diff --git a/packages/box_events/changelog.yml b/packages/box_events/changelog.yml
index 58116aef6da..dfa18a15964 100644
--- a/packages/box_events/changelog.yml
+++ b/packages/box_events/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "3.1.2"
+  changes:
+    - description: Change box.source.login from boolean to keyword.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/17413
 - version: "3.1.1"
   changes:
     - description: Update stream position handling to match string type provided by API.
diff --git a/packages/box_events/data_stream/events/fields/fields.yml b/packages/box_events/data_stream/events/fields/fields.yml
index fbf085bb9da..3925a60d762 100644
--- a/packages/box_events/data_stream/events/fields/fields.yml
+++ b/packages/box_events/data_stream/events/fields/fields.yml
@@ -322,7 +322,7 @@
           type: boolean
         - name: login
           description: User login
-          type: boolean
+          type: keyword
         - name: max_upload_size
           description: Max upload size
           type: boolean
diff --git a/packages/box_events/manifest.yml b/packages/box_events/manifest.yml
index f4be3ed4540..26d8f612322 100644
--- a/packages/box_events/manifest.yml
+++ b/packages/box_events/manifest.yml
@@ -1,7 +1,7 @@
 format_version: "3.0.3"
 name: box_events
 title: Box Events
-version: "3.1.1"
+version: "3.1.2"
 description: "Collect logs from Box with Elastic Agent"
 type: integration
 categories: