Pipeline rule to !match and just enrich with the field value not matched

[dio99]

hi i want to create a pipeline that check the fields containing “-” but if other value in the field how do i get it to set the field value of if it contains other values than “-” ?

when

has_field("event_id") AND
to_string($message.event_data_UserAccountControl) != "-" OR
to_string($message.event_data_SamAccountName) != "-" OR
to_string($message.event_data_DisplayName) != "-" OR
to_string($message.event_event_data_UserPrincipalName) != "-" OR
to_string($message.event_data_HomeDirectory) != "-" OR
to_string($message.event_data_HomePath) != "-" OR
to_string($message.event_data_ScriptPath) != "-" OR
to_string($message.event_data_ProfilePath) != "-" OR
to_string($message.event_data_UserWorkstations) != "-" OR
to_string($message.event_data_event_data_PasswordLastSet) != "-" OR
to_string($message.event_data_AccountExpires) != "-" OR
to_string($message.event_data_PrimaryGroupId) != "-" OR
to_string($message.event_data_AllowedToDelegateTo) != "-" OR
to_string($message.event_data_event_data_PasswordLastSet) != "-" 

// Anders

[shoothub]

Please explain more carefully, it’s not very clear, what you want to achieve…