I’m trying to sanitize Unicode garbage using regex_replace
So substring like \xD0\xD0\xD0\xD0\xD0\xD0\xD0 must be replaced with some stub(because it prevents Extractor to parse message as a JSON)
I have the following pattern:
(?>\\x[A-F0-9]{2})+
Graylog can’t consume such pattern directly, so I’m trying to escape it properly.
Simple ways didn’t work, so finally I came to escaping everything:
let filtered_message = regex_replace("\(\?>\\x\[A\-F0\-9\]\{2\}\)\+", to_string($message.message), "*");
Which also doesn’t work. Please help me to get the point