Fix NPE

Signed-off-by: Chase Engelbrecht <[email protected]>

data-prepper-plugins/geoip-processor/geo-lite2/SampleFile1.txt

@@ -0,0 +1 @@
+This is sample file 1

data-prepper-plugins/geoip-processor/geo-lite2/SampleFile2.txt

@@ -0,0 +1 @@
+This is sample file 2

data-prepper-plugins/geoip-processor/geo-lite2/SampleFile3.txt

@@ -0,0 +1 @@
+This is sample file 3

data-prepper-plugins/geoip-processor/geo-lite2/SampleFile4.txt

@@ -0,0 +1 @@
+This is sample file 4

data-prepper-plugins/geoip-processor/geo-lite2/SampleFile5.txt

@@ -0,0 +1 @@
+This is sample file 5

data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/sink/opensearch/OpenSearchSink.java

@@ -424,13 +424,18 @@ public void doOutput(final Collection<Record<Event>> records) {
     for (final Record<Event> record : findings) {
       final Event event = record.getData();
       final String ruleEngineId = event.get("RULE_ENGINE_DOC_MATCH_ID", String.class);
-      final String docId = ruleEngineIdToDocId.get(ruleEngineId).get(0);
-      final String docIndexName = ruleEngineIdToDocId.get(ruleEngineId).get(1);
       final List<String> replacementFields = event.getList("RULE_ENGINE_DOC_ID_REPLACEMENT_FIELDS", String.class);
       final String indexName = event.get("FINDINGS_INDEX_NAME", String.class);
 
-      event.put("index", docIndexName);
-      replacementFields.forEach(field -> event.put(field, docId == null ? Collections.emptyList() : List.of(docId)));
+      final List<String> docInfo = ruleEngineIdToDocId.get(ruleEngineId);
+      if (docInfo != null) {
+        final String docId = docInfo.get(0);
+        final String docIndexName = docInfo.get(1);
+        event.put("index", docIndexName);
+        replacementFields.forEach(field -> event.put(field, List.of(docId)));
+      } else {
+        replacementFields.forEach(field -> event.put(field, Collections.emptyList());
+      }
 
       event.delete("RULE_ENGINE_DOC_MATCH_ID");
       event.delete("RULE_ENGINE_DOC_ID_REPLACEMENT_FIELDS");