Graylog2 / Graylog2/graylog2-server

Index message even when a mandatory field is missing

Open
#4,699 0 comments 0 reactions 0 assignees View on GitHub
improvement triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

It should be possible to index messages even when a mandatory field like `message` is missing.
In this case Graylog could simply inject an error message saying that the message was not complete and maybe even display this in the UI.

## Expected Behavior

Messages with missing mandatory fields should be indexed if possible

## Current Behavior

Messages are dropped

## Possible Solution

Relax GELF input and auto-complete missing fields with e.g. error messages

## Context

Big companies don't always have full control over what is send to Graylog so it should be less strict about broken messages.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.