13 Commits

Author	SHA1	Message	Date
Thomas Patzke	8a0784ad33	Fixed escaping of \\*	2019-02-02 00:18:58 +01:00
sisecbe	c848c473a3	Error when empty fields attribute	2018-11-23 15:37:42 +01:00
sisecbe	31eae25756	Indentation error	2018-11-23 15:20:17 +01:00
sisecbe	e43909678e	Added the fields attribute parser ... Make a table with the fields present in the fields attribute	2018-11-23 15:11:12 +01:00
sisecbe	c2eb87133d	Distinct count in aggragation function ... Added dc() instead of count() when group-by field is present. Because count() doesn't do a distinct count in Splunk. Must be the dc() function instead.	2018-11-23 15:04:08 +01:00
Thomas Patzke	eacfaa7460	Check for forbidden null values in list items in Splunk backend	2018-10-27 01:07:03 +02:00
Thomas Patzke	dce4b4825d	Fixed aggregations without field name ... Generated query contained field name "None".	2018-08-10 15:07:07 +02:00
Thomas Patzke	af9f636199	Removal of backend output classes ... Breaking change: Instead of feeding the output class with the results, they are now returned as strings (*Backend.generate()) or list (SigmaCollectionParser.generate()). Users of the library must now take care of the output to the terminal, files or wherever Sigma rules should be pushed to.	2018-08-02 22:41:32 +02:00
Thomas Patzke	1c4c67053c	Fixes for parser split ... * Fixed imports * Rename	2018-07-27 00:02:07 +02:00
Thomas Patzke	b76fa884ec	Changed copyright notices accordingly	2018-07-24 00:01:16 +02:00
Thomas Patzke	c8e21b3f24	Fixing after split ... * Fixing imports * Discovery in new sub modules	2018-07-21 01:09:02 +02:00
Thomas Patzke	45782c6328	Removal from sigma.backends.splunk	2018-07-10 23:48:47 +02:00
Thomas Patzke	72480d304b	Splitting backends - Copy splunk.py	2018-07-10 23:15:04 +02:00