Github user cestella commented on the issue:
https://github.com/apache/incubator-metron/pull/244
Just for posterity, from
[here](http://stixproject.github.io/documentation/suggested-practices/)
justifying considering an absence of a condition to be an equality condition:
> When creating observables for use as patterns within indicators, you
should always set the condition attribute on all possible fields to an
appropriate value, even if that value is equals. Leaving off the condition
attribute implies that the observable is an instance rather than a pattern.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
