Escape characters in message

Graylog Central (peer support)
1

Hello,

there are some escape characters when logs are collected in to graylog.
this is origin log

{
    "level": "debug",
    "message": "response from test: {\"keys\":[{\"kty\":\"RSA\",\"e\":\"AQAB\",\"use\":\"sig\",\"kid\":\"text.00001\",\"alg\":\"RS256\",\"n\":\"\"}]}",
    "timestamp": "2019-08-21T10:11:35.678Z"
}

and when it goes to graylog, it comes to

image
image.png1002×120 17.9 KB

is there some configuration about this, or if I can delete the escape character by pipeline?

Thanks.

2

did you ingest gelf messages? What kind of input did you use?

It looks like a bug for me - but it really depends on the input.

3

yes, I’m use gelf tcp protocol.

4

I’m not sure if that is a bug or a feature that escape characters are escaped to be present in the final message. But whatever is intentional, that you have not the same message you ingest saved (and finally displayed) I see as a bug.

Could you please open a bug report: https://github.com/Graylog2/graylog2-server/issues

5

sure, I’ll open an issue.
And I test again, if the log contains " , it will be escaped.

{"keys": [{"report": "rancher"}]}{"keys": [{"report": "rancher"}]}

will be escaped to
image

{\"keys\": [{\"report\": \"rancher\"}]}

will be escaped to
image

6

the issue has been submitted: https://github.com/Graylog2/graylog2-server/issues/6338

7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.