diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
index f2245c020..f2fa4d05b 100644
--- a/salt/elasticsearch/defaults.yaml
+++ b/salt/elasticsearch/defaults.yaml
@@ -858,6 +858,7 @@ elasticsearch:
         composed_of:
         - agent-mappings
         - dtc-agent-mappings
+        - file-mappings
         - host-mappings
         - dtc-host-mappings
         - http-mappings
diff --git a/salt/elasticsearch/files/ingest/kratos b/salt/elasticsearch/files/ingest/kratos
index d59f45587..b3410d9fd 100644
--- a/salt/elasticsearch/files/ingest/kratos
+++ b/salt/elasticsearch/files/ingest/kratos
@@ -81,6 +81,14 @@
                 "ignore_missing": true
             }
         },
+        {
+            "rename": {
+                "field": "file",
+                "target_field": "file.path",
+                "ignore_failure": true,
+                "ignore_missing": true
+            }
+        },
         {
             "pipeline": {
                 "name": "common"