Less allocation.

elastic · Dec 11, 2024 · af1a09f · af1a09f
1 parent 49a3dc4
commit af1a09f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/tanium/data_stream/threat_response/elasticsearch/ingest_pipeline/default.yml b/packages/tanium/data_stream/threat_response/elasticsearch/ingest_pipeline/default.yml
@@ -41,7 +41,7 @@ processors:
       tag: set_event_kind_alert
       field: event.kind
       value: alert
-      if: "![null, ''].contains(ctx.tanium?.threat_response?.alert_id)"
+      if: ctx.tanium?.threat_response?.alert_id != null && ctx.tanium.threat_response.alert_id != ''
   - rename:
       tag: rename_json_intel_id
       field: json.Intel Id