# Sigma ruleset import

**URL:** <https://forum.opensearch.org/t/sigma-ruleset-import/3639>\
**Category:** Alerting\
**Created:** [August 30, 2020, 9:04pm UTC](https://forum.opensearch.org/t/sigma-ruleset-import/3639 "2020-08-30T21:04:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lorenzo95](https://avatars.discourse-cdn.com/v4/letter/l/c57346/32.png) [@lorenzo95](https://forum.opensearch.org/u/lorenzo95)\
**Post date:** [August 30, 2020, 9:04pm UTC](https://forum.opensearch.org/t/sigma-ruleset-import/3639/1 "2020-08-30T21:04:11Z")

</div>

Hello,

I was wondering if anyone is importing the sigma ruleset into the alerting plugin of odfe? ([GitHub - SigmaHQ/sigma: Generic Signature Format for SIEM Systems](https://github.com/Neo23x0/sigma)). Is there something like the **sigma2elastalert.py** that you know of?  
I am just trying to figure out if it’s worth testing while doing a PoC. Online research hasn’t turned up much information so far.

Thank you,  
Gera

---

<div class="post-metadata">

**Author:** ![kris](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kris/32/2208_2.png) [@kris](https://forum.opensearch.org/u/kris)\
**Post date:** [February 7, 2023, 5:17pm UTC](https://forum.opensearch.org/t/sigma-ruleset-import/3639/2 "2023-02-07T17:17:52Z")

</div>

Closed on February 7, 2023, 5:17pm UTC