Cannot save new pipeline

Graylog Central (peer support)
,
1

Hello there,

I’m trying to create my first pipeline. It is very basic :
‘’’
rule “replace timestamp”
when
true
then
debug($message.HTTPDATE);
let new_date = parse_date(to_string($message.HTTPDATE), “dd/MMM/yyyy:HH:mm:ss”, “FR”, “CET”);
debug(new_date);
set_field(“timestamp”, new_date);
end
‘’’
When trying to save or apply, receive error : Could not save processing rule “undefined”, Could not save processing rule “undefined” (obfuscated url) (400).

Graylog 4.0.5+d95b909

Any hints ?

Best regards,

2

Hey @pguinet,

Does the pipeline rule you’re configuring actually contain the stylized left and right double quotation marks (U+201C and U+201D)? Or are they the neutral quotation marks (U+0022)? If they’re stylized that’s probably what’s causing your issue.

3

Always paste your pipeline rules here as code inside ``` text ```, so that it’s formated as original.

4

Hi,
At first they were stylized and I fixed that, but still same error.

5

Actual rule :

rule "replace_timestamp"
when
  true
then
  debug($message.HTPDATE);
  let new_date = parse_date(to_string($message.HTTPDATE), “dd/MMM/yyyy:HH:mm:ss”, "FR", "CET");
  debug(new_date);
  set_field(“timestamp”, new_date);
end
6

Fixed all stylized double quotation marks and it worked.

Thanks Andrew for pointing that out.

1 Like
7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.