diff --git a/detections/application/path_traversal_spl_injection.yml b/detections/application/path_traversal_spl_injection.yml
index 7a2716dc58..94109fdec1 100644
--- a/detections/application/path_traversal_spl_injection.yml
+++ b/detections/application/path_traversal_spl_injection.yml
@@ -42,8 +42,6 @@ tags:
   - Splunk Enterprise Security
   - Splunk Cloud
   required_fields:
-  - source
-  - s
   - status
   - clientip
   - method