Thomas Patzke
Thomas Patzke
Just merged the fix, will be included in next release.
Oh my...Elastic case-sensitiveness really drives me crazy 🙁 Just to clarify, this: > * `like` and `rlike` operators are case-sensitive in `ESQL` Is falsified by your insights, correct? `TO_LOWER` seems...
Nice, thanks for the cool contribution and the good analysis of the potential vulnerability! I just have some small stuff I will comment here in the PR review, but from...
Closing for now, we can reopen if continued.
Hi! Thanks for the pull request! I've identified an issue while code review: It's possible that this change misses to output converted queries because there can be more queries returned...
Currently I don't see a clean way to do this in a generic way for all backends that emit single queries as the link between rule and query is not...
Wasn't aware of this. Two notations for the same CVE appear inconsistent to me and make it harder to filter rules for users. We should unify this. My preference would...
Transferred to specification, appears more appropriate here to me.
Expected behaviour when using `AddConditionTransformation` on a `1 of them`/`any of them` condition?
The usage of the `of them` syntax is discouraged in favor of the `of ` syntax, e.g. `1 of match_*` because of such problems caused by catchall rules in operationalization...
Expected behaviour when using `AddConditionTransformation` on a `1 of them`/`any of them` condition?
Sounds like a good idea, I think this will be the fix!