Skip to content

feat: add support for escaping json dot notation#937

Draft
mhoff wants to merge 14 commits intomainfrom
feat-escaping-json-dot-notation
Draft

feat: add support for escaping json dot notation#937
mhoff wants to merge 14 commits intomainfrom
feat-escaping-json-dot-notation

Conversation

@mhoff
Copy link
Collaborator

@mhoff mhoff commented Feb 19, 2026

Description

  • Briefly summarize your changes in a few bullet points (can and should correspond to CHANGELOG.md)
  • Relates to #XXX (insert issue number here), if there is a corresponding GH issue

TODOs

Processors

  • Processor calculator (syntax calc: ${duration} * 10e5)
  • Processor decoder (dots in JSON, examples missing)
  • Processor dissector(syntax message: "%{}of %{extracted.message_float}")
  • Processor dropper (handling of fields in drop)
  • Processor generic_adder (handling of fields in add)
  • Processor grokker (syntax message: "%{TIMESTAMP_ISO8601:@timestamp} %{GREEDYDATA:logMessage}")
  • Processor replacer (syntax message: "Message %{*} was created by user %{USER_ID}.")
  • Processor requester (syntax hostname: ${message.hostname}, data, params, ...)
  • Processor template_replacer (syntax %{provider_name}-%{event_id}: %{new_message})
  • Processor timestamp_differ (syntax diff: ${t1:%Y-%m-%d %H:%M:%S} - ${t2:%Y-%m-%d %H:%M:%S})

Fields

  • regex_fields
  • source_fields
  • add
  • drop

Assignee

  • The changes adhere to the contribution guidelines
  • I have performed a self-review of my code
  • My changes generate no new warnings (e.g. flake8/mypy/pytest/...) other than deprecations

Documentation

Code Quality

  • Patch test coverage > 95% and does not decrease
  • New code uses correct & specific type hints

How did you verify that the changes work in practice?

  • List of (preferably easy reproducible) tests including OS

Reviewer


The rendered docs for this PR can be found here.

@mhoff mhoff force-pushed the feat-escaping-json-dot-notation branch from 0a644bc to 2f29283 Compare February 19, 2026 16:20
@codecov-commenter
Copy link

Codecov Report

❌ Patch coverage is 95.85062% with 10 lines in your changes missing coverage. Please review.
✅ Project coverage is 96.12%. Comparing base (0e19175) to head (e085c6d).

Files with missing lines Patch % Lines
logprep/abc/input.py 94.11% 3 Missing ⚠️
logprep/framework/rule_tree/rule_tagger.py 57.14% 3 Missing ⚠️
logprep/ng/abc/input.py 94.23% 3 Missing ⚠️
logprep/util/grok_pattern_loader.py 75.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #937      +/-   ##
==========================================
- Coverage   96.14%   96.12%   -0.02%     
==========================================
  Files         217      217              
  Lines       14219    14275      +56     
==========================================
+ Hits        13671    13722      +51     
- Misses        548      553       +5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@mhoff mhoff force-pushed the feat-escaping-json-dot-notation branch from 39828e3 to 65744b8 Compare February 27, 2026 17:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants