Kibana 7.14.2 Event Filter drop fails to drop events

@andrewkroh
For me it's system version 1.1.2 with no upgrades available. Elastic and Kibana 7.15.0.

Identical error as Elastic Endpoint - Filebeat - Java Error - #7 by andrewkroh
Cannot invoke "java.util.Map.size()" because "m" is null

This is only when Security option is enabled for the logs at least from what I've seen. I'm able to trigger the alerts at will by enabling security logs. I did do a quick check on the client side for winlogbeat to see if the java file was present like on the normal legacy beats. No luck as it looks embedded I was going to swap from a working version and overwrite to see but failed.