Summary
_render_sql_node (converters/sigma/src/ossie_sigma/sigma_formula.py) has no exp.Neg case, so a negated SQL expression is untranslatable and sql_to_sigma_formula returns None, though the forward path emits -[X].
Repro (real converter, HEAD ab8fc1a - EXECUTED)
sql_to_sigma_formula('-"X"') -> None
sql_to_sigma_formula('-1') -> None
Possible fix
if isinstance(node, exp.Neg):
return f"-({_render_sql_node(node.this, dataset_alias)})"
Summary
_render_sql_node(converters/sigma/src/ossie_sigma/sigma_formula.py) has noexp.Negcase, so a negated SQL expression is untranslatable andsql_to_sigma_formulareturnsNone, though the forward path emits-[X].Repro (real converter, HEAD ab8fc1a - EXECUTED)
Possible fix