Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug in inverted stream rule #2160

Closed
Myote opened this issue Apr 29, 2016 · 1 comment
Closed

Bug in inverted stream rule #2160

Myote opened this issue Apr 29, 2016 · 1 comment
Assignees
Labels
Milestone

Comments

@Myote
Copy link

@Myote Myote commented Apr 29, 2016

Problem description

Messages without the test field are also excluded

Steps to reproduce the problem

  1. ...Make a rule:
    we can select all messages with "Field facility must match exactly runit-service" but not the reverse,
    because "Field facility must not match exactly runit-service" also excluded the messages without the field facility or with empty field.

Environment

  • Graylog Version: 2.0.0
  • Elasticsearch Version: 2.3.1
  • MongoDB Version: 3.2.1
  • Operating System: REDHAT 6.6
  • Browser version: Firefox, chrome
@dennisoelkers dennisoelkers self-assigned this May 2, 2016
@dennisoelkers dennisoelkers added the bug label May 2, 2016
@dennisoelkers dennisoelkers added this to the 2.0.1 milestone May 2, 2016
@dennisoelkers dennisoelkers removed the bug label May 2, 2016
@kroepke kroepke added bug S3 P3 labels May 2, 2016
dennisoelkers added a commit that referenced this issue May 2, 2016
Before this change, inverted exact/regex rules did not match when the
field is not present or null. This is changed and reflected in the
tests.

Fixes #2160.
@Myote
Copy link
Author

@Myote Myote commented May 2, 2016

your english is better than mine ... all is summarized in a few words.

@joschi joschi closed this in #2172 May 3, 2016
joschi added a commit that referenced this issue May 3, 2016
…2172)

Inverted regex/exact rules should match when field is not present.

Before this change, inverted exact/regex rules did not match when the field is not present or null. This is changed and reflected in the tests.

Fixes #2160.
joschi pushed a commit that referenced this issue May 3, 2016
…2172)

Inverted regex/exact rules should match when field is not present.

Before this change, inverted exact/regex rules did not match when the field is not present or null. This is changed and reflected in the tests.

Fixes #2160.
(cherry picked from commit 391697a)
@kroepke kroepke added the triaged label Sep 21, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants
You can’t perform that action at this time.