From 1852f01fae724af6060b60838286475a3139fb9a Mon Sep 17 00:00:00 2001
From: Marc Guasch <marc.guasch@elastic.co>
Date: Tue, 5 Oct 2021 10:15:44 +0200
Subject: [PATCH] Fix contains check for forwarded tag

---
 packages/cef/changelog.yml                            | 5 +++++
 packages/cef/data_stream/log/agent/stream/log.yml.hbs | 2 +-
 packages/cef/data_stream/log/agent/stream/udp.yml.hbs | 2 +-
 packages/cef/manifest.yml                             | 2 +-
 4 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/packages/cef/changelog.yml b/packages/cef/changelog.yml
index f0348fa1f1a5..9bae130dc035 100644
--- a/packages/cef/changelog.yml
+++ b/packages/cef/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.1"
+  changes:
+    - description: Fix logic that checks for the 'forwarded' tag
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/1802
 - version: "1.2.0"
   changes:
     - description: Add CEF time zone config option.
diff --git a/packages/cef/data_stream/log/agent/stream/log.yml.hbs b/packages/cef/data_stream/log/agent/stream/log.yml.hbs
index b8cdc7770d75..c9f24092e810 100644
--- a/packages/cef/data_stream/log/agent/stream/log.yml.hbs
+++ b/packages/cef/data_stream/log/agent/stream/log.yml.hbs
@@ -10,7 +10,7 @@ tags:
 {{#each tags as |tag i|}}
   - {{tag}}
 {{/each}}
-{{#contains tags "forwarded"}}
+{{#contains "forwarded" tags}}
 publisher_pipeline.disable_host: true
 {{/contains}}
 processors:
diff --git a/packages/cef/data_stream/log/agent/stream/udp.yml.hbs b/packages/cef/data_stream/log/agent/stream/udp.yml.hbs
index cfefb9e8257e..4d71aa023496 100644
--- a/packages/cef/data_stream/log/agent/stream/udp.yml.hbs
+++ b/packages/cef/data_stream/log/agent/stream/udp.yml.hbs
@@ -6,7 +6,7 @@ tags:
 {{#each tags as |tag i|}}
   - {{tag}}
 {{/each}}
-{{#contains tags "forwarded"}}
+{{#contains "forwarded" tags}}
 publisher_pipeline.disable_host: true
 {{/contains}}
 processors:
diff --git a/packages/cef/manifest.yml b/packages/cef/manifest.yml
index 4fc2da50287c..5f2ea1fa8e49 100644
--- a/packages/cef/manifest.yml
+++ b/packages/cef/manifest.yml
@@ -1,6 +1,6 @@
 name: cef
 title: CEF
-version: 1.2.0
+version: 1.2.1
 release: ga
 description: This Elastic integration collects logs in common event format (CEF)
 type: integration