Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Grok Debugger] field names with special characters not possible #18077

Closed
elasticmachine opened this issue Nov 22, 2017 · 2 comments
Closed

Comments

@elasticmachine
Copy link
Contributor

Original comment by @LucaWintergerst:

Kibana version: 6.0.0

Elasticsearch version: 6.0.0

Description of the problem including expected versus actual behavior:

Logstash allows special characters in field names to create the hidden EMAIL REDACTED fields in logstash. These are used to store data which is not sent to the outputs by default.
When debugging grok expressions containing this syntax, the debugger either throws an error or fails silently. (error in Chrome on Mac, silent fail on Deb9 with Chromium). While not critical for the overall functionality, it is annoying that these field names have to be substituted before and after debugging.

Steps to reproduce:

  1. enter any data to match
  2. attempt to match nested special field: EMAIL REDACTED

Errors in browser console (if relevant):
GrokDebugger: Provided Grok patterns do not match data in the input

@elasticmachine
Copy link
Contributor Author

Original comment by @talevy:

thanks for sharing this. I looked into this in the past but failed to finish up the job. Here is the issue for this in es: elastic/elasticsearch#21745

@jloleysens
Copy link
Contributor

Hi @LucaWintergerst ! I tested this on current master and was not able to reproduce the error described.

Screenshot 2021-04-22 at 15 11 32

I am going to close this issue for now, let me know if you are still running into this by re-opening with details on how to reproduce. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants