diff --git a/packages/nginx_ingress_controller/changelog.yml b/packages/nginx_ingress_controller/changelog.yml
index 850e8f5fc1e..3d68c8217f5 100644
--- a/packages/nginx_ingress_controller/changelog.yml
+++ b/packages/nginx_ingress_controller/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.10.1"
+  changes:
+    - description: Fix nginx_ingress_controller.access.remote_ip_list field mapping.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pulls/10921
 - version: "1.10.0"
   changes:
     - description: Migrate to format_version v3.
diff --git a/packages/nginx_ingress_controller/data_stream/access/fields/fields.yml b/packages/nginx_ingress_controller/data_stream/access/fields/fields.yml
index 96c48f19526..0e8cc3da0cd 100644
--- a/packages/nginx_ingress_controller/data_stream/access/fields/fields.yml
+++ b/packages/nginx_ingress_controller/data_stream/access/fields/fields.yml
@@ -2,7 +2,7 @@
   type: group
   fields:
     - name: remote_ip_list
-      type: ip
+      type: keyword
       description: |
         An array of remote IP addresses. It is a list because it is common to include, besides the client IP address, IP addresses from headers like `X-Forwarded-For`. Real source IP is restored to `source.ip`.
     - name: http.request.length
diff --git a/packages/nginx_ingress_controller/docs/README.md b/packages/nginx_ingress_controller/docs/README.md
index acade0532b0..b0b0e5b8f4b 100644
--- a/packages/nginx_ingress_controller/docs/README.md
+++ b/packages/nginx_ingress_controller/docs/README.md
@@ -209,7 +209,7 @@ An example event for `access` looks as following:
 | nginx_ingress_controller.access.http.request.id | The randomly generated ID of the request | text |
 | nginx_ingress_controller.access.http.request.length | The request length (including request line, header, and request body) | long |
 | nginx_ingress_controller.access.http.request.time | Time elapsed since the first bytes were read from the client | double |
-| nginx_ingress_controller.access.remote_ip_list | An array of remote IP addresses. It is a list because it is common to include, besides the client IP address, IP addresses from headers like `X-Forwarded-For`. Real source IP is restored to `source.ip`. | ip |
+| nginx_ingress_controller.access.remote_ip_list | An array of remote IP addresses. It is a list because it is common to include, besides the client IP address, IP addresses from headers like `X-Forwarded-For`. Real source IP is restored to `source.ip`. | keyword |
 | nginx_ingress_controller.access.upstream.alternative_name | The name of the alternative upstream. | text |
 | nginx_ingress_controller.access.upstream.ip | The IP address of the upstream server. If several servers were contacted during request processing, their addresses are separated by commas. | ip |
 | nginx_ingress_controller.access.upstream.name | The name of the upstream. | keyword |
diff --git a/packages/nginx_ingress_controller/manifest.yml b/packages/nginx_ingress_controller/manifest.yml
index c30fb639f66..d570a9a47d5 100644
--- a/packages/nginx_ingress_controller/manifest.yml
+++ b/packages/nginx_ingress_controller/manifest.yml
@@ -1,7 +1,7 @@
 format_version: 3.0.4
 name: nginx_ingress_controller
 title: Nginx Ingress Controller Logs
-version: 1.10.0
+version: 1.10.1
 description: Collect Nginx Ingress Controller logs.
 type: integration
 categories: