Sigma rule conversion to lucene word segmentation problem when querying in opensearch

[neoliu67]

The rules are converted into lucene statements through sigma-cli. The lucene statement adds * before and after the keyword. If the keyword is a phrase, the lucene statement will be segmented when it is queried through opensearch, causing query problems. The expectation is to put quotation marks(") around the keywords.

[thomaspatzke]

Moved to the appropriate project.