--- - name: threat fields: - name: technique.name multi_fields: - type: match_only_text name: text - name: technique.subtechnique.name multi_fields: - type: match_only_text name: text