Repeated fields overwritten in parser extension (code)

[chrisd2]

Hello everyone,

I wrote a parser extension ("code" mode) for a log_type in order to add a couple fields that were not handled by the default parser.
I mapped a couple raw fields to UDM fields under security_result in the parser ext.

Problem: I noticed that this configuration was overwriting the security_result field parsed by the default parser.

I saw in the docs that in "no-code" parser extensions, there was the option to append values to repeated fields instead of overwriting them. How can I configure the same behavior for my "code" parser extension ?