Skip to content

Conversation

@obrien-matthew
Copy link

@obrien-matthew obrien-matthew commented Oct 15, 2024

The ingest function for pubsub messages contains an unnecessary json.dump which results in strings of JSON being ingested by Chronicle rather than JSON logs which can be parsed.

The log is also "json.dump"ed here: https://github.com/chronicle/ingestion-scripts/blob/main/common/ingest.py#L97

The double-dump ends up becoming an escaped JSON string in Chronicle rather than a parsed log.

The ingest function contains an unnecessary json.dump which results in strings of JSON being ingested by Chronicle rather than JSON logs which can be parsed.
@google-cla
Copy link

google-cla bot commented Oct 15, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant