Marco Pfatschbacher
Marco Pfatschbacher
## What? Messages currently only accept keys that are matching this regex: https://github.com/Graylog2/graylog2-server/blob/master/graylog2-server/src/main/java/org/graylog2/plugin/Message.java#L195 Anything else will be **silently** discarded This by itself is a separate problem. ## Why? Some logs...
An elastic cluster might not have enough memory available to accept a full bulk index request. It can reject it with a HTTP/1.1 429 Too Many Requests exception. We could...
The fact that we don't support dots in field names is nothing new. This code has been there since ages, silently replacing dots with underscores once a Message gets written...
When creating a pipeline rule, the provided description is ignored. This only seems to happen when the last action is editing the rule, not the description field. I think the...
It seems the sidecar upgrade on Windows is not well tested and defined. According to https://community.graylog.org/t/sidecar-upgrades-and-default-configs/10158 the uninstaller also deletes the `node-id` file. This prevents us from recommending to simply...
Each collector relies on a place to write its own logs, spool files, etc. We want to ensure that multiple collectors don't step on each others toes. Possible solution: -...
The current code relies on the fact that ucfg is using a non-strict yaml `Unmarshal()` which allows us to overload keys. This either needs a unit test, or a rewrite...
### Problem description Windows filesystems are case insensitive. We should make the `collectors_binary_whitelist` matching ignore case. refs #363
Fixes #206
## Context While setting up winlogbeat, it might be helpful to create event logs for testing purposes. At least for me, this wasn't straight forward, because ``Write-Eventlog`` is very picky...