Add field_quote
for TextQueryBackend in Equal Expression
#49
nNipsx-Sec
started this conversation in
Ideas
Replies: 2 comments 2 replies
-
Oh, yes, this is a gap...I will implement this in the TextQueryBackend base class! |
Beta Was this translation helpful? Give feedback.
1 reply
-
Merged your PR, extended it and fixed some issues in other affected areas, now it's in release 0.6.2! |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
In some case of SIEM, the field have a whitespace example:
File Name
so it's need add quote to define fields name. We can add this quote to some expression but can't add field quote to equal expression.So my solution is add 1
field_quote
like as astr_quote
.Beta Was this translation helpful? Give feedback.
All reactions