Théo Bertin

Add support for XML parser in rulebases ** V2 syntax only ** Example of rulebase using the new "xml" keyword: version=2 rule=:XMLDescription=%.:xml%

LOGNORMALIZER::CHANGED:: when using '-V' flag, return 0 (zero) when program exits

3

# Description When printing lognormalizer's version through its '-V' flag, the return code is not zero, that return code is counter intuitive and prevents using the command in scripts and/or...

ALTER_QUERY::FIXED:: Also rename __schema__ document for renamed collection

1

# Description When doing a migration including `RenameModel()` operations, collections are correctly reamed, but not their corresponding __schema__ document, resulting in out-of-sync database information for fields and auto-incremental primary IDs...

Mmdblookup module used to suspend after erroring on an IPv6 IP lookup on IPv4-only DBs This commit replaces the suspension of the module by a simple log message, allowing it...

rsyslogd: a lookup table could not be initialized: failed at init-step 4

1

### Expected behavior When loading a large (and valid) configuration file with many lookup tables with `-N1`, the checks should return a valid configuration. ### Actual behavior (Tested on an...

# Description When adding Adiscon's ubuntu stable repository to ubuntu and trying to install rsyslog-impcap, package cannot be installed due to missing/unresolved dependency : ``` root@8bde8114be4e:/# apt install rsyslog rsyslog-impcap...

# :sparkles: Buffer fixes and improvements ## :page_with_curl: Type of change Please delete options that are not relevant. **Bug fix**: non-breaking change which fixes an issue. ## :bulb: Related Issue(s)...

# :sparkles: Pull Request Template :bangbang: Once all the **checklist** is **done** you have to: * **stash merge** this pull request * **delete** the corresponding **branch** * **close** the associated...

# :sparkles: Redis improvements and fixes ## :page_with_curl: Type of change Please delete options that are not relevant. **Bug fix**: non-breaking change which fixes an issue. **New feature**: non-breaking change...

**Describe the bug** Sometimes, alerts are generated with fields containing non-escaped quotes, invalidating json formatting. This behaviour has been observed with the Hostlookup filter, but is not limited to this...