Skip to content

Commit e29287e

Browse files
committed
Refactor the structure of expressions in where blocks of filter bitdefender_gz.
1 parent 09d9fba commit e29287e

File tree

1 file changed

+2
-7
lines changed

1 file changed

+2
-7
lines changed

filters/antivirus/bitdefender_gz.yml

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Bitdefender GravityZone filter
1+
# Bitdefender GravityZone filter, version 3.0.1
22
# Based on https://www.bitdefender.com/business/support/en/77212-237089-event-types.html
33
# and the previous version of the same filter
44

@@ -233,12 +233,7 @@ pipeline:
233233
params:
234234
source: origin.ip
235235
destination: origin.geolocation
236-
where:
237-
variables:
238-
- get: origin.ip
239-
as: oIp
240-
oftype: string
241-
expression: oIp_ok==true
236+
where: has(origin.ip)
242237

243238
# Reformat and field conversions
244239
- cast:

0 commit comments

Comments
 (0)