Michael Wenthold

Rule simulation processing sample parsing logic is unclear in Graylog 5.2.4

6

There was a change in how sample messages submitted to the rule simulator text box are parsed by the pipeline rule simulator between 5.1.x and 5.2.4, and the required formatting...

Beats input strips JSON arrays containing JSON objects from Packetbeat messages.

13

Packetbeat fields that contain a JSON array containing JSON objects have the contain JSON objects removed, resulting in an empty field. ## Expected Behavior Packetbeat fields that contain a JSON...

Watchlist search filters with query parameter definitions cannot be included in content packs

4

## Expected Behavior When including event definitions with search filters using lookup-based parameters ($variable$) the content pack system should include the lookup information about the lookup. The reference(s) to the...

The Message View widget will sometimes display "Invalid date" even though the date field has been indexed successfully - see the lower right of the image below, with the field...