[medium] Keep eval-only regex condition variables out of tstats where - #80

[medium] Keep eval-only regex condition variables out of tstats where#80

elhoim wants to merge 1 commit into

SigmaHQ:mainSigmaHQ/pySigma-backend-splunk:mainfrom

elhoim:fix/datamodel-or-regex-tstats-whereelhoim/pySigma-backend-splunk:fix/datamodel-or-regex-tstats-whereCopy head branch name to clipboard