Geo subdivisions in pipeline no longer work

[smwinn]

Expected Behavior

I expect this line within a pipeline rule to work without errors like in previous versions.

Current Behavior

The line now gives an error and cannot be saved. I can see the subdivisions information when examining the geo data manually.

Steps to Reproduce (for bugs)

Create a pipeline rule that attempts to access the geo subdivisions data.

Context

I'm trying to use the subdivisions field within geo location data.

Your Environment

• Graylog Version: 5.2.3
• Java Version: 17.0.9+9
• OpenSearch Version: 2.11.1
• MongoDB Version: 5.0.24
• Operating System: Ubuntu 22.04.3 LTS
• Browser version: Any

[sethgraylog]

What previous version did you see this syntax work correctly?

[smwinn]

I believe it broke when I went from 5.1 to 5.2.

[patrickmann]

This is due to #16196. While that flags some bad syntax, it was too broad and now prevents legal expressions. I commented out those 3 lines and was able to extract the geoIP data successfully.