Skip to content

Escaping characters in parse_cef? #23943

@sb1-nicolai

Description

@sb1-nicolai

Hi.

I am trying to get the parse_cef() function to escape characters, but I am unable to get it to parse fields that include = such as: ... cs4=None request="https://foo.com?id=foo&a=bar" abc=lol

Here is a link to the VRL Playground with example data: link

If I am not mistaken CEF-formatted data should include quotes for data that requires it (as it does in my example) but I cannot get Vector to parse it correctly and have run out of ideas to test.

Currently all CEF-formatted URL logs that include parameters are being dropped by the transformer and is what I am trying to fix.

There is a chance I have overlooked something here, but from what I could see the only option to adjust the parse_cef function is translate_custom_fields which unfortunately does not help much in this case.

Is it possible to use parse_cef or is it better to go with a custom transformer such as the one mentioned in #6451?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions