New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

error messages on named parameters and unnamed parameters #235

jalogisch opened this Issue Jan 4, 2018 · 0 comments


None yet
1 participant

jalogisch commented Jan 4, 2018

Problem description

When you write a rule you could not mix named and unnamed parameters. That would be clear if the error message would indicate that mixing named and unnamed should not be done.

screenshot 2018-01-04 13 34 44

The mixed setup does not work and gives the error,

set_fields(key_value(to_string($message.message)), prefix: "auditd_" );

while naming the parameters work without any problems

set_fields(fields: key_value(to_string($message.message)), prefix: "auditd_" );

Steps to reproduce the problem

  1. Create a Pipeline rule with mixed named and unnamed parameters
    set_fields(key_value(to_string($message.message)), prefix: "auditd_" );


  • Graylog Version:2.4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment