There was an error while loading. Please reload this page.
1 parent 3fb5a56 commit df647d8Copy full SHA for df647d8
1 file changed
sigma/conversion/base.py
@@ -1809,6 +1809,8 @@ def convert_condition_field_compare_op_val(
1809
isinstance(cond.value, SigmaCompareExpression)
1810
and cond.value.number
1811
and isinstance(cond.value.number, SigmaTimestampPart)
1812
+ and self.field_timestamp_part_expression
1813
+ and self.timestamp_part_mapping
1814
):
1815
return (
1816
self.field_timestamp_part_expression.format(
0 commit comments