{"action":"created","issue":{"url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/650","repository_url":"https://api.github.com/repos/Graylog2/graylog2-server","labels_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/650/labels{/name}","comments_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/650/comments","events_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/650/events","html_url":"https://github.com/Graylog2/graylog2-server/issues/650","id":39389236,"node_id":"MDU6SXNzdWUzOTM4OTIzNg==","number":650,"title":"Support multiple JSON paths in \"JSON path from HTTP API input\"","user":{"login":"2ion","id":666784,"node_id":"MDQ6VXNlcjY2Njc4NA==","avatar_url":"https://avatars2.githubusercontent.com/u/666784?v=4","gravatar_id":"","url":"https://api.github.com/users/2ion","html_url":"https://github.com/2ion","followers_url":"https://api.github.com/users/2ion/followers","following_url":"https://api.github.com/users/2ion/following{/other_user}","gists_url":"https://api.github.com/users/2ion/gists{/gist_id}","starred_url":"https://api.github.com/users/2ion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/2ion/subscriptions","organizations_url":"https://api.github.com/users/2ion/orgs","repos_url":"https://api.github.com/users/2ion/repos","events_url":"https://api.github.com/users/2ion/events{/privacy}","received_events_url":"https://api.github.com/users/2ion/received_events","type":"User","site_admin":false},"labels":[{"id":178986199,"node_id":"MDU6TGFiZWwxNzg5ODYxOTk=","url":"https://api.github.com/repos/Graylog2/graylog2-server/labels/feature","name":"feature","color":"006b75","default":false},{"id":104198629,"node_id":"MDU6TGFiZWwxMDQxOTg2Mjk=","url":"https://api.github.com/repos/Graylog2/graylog2-server/labels/processing","name":"processing","color":"eb6420","default":false},{"id":222229049,"node_id":"MDU6TGFiZWwyMjIyMjkwNDk=","url":"https://api.github.com/repos/Graylog2/graylog2-server/labels/triaged","name":"triaged","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2014-08-04T04:03:49Z","updated_at":"2018-12-07T23:49:48Z","closed_at":null,"author_association":"NONE","body":"The current implementation of the JSON path from HTTP API input is very limiting, we can get only one value from the JSON response with one JSON path. It would be desirable to be able to specify multiple JSON path->message field mappings. \n"},"comment":{"url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/comments/445402976","html_url":"https://github.com/Graylog2/graylog2-server/issues/650#issuecomment-445402976","issue_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/650","id":445402976,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NTQwMjk3Ng==","user":{"login":"2ion","id":666784,"node_id":"MDQ6VXNlcjY2Njc4NA==","avatar_url":"https://avatars2.githubusercontent.com/u/666784?v=4","gravatar_id":"","url":"https://api.github.com/users/2ion","html_url":"https://github.com/2ion","followers_url":"https://api.github.com/users/2ion/followers","following_url":"https://api.github.com/users/2ion/following{/other_user}","gists_url":"https://api.github.com/users/2ion/gists{/gist_id}","starred_url":"https://api.github.com/users/2ion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/2ion/subscriptions","organizations_url":"https://api.github.com/users/2ion/orgs","repos_url":"https://api.github.com/users/2ion/repos","events_url":"https://api.github.com/users/2ion/events{/privacy}","received_events_url":"https://api.github.com/users/2ion/received_events","type":"User","site_admin":false},"created_at":"2018-12-07T23:49:48Z","updated_at":"2018-12-07T23:49:48Z","author_association":"NONE","body":"On Fri, Dec 07, 2018 at 11:36:56AM -0800, Mike Nabhan wrote:\n>Yes, I agree the pipeline function is the way to parse this data, but\n>the jsonpath function in graylog will only allow for a single\n>datapoint.  It can't ingest the entire json stream, and fails to work\n>if a path with multiple values is specified.  That is the issue I am\n>trying to solve.\n\nExactly, that is why I was referring to 'custom pipeline functions' --\nit's simple to implement a custom function that does what you need in\nJava and invoke it from the Graylog DSL. You'd write a Graylog plugin\n[1].\n\nI hit a similar issue with a function(ality) limitation in the DSL a\nwhile back (#3605) and judging from the reaction there the developers\nwon't modify 'simple' built-ins to cover all imaginable use cases.\n\nIf you *need* to solve your problem *now*, writing such a custom\nfunction is probably the most efficient way to go about it.\n\n> Perhaps I am misunderstanding, or this was not the correct place to\n> post about this.\n\nSince this issue here deals with an input, it is probably better to open\na separate ticket as a feature request concerning the pipeline function\n(may get dealt with and/or implemented faster).\n\nInputs are different modules of the Graylog system and Torch are working\nhard to move get rid of processing functionality in inputs/extractors\nand fully migrate to the pipeline-based system, which is why I would\nkeep our two issues separate.\n\n---\n[1] https://www.graylog.org/post/writing-your-own-graylog-processing-pipeline-functions\n"}}
{"actor":{"display_login":"2ion"}}