diff --git a/_meta/beat.yml b/_meta/beat.yml
index d464d44..a3bd6a1 100644
--- a/_meta/beat.yml
+++ b/_meta/beat.yml
@@ -69,7 +69,7 @@ processors:
         - {from: Id, to: 'event.id', type: string}                # ecs core
         - {from: RecordType, to: 'event.code', type: string}      # ecs extended
         - {from: Operation, to: 'event.action', type: string}     # ecs core
-        - {from: OrganizationId, to: 'cloud.account.id', type: string} # ecs extended
+        - {from: OrganizationId, to: 'organization.id', type: string} # ecs extended
         # - {from: UserType, to: '', type: ''}                    # no ecs mapping
         # - {from: UserKey, to: '', type: ''}                     # no ecs mapping
         - {from: Workload, to: 'event.category', type: string}    # ecs core