Replace url.path with Esql_url_lower in TOML file

Author: Aegrah

rules/cross-platform/reconnaissance_web_server_discovery_or_fuzzing_activity.toml

@@ -57,7 +57,6 @@ from
     event.dataset,
     http.request.method,
     http.response.status_code,
-    url.path,
     source.ip,
     agent.id,
     host.name,
@@ -69,7 +68,7 @@ from
     Esql.agent_id_values = values(agent.id),
     Esql.http_request_method_values = values(http.request.method),
     Esql.http_response_status_code_values = values(http.response.status_code),
-    Esql.url_path_values = values(url.path),
+    Esql.url_path_values = values(Esql_url_lower),
     Esql.event_dataset_values = values(event.dataset)
     by source.ip
 | where