businessfunk/iskra

Rust0 stars0 forks

What it does

`iskra` is a powerful SIEM query migration plugin that facilitates the conversion of detection queries between various dialects, primarily from Splunk SPL to Microsoft KQL. This tool is essential for security professionals looking to streamline their workflows and ensure the accuracy of their detection rules across different SIEM platforms.

Star history

Not enough history yet — 1 day(s) recorded. The daily snapshot builds this up.

Tracking

Last trending: 2026-02-21

Creator kit

Hook

Transform your SIEM queries effortlessly with `iskra` - the plugin that bridges the gap between Splunk and other SIEM dialects!

Content angles

Create a tutorial on how to set up and use `iskra` for converting SIEM queries.
Discuss the importance of query migration in cybersecurity and how `iskra` simplifies this process.
Explore the different supported dialects and provide examples of successful query conversions.

Who should care

Security analysts and developers working with SIEM tools who need efficient query management.