error messages on named parameters and unnamed parameters

[jalogisch]

Problem description

When you write a rule you could not mix named and unnamed parameters. That would be clear if the error message would indicate that mixing named and unnamed should not be done.

The mixed setup does not work and gives the error,

set_fields(key_value(to_string($message.message)), prefix: "auditd_" );

while naming the parameters work without any problems

set_fields(fields: key_value(to_string($message.message)), prefix: "auditd_" );

Steps to reproduce the problem

1. Create a Pipeline rule with mixed named and unnamed parameters set_fields(key_value(to_string($message.message)), prefix: "auditd_" );

Environment

• Graylog Version:2.4