Fortigate - Values with "=" are getting splited even without an existing extractor for it

[gsmith]

Hello,

@eXiL

it almost looks like Graylog is separating the full message into parts with every “=”.

That will happen when not using the input to ingest your logs.

@eXiL

Maybe it has to do with the “select input”, do you use plain text?

Yes, our inputs are Raw/Plaintext UDP and we use ports above 1024.