Graylog2 / Graylog2/graylog2-server

Support for dollar sign in message field names

Open
#9,888 0 comments 0 reactions 0 assignees View on GitHub
feature processing triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?
Field names which contain a dollar sign (like `field_name$`) are currently not supported, because we are using GELF internally which does not support field names with this character.

Here is the regex for valid keys:
https://github.com/Graylog2/graylog2-server/blob/master/graylog2-server/src/main/java/org/graylog2/plugin/Message.java#L193

This can be confusing in some cases because these fields show up e.g. when testing a JSON extractor for an input, but they are not part of the message after the injection.

At some point in the future we could enforce the GELF spec only for the GELF codec.

## Your Environment

* Graylog Version: 4.0

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.