Skip to content

Issues: SigmaHQ/pySigma-backend-splunk

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

10 Open 17 Closed
10 Open 17 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

"aliases" attribute in sigma correlation rules not translated
#45 opened Oct 17, 2024 by sec-hbaer
Enhancement: Implement "|re" modifier for fields
#44 opened Aug 6, 2024 by jabrcks
Directly interact with savedsearches.conf fields when using the savedsearches format
#43 opened Jun 13, 2024 by joshnck
1
Problem in logical operator execution order : WHERE vs SEARCH bug Something isn't working
#42 opened Jun 6, 2024 by IgorHrkswxryski
1
Convert correlation in savedsearches mode bug Something isn't working
#41 opened May 7, 2024 by IgorHrkswxryski
1
Request: Using the fields: key to define the values() from a |stats command in correlation searches
#40 opened Apr 17, 2024 by joshnck
@thomaspatzke
ORing modifier CIDR error bug Something isn't working
#35 opened Mar 12, 2024 by frack113
Splunk backend allegedly doesn't support or conditions in regex, but fails to detect them (and for some reason creates a newline before | regex) bug Something isn't working
#29 opened Jan 4, 2024 by joshnck
1
Question: How to avoid processing the fields? enhancement New feature or request
#27 opened Oct 20, 2023 by 0xFustang
2
[sigmac] [splunk] Unescaped . in query bug Something isn't working
#15 opened Sep 30, 2022 by phantinuss
@thomaspatzke
6
ProTip! no:milestone will show everything without a milestone.