refactor(filters): update changeSet IDs and improve SQL filter conditions

Author: mjabascal10

backend/src/main/resources/config/liquibase/changelog/20250617001_update_filter_antivirus_esmc_eset.xml

@@ -4,7 +4,7 @@
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
 
-    <changeSet id="20250617001" author="JocLRojas">
+    <changeSet id="20250910001" author="JocLRojas">
 
         <sql dbms="postgresql" splitStatements="true" stripComments="true">
             <![CDATA[
@@ -103,21 +103,21 @@ pipeline:
           params:
             key: severity
             value: ''low''
-          where: safe("log.severity", "") && ( log.severity=="INFO" || log.severity=="Info" )
+          where: safe("log.severity", "") in ["INFO", "Info"]
 
       - add:
           function: ''string''
           params:
             key: severity
             value: ''medium''
-          where: safe("log.severity", "") && (log.severity=="WARNING" || log.severity=="Warning")
+          where: safe("log.severity", "") in ["WARNING", "Warning"]
 
       - add:
           function: ''string''
           params:
             key: severity
             value: ''high''
-          where: safe("log.severity", "") && (log.severity=="ERROR" || log.severity=="Error")
+          where: safe("log.severity", "") in ["ERROR", "Error"]
 
       # Adding geolocation to origin.ip
       - dynamic:

backend/src/main/resources/config/liquibase/changelog/20250617002_update_filter_apache.xml

@@ -4,7 +4,7 @@
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
 
-    <changeSet id="20250617002" author="JocLRojas">
+    <changeSet id="20250910002" author="JocLRojas">
 
         <sql dbms="postgresql" splitStatements="true" stripComments="true">
             <![CDATA[
@@ -168,37 +168,37 @@ pipeline:
           params:
             key: action
             value: ''get''
-          where: safe("log.method", "") && log.method == "GET"
+          where: safe("log.method", "") == "GET"
       - add:
           function: ''string''
           params:
             key: action
             value: ''post''
-          where: safe("log.method", "") && log.method == "POST"
+          where: safe("log.method", "") == "POST"
       - add:
           function: ''string''
           params:
             key: action
             value: ''put''
-          where: safe("log.method", "") && log.method == "PUT"
+          where: safe("log.method", "") == "PUT"
       - add:
           function: ''string''
           params:
             key: action
             value: ''delete''
-          where: safe("log.method", "") && log.method == "DELETE"
+          where: safe("log.method", "") == "DELETE"
       - add:
           function: ''string''
           params:
             key: action
             value: ''patch''
-          where: safe("log.method", "") && log.method == "PATCH"
+          where: safe("log.method", "") == "PATCH"
       - add:
           function: ''string''
           params:
             key: action
             value: ''request''
-          where: safe("log.method", "") && log.method == "REQUEST"
+          where: safe("log.method", "") == "REQUEST"
       # Removing log.method if action was set
       - delete:
           fields:
@@ -209,7 +209,7 @@ pipeline:
           fields:
             - log.statusCode
             - origin.bytesReceived
-          to: int
+          to: float
       - reformat:
           fields:
             - deviceTime
@@ -228,7 +228,7 @@ pipeline:
           params:
             key: actionResult
             value: ''accepted''
-          where: safe("log.statusCode", 0,0) && (log.statusCode >= double(200) && log.statusCode <= double(299) || (safe("origin.bytesReceived", 0,0) && log.statusCode >= double(300) && log.statusCode <= double(399) && origin.bytesReceived > double(0)))
+          where: safe("log.statusCode", 0.0) >= double(200) && safe("log.statusCode", 0.0) <= double(299) || (safe("log.statusCode", 0.0) >= double(300) && safe("log.statusCode", 0.0) <= double(399) && safe("origin.bytesReceived", 0.0) > double(0))
       # Removing unused fields
       - delete:
           fields:

backend/src/main/resources/config/liquibase/changelog/20250617003_update_filter_auditd.xml

@@ -4,7 +4,7 @@
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
 
-    <changeSet id="20250617003" author="JocLRojas">
+    <changeSet id="20250910003" author="JocLRojas">
 
         <sql dbms="postgresql" splitStatements="true" stripComments="true">
             <![CDATA[

backend/src/main/resources/config/liquibase/changelog/20250617004_update_filter_aws.xml

@@ -4,7 +4,7 @@
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
 
-    <changeSet id="20250617004" author="JocLRojas">
+    <changeSet id="20250910004" author="JocLRojas">
 
         <sql dbms="postgresql" splitStatements="true" stripComments="true">
             <![CDATA[