Skip to content

short_message should be remapped even if it is empty #50

@kongslund

Description

@kongslund

When receiving a GELF event with an empty short_message and no full_message then it does not get remapped as expected. This is a consequence of PR #18 by @ggtools.

Removing the && !event.get("short_message").empty?-part would fix it.

  • Version: 2.4.0
  • Operating System: Linux
  • Config File:
input {
  gelf {
    port => 12201
    type => "gelf"
  }
}
output {
  stdout { codec => rubydebug }
}
  • Sample Data:
{
  "version": "1.1",
  "host": "example.org",
  "short_message": "",
  "timestamp": 1385053862.3072,
  "level": 1,
  "_user_id": 9001,
  "_some_info": "foo",
  "_some_env_var": "bar"
}
  • Steps to Reproduce:
    Feed sample data to Logstash and observe that the output contains short_message instead of message.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions