Graylog2 / Graylog2/graylog2-server
Index message even when a mandatory field is missing
Open
improvement
triaged
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
It should be possible to index messages even when a mandatory field like `message` is missing.
In this case Graylog could simply inject an error message saying that the message was not complete and maybe even display this in the UI.
## Expected Behavior
Messages with missing mandatory fields should be indexed if possible
## Current Behavior
Messages are dropped
## Possible Solution
Relax GELF input and auto-complete missing fields with e.g. error messages
## Context
Big companies don't always have full control over what is send to Graylog so it should be less strict about broken messages.
Contributor guide
Assessment
This issue has not been assessed yet.