Graylog2 / Graylog2/graylog2-server
Support for dollar sign in message field names
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
## What?
Field names which contain a dollar sign (like `field_name$`) are currently not supported, because we are using GELF internally which does not support field names with this character.
Here is the regex for valid keys:
https://github.com/Graylog2/graylog2-server/blob/master/graylog2-server/src/main/java/org/graylog2/plugin/Message.java#L193
This can be confusing in some cases because these fields show up e.g. when testing a JSON extractor for an input, but they are not part of the message after the injection.
At some point in the future we could enforce the GELF spec only for the GELF codec.
## Your Environment
* Graylog Version: 4.0
Contributor guide
Assessment
This issue has not been assessed yet.