Update packages/wiz/data_stream/audit/agent/stream/cel.yml.hbs

Co-authored-by: Dan Kortschak <dan.kortschak@elastic.co>
elastic · Sep 12, 2024 · 9b097a0 · 9b097a0
1 parent 34e2102
commit 9b097a0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/wiz/data_stream/audit/agent/stream/cel.yml.hbs b/packages/wiz/data_stream/audit/agent/stream/cel.yml.hbs
@@ -75,7 +75,7 @@ program: |
         }
       }.encode_json()
     ).do_request().as(resp, resp.StatusCode == 200 ?
-        bytes(resp.Body).decode_json().as(body, has(body.?data.auditLogEntries.nodes) && body.data.auditLogEntries.nodes != null ?
+        bytes(resp.Body).decode_json().as(body, body.?data.auditLogEntries.nodes.orValue(null) != null ?
           {
             "events": body.data.auditLogEntries.nodes.map(e, {
               "message": e.encode_json(),