Metricbeat data processing in pipeline rule

I think your syntax may be wrong.

This post may help you clean up your pipeline script or give you a better idea? (replace “class” in the link example with “HOST” - does that solve it for you?)

As for NetworkData I suspect it’s similar (you effectively convert a blank string “” to double = 0) - So again, try using the code in the linked post and see if that resolves your issue.