From f7ba2b39764bda72adbbde2d3fbe2c2d75d0bb1c Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Tue, 2 Jul 2019 22:31:10 +0200 Subject: [PATCH] fix: bug in sumologic backend with 'null' values --- tools/sigma/backends/sumologic.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/sigma/backends/sumologic.py b/tools/sigma/backends/sumologic.py index a2eb4ff3d..7548bb554 100644 --- a/tools/sigma/backends/sumologic.py +++ b/tools/sigma/backends/sumologic.py @@ -187,6 +187,8 @@ class SumoLogicBackend(SingleTextQueryBackend): return self.mapExpression % (key, self.cleanValue(value, key)) elif type(value) is list: return self.generateMapItemListNode(key, value) + elif value is None: + return self.nullExpression % (key, ) else: raise TypeError("Backend does not support map values of type " + str(type(value))) else: