SIEMpl update du jour: One of my goals with this parser was to have good support for IPs and searching IPs and today I implemented CONTAINS and IN to work with IPs and IP CIDR ranges so that I can easily filter.

Still baby steps but slowly the SQL implementation is growing (as well as all the code in the background).

The SIEMpl test suite is also growing, already 355 tests. I'm doing my best to adhere to the TDD way of working so I keep good coverage and I'm writing code to directly develop features/fix failing tests of new functionality.