[Winlogbeat] Pipeline winlogbeat-8.9.2-security error

[kowalczyk-p]

Pipeline winlogbeat-8.9.2-security error return following error.message:

Processor "script" with tag "Set User Account Control" in pipeline "winlogbeat-8.9.2-security" failed with message "For input string: "-""

for example event:

A user account was changed.

Subject:
	Security ID:		S-1-5-21-842900000-651377000-000000000-00000
	Account Name:		REDACTED$
	Account Domain:		XXX
	Logon ID:		0x00000000

Target Account:
	Security ID:		S-1-5-21-842000000-651370000-682000000-000000
	Account Name:		redacted
	Account Domain:		XXX

Changed Attributes:
	SAM Account Name:	-
	Display Name:		-
	User Principal Name:	-
	Home Directory:		-
	Home Drive:		-
	Script Path:		-
	Profile Path:		-
	User Workstations:	-
	Password Last Set:	11/27/2023 8:33:07 PM
	Account Expires:		-
	Primary Group ID:	-
	AllowedToDelegateTo:	-
	Old UAC Value:		-
	New UAC Value:		-
	User Account Control:	-
	User Parameters:	-
	SID History:		-
	Logon Hours:		-

Additional Information:
	Privileges:		-

[ManicPumpkin]

I have the same issue. Tested with 8.4.2 and 8.11.2.

error.message:

Processor "script" with tag "Set User Account Control" in pipeline "winlogbeat-8.4.2-security" failed with message "For input string: "-""

It appears for evtx.code:

4738
4742

[elasticmachine]

Pinging @elastic/sec-windows-platform (Team:Security-Windows Platform)