Merge pull request #572 from opencybersecurityalliance/k2-get-no-vari…

…able remove variable syntax from GET FROM
opencybersecurityalliance · Jul 30, 2024 · 5fa5e19 · 5fa5e19
2 parents 212949d + 4d48ffc
commit 5fa5e19
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/mapping-examples/security-datasets/GoldenSAML/README.md b/mapping-examples/security-datasets/GoldenSAML/README.md
@@ -8,7 +8,9 @@ Tha dataset is in turn based on Microsoft's SimuLand Golden SAML Lab Guide (http
 
 ### Data Ingestion
 
-TODO
+```
+kestrel-tool mkdb --db sqlite:///golden_saml.db --table WindowsEvents WindowsEvents.json
+```
 
 ### Data Source Configuration
 

diff --git a/packages/kestrel_core/src/kestrel/frontend/kestrel.lark b/packages/kestrel_core/src/kestrel/frontend/kestrel.lark
@@ -176,7 +176,6 @@ NUNIQUE: "NUNIQUE"i
 
 datasource: DATASRC_SIMPLE
           | DATASRC_ESCAPED
-          | VARIABLE
 
 DATASRC_SIMPLE: PATH_SIMPLE ("," PATH_SIMPLE)*
 DATASRC_ESCAPED: PATH_ESCAPED
-Original file line number
+Diff line change
@@ Expand Up @@
     ### Data Ingestion
-    TODO
+    ```
+    kestrel-tool mkdb --db sqlite:///golden_saml.db --table WindowsEvents WindowsEvents.json
+    ```
     ### Data Source Configuration
@@ Expand Down @@