securityonion
securityonion copied to clipboard
Bug: yaml and sigma validation does not return error when play unparsable
Hello SO
We are using SO 2.3.61 distributed mode. When editing sigma in playbook GUI (after creating play), there is no validation on yaml format and sigma conventions For example if I edit the severity field from 'severity: medium' to: 'severity:high' (Without space) or: 'severity: Low' (Big L) It seems like the sigma has changed, but in background the play become inactive and there is no indication for error.
Thank you!!