Sigmac to OQL

[vanh20]

Is it only me, or does anybody else think of converting Sigma rules to modifiable Onion Query Language? Is this already in place, and I have missed the documentation? Thanks for your time.

[vanh20]

I know, if one looks at the Sigma rules, one can translate that into a live query in Hunt. However, I'm looking for an automated way to do this as I have quite a lot to translate. There is a tool called Sigmac which is able to translate to various SIEM platforms except SecurityOnion. Any help would be appreciated. Thanks!