Merge pull request #57 from magicsword-io/backend/kusto

re-enable kusto for sigma versions 1.*
magicsword-io · Nov 18, 2024 · 506e21b · 506e21b
2 parents fe4bed4 + 16e8c05
commit 506e21b
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/backend/setup-sigma-versions.sh b/backend/setup-sigma-versions.sh
@@ -18,8 +18,10 @@ for VERSION in $SIGMA_VERSIONS; do
     # remove if installed because of https://github.com/redsand/pySigma-backend-hawk/issues/1
     uv -q remove pySigma-backend-hawk
 
-    # TODO: some problems with kusto backend, disable for now
-    uv -q remove pySigma-backend-kusto
+    # some problems with kusto backend, disable for older sigma versions
+    if [[ $VERSION == 0.* ]]; then
+        uv -q remove pySigma-backend-kusto
+    fi
 
     # remove unused pyparsing imports in older version, see https://github.com/SigmaHQ/pySigma/pull/289#issuecomment-2410153076
     find ./ -iwholename "*sigma/conversion/base.py" -exec sed -i "/from pyparsing import Set/d" {} +