securityonion icon indicating copy to clipboard operation
securityonion copied to clipboard

Bug: yaml and sigma validation does not return error when play unparsable

Open idolaman opened this issue 2 years ago • 0 comments

Hello SO

We are using SO 2.3.61 distributed mode. When editing sigma in playbook GUI (after creating play), there is no validation on yaml format and sigma conventions For example if I edit the severity field from 'severity: medium' to: 'severity:high' (Without space) or: 'severity: Low' (Big L) It seems like the sigma has changed, but in background the play become inactive and there is no indication for error.

Thank you!!

idolaman avatar Jan 07 '22 12:01 idolaman