/graylog2-server

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Selection by regexp is displaced #804

Closed
gekmcfh opened this Issue Dec 8, 2014 · 2 comments

Comments

Assignees

@bernd bernd

Labels
Projects
None yet
Milestone
  1.0.0
3 participants
@gekmcfh @bernd @kroepke
@gekmcfh

gekmcfh commented Dec 8, 2014

Then i try to create regexp-extractor, any selection, which i do is displace on 2 symbols to left. Example:

Example origin message:
"<188>Dec 5 18:30:33 2014 pnz_clck_4fl %%10IFNET/4/INTERFACE UPDOWN(t): Trap 1.3.6.1.6.3.1.1.5.3: Interface 9437220 is Down, ifAdminStatus is 1, ifOperStatus is 2 "

Regexp:
: (.+):

Expected selection:
Trap 1.3.6.1.6.3.1.1.5.3

Getting selection:
: Trap 1.3.6.1.6.3.1.1.5

version: 0.92 from 1st december 2014

@kroepke kroepke added bug processing labels Dec 28, 2014

@kroepke kroepke added this to the 0.93 milestone Dec 28, 2014

@kroepke kroepke assigned bernd Jan 14, 2015

@bernd

This comment has been minimized.

Sign in to view
Member

bernd commented Jan 15, 2015

Thank you for the report. This is an URL encoding issue caused by the %10 in the message. It only affects the extractor test in the web interface. I will commit a fix for that soon.

extractor-regex

bernd added a commit to graylog-labs/graylog2-web-interface that referenced this issue Jan 15, 2015

@bernd
URI encode the regex test string to avoid wrong test results. 
If the regex test message contained a "%10", the test result was off
because of encoding problems.

Fixes Graylog2/graylog2-server#804
Loading status checks…
8bb1add
@bernd

This comment has been minimized.

Sign in to view
Member

bernd commented Jan 15, 2015

Fixed by graylog-labs/graylog2-web-interface@8bb1add

@bernd bernd closed this Jan 15, 2015

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment