Join GitHub today
GitHub is home to over 31 million developers working together to host and review code, manage projects, and build software together.Sign up
Cannot create GROK pattern with underscores in field name. #5563
Graylog should accept underscores in field name and create the grok pattern.
Graylog returns "Could not test Grok pattern
Steps to Reproduce (for bugs)
Create a grok pattern like
Unfortunately this is not fixable. The java Pattern matcher does not allow to have underscores in its named groups:
The only alternative would be to implement our own Pattern Matcher which would be slightly out of scope.