Playbook Sigma to Elastalert field mappings are wrong?

[ivantn21]

I was trying to add some exclusion to some of the playbooks, and during my testing I found that at least the sigma ParentCommandLine field is being translated to process.parent.command_line.security which was not working. But, if i remove the ".security" from the field then it works is this expected behavior?

[defensivedepth]

Duplicate of #5015