Key Value in pipelines configuring the characters for keys

Graylog Central (peer support)
1

Hi,

we’re wondering if it is possible to restrict the characters of the keys parsed by the key value function in a pipeline.

Our context is, that we need to extract only keys with characters out of [a-zA-Z_].

Looking forward

Peter

2

Please send some example message you try to parse…

3

sure.

this is an example that shouldn’t be parsed :

341 [main] INFO com.netflix.conductor.contribs.http.HttpTask - HttpTask initialized…

in contrast

SampleEvent[test] - sdfdfhjhkj khjdfhgkdfg

which should be parsed.

4

that is something you might accomplish with a processing pipeline rule …

5

I think, that one solution would be to use regex condition for pipeline rule:

rule “regexMatch”
when
regex(“[1]+\s*[.*]”, to_string($message.mesage)).matches == true
then
…
end

  1. a-zA-Z_ ↩︎

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.