Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit44ef47a

Browse files
authored
Merge pull request#20 from UncoderIO/issue-13-windash-null
fix null field when translate to sigma
2 parentsdf674e5 +f8436f9 commit44ef47a

File tree

1 file changed

+6
-2
lines changed
  • siem-converter/app/converter/platforms/sigma/renders

1 file changed

+6
-2
lines changed

‎siem-converter/app/converter/platforms/sigma/renders/sigma.py‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -174,12 +174,16 @@ def generate_not(self, data: Any, source_mapping: SourceMapping):
174174
returnnot_node
175175

176176
@staticmethod
177-
defgenerate_field(data:Field,source_mapping:SourceMapping):
177+
defmap_field(source_mapping:SourceMapping,generic_field_name:str)->str:
178+
field_name=source_mapping.fields_mapping.get_platform_field_name(generic_field_name)
179+
returnfield_nameorgeneric_field_name
180+
181+
defgenerate_field(self,data:Field,source_mapping:SourceMapping):
178182
source_id=source_mapping.source_id
179183
generic_field_name=data.generic_names_map[source_id]
180184
ifnotgeneric_field_name:
181185
raiseStrictPlatformFieldException(field_name=data.source_name,platform_name="Sigma")
182-
field_name=source_mapping.fields_mapping.get_platform_field_name(generic_field_name)
186+
field_name=self.map_field(source_mapping,generic_field_name)
183187
ifdata.operator.token_type!=OperatorType.EQ:
184188
field_name=f"{field_name}|{data.operator.token_type}"
185189
ifisinstance(data.values,list)andlen(data.values)==1orisinstance(data.values, (str,int)):

0 commit comments

Comments
 (0)

[8]ページ先頭

©2009-2025 Movatter.jp