parse_condition
Parse Sigma condition expressions into JSON parse trees, returning structured errors on invalid syntax.
Instructions
Parse a Sigma condition expression (e.g. selection and not 1 of filter_*) into a parse-tree as JSON, or return a structured parse error.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| condition | Yes | A Sigma condition expression, e.g. `selection and not filter`. |