Proposed commit message

• WHAT: Fix typo in auditlogs ingest pipeline
• WHY: field in if must be the same as defined in copy_from:

- set:
      if: ctx.kubernetes?.audit?.user?.userAgent != null    <- must be the same as in `copy_from`
      field: user_agent.original
      copy_from: kubernetes.audit.userAgent
      ignore_empty_value: true

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• Relates [Kubernetes audit logs] Additional Fields mapping for detection #9046

Screenshots