 @@ Thanks, you're awesome :-) -->
 #### Added
 
 * Added `volume.*` as beta field set. #2269
+* Added `threat.indicator.id` [#2252](https://github.com/elastic/ecs/issues/2252)
 
 #### Improvements
 

diff --git a/schemas/threat.yml b/schemas/threat.yml
@@ -524,7 +524,7 @@
         that use different ID formats.
 
         While not required, a common approach is to use a STIX 2.x indicator id.
-      example: "indicator--d7008e06-ab86-415a-9803-3c81ce2d3c37"
+      example: "[indicator--d7008e06-ab86-415a-9803-3c81ce2d3c37]"
       normalize:
         - array