Escape characters in message


there are some escape characters when logs are collected in to graylog.
this is origin log

    "level": "debug",
    "message": "response from test: {\"keys\":[{\"kty\":\"RSA\",\"e\":\"AQAB\",\"use\":\"sig\",\"kid\":\"text.00001\",\"alg\":\"RS256\",\"n\":\"\"}]}",
    "timestamp": "2019-08-21T10:11:35.678Z"

and when it goes to graylog, it comes to

is there some configuration about this, or if I can delete the escape character by pipeline?


did you ingest gelf messages? What kind of input did you use?

It looks like a bug for me - but it really depends on the input.

yes, I’m use gelf tcp protocol.

I’m not sure if that is a bug or a feature that escape characters are escaped to be present in the final message. But whatever is intentional, that you have not the same message you ingest saved (and finally displayed) I see as a bug.

Could you please open a bug report:

sure, I’ll open an issue.
And I test again, if the log contains " , it will be escaped.

{"keys": [{"report": "rancher"}]}{"keys": [{"report": "rancher"}]}

will be escaped to

{\"keys\": [{\"report\": \"rancher\"}]}

will be escaped to

the issue has been submitted:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.