Remove FortiGate unquoted KV_PATTERN for fileds

graylog-labs / syslog4j-graylog2

The syslog4j fork from Graylog2. This is used since 0.10.0. The original code was very "special" and no actions were taken to improve it. This is planned to be replaced completely in future versions.

GNU Lesser General Public License v2.1

32 stars 40 forks source link

Remove FortiGate unquoted KV_PATTERN for fileds #50

Closed d-a-n-d-u closed 11 months ago

d-a-n-d-u commented 12 months ago

Unquoted fileds are not used in any FortiOS release post 5.x and parsing unqoted fileds creates erroneous fields when the log message has a URL filed like url="/test?field=value"

CLAassistant commented 12 months ago

All committers have signed the CLA.