Update of the sophos_xg_firewall filter structure.

Author: JocLRojas

filters/sophos/sophos_xg_firewall.yml

@@ -672,20 +672,15 @@ pipeline:
       # Field conversions
       - cast:
           fields:
-            - log.statusCode
             - target.port
           to: int
 
       - cast:
           fields:
             - log.statusCode
-          to: float
-
-      - cast:
-          fields:
             - origin.bytesReceived
             - origin.bytesSent
-          to: float
+          to: float64
 
       # Renaming "log.statusCode" to "statusCode" to add it to the event structure
       - rename:
@@ -706,7 +701,7 @@ pipeline:
           params:
             key: actionResult
             value: 'accepted'
-          where: safe("statusCode", 0,0) && (statusCode >= double(200) && statusCode <= double(299) || (safe("origin.bytesReceived", 0,0) && statusCode >= double(300) && statusCode <= double(399) && origin.bytesReceived > double(0)))
+          where: safe("statusCode", 0.0) && (statusCode >= double(200) && statusCode <= double(299) || (safe("origin.bytesReceived", 0.0) && statusCode >= double(300) && statusCode <= double(399) && origin.bytesReceived > double(0)))
 
       # Removing unused fields
       - delete: