Update cloudtrail.md

[JV0812]

Purpose of this pull request

This pull request is to add nodrop to the Field extraction template query.

Select the type of change

• Minor Changes - Typos, formatting, slight revisions
• Update Content - Revisions, updating sections
• New Content - New features, sections, pages, tutorials
• Site and Tools - .clabot, version updates, maintenance, dependencies, new packages for the site (Docusaurus, Gatsby, React, etc.)

Ticket (if applicable)

Update FER example to include a nodrop; else FER can fail completely