diff --git a/tools/sigma/backends/sumologic.py b/tools/sigma/backends/sumologic.py index a2eb4ff3d..7548bb554 100644 --- a/tools/sigma/backends/sumologic.py +++ b/tools/sigma/backends/sumologic.py @@ -187,6 +187,8 @@ class SumoLogicBackend(SingleTextQueryBackend): return self.mapExpression % (key, self.cleanValue(value, key)) elif type(value) is list: return self.generateMapItemListNode(key, value) + elif value is None: + return self.nullExpression % (key, ) else: raise TypeError("Backend does not support map values of type " + str(type(value))) else: