I’m trying to parse JSON string at first stage, then handle the data in different rules by it’s “type” at second stage, but it seems that “type” always is NULL.
Here are the rules:
let message = parse_json(to_string(body.json_str)); set_field("data", message);
when true then debug($message.data.type);
org.graylog.plugins.pipelineprocessor.ast.functions.Function - PIPELINE DEBUG: Passed value is NULL.
Am i using it wrong way? please correct me.