[8.17] [Automatic Import] Fix Structured log template to use single quotes (#209736) (#209781)

# Backport

This will backport the following commits from `main` to `8.17`:
- [[Automatic Import] Fix Structured log template to use single quotes
(#209736)](https://github.com/elastic/kibana/pull/209736)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Bharat
Pasupula","email":"123897612+bhapas@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-02-05T12:52:04Z","message":"[Automatic
Import] Fix Structured log template to use single quotes (#209736)\n\n##
Release Note\r\n\r\nFix Structured log template to use single
quotes\r\n\r\n### Summary\r\n\r\nCurrently with a single backslash as
escape character the template is\r\nsetting up a double quote
surrounding it and it causes YAML Exception\r\n```\r\n 1 | - kv:\r\n 2 |
field: message\r\n 3 | field_split:
\"\\|\"\r\n--------------------------^\r\n\r\nYAMLException: unknown
escape sequence (3:22)\r\n```\r\n\r\nThis PR fixes to use single quotes
to not break YAML
parsing.","sha":"8181858385efdc099b9ac517afe58ef6d1ba18a6","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:fix","backport:prev-minor","backport:prev-major","Team:Security-Scalability","Feature:AutomaticImport","backport:8.17","v9.1.0","backport:8.18"],"title":"[Automatic
Import] Fix Structured log template to use single
quotes","number":209736,"url":"https://github.com/elastic/kibana/pull/209736","mergeCommit":{"message":"[Automatic
Import] Fix Structured log template to use single quotes (#209736)\n\n##
Release Note\r\n\r\nFix Structured log template to use single
quotes\r\n\r\n### Summary\r\n\r\nCurrently with a single backslash as
escape character the template is\r\nsetting up a double quote
surrounding it and it causes YAML Exception\r\n```\r\n 1 | - kv:\r\n 2 |
field: message\r\n 3 | field_split:
\"\\|\"\r\n--------------------------^\r\n\r\nYAMLException: unknown
escape sequence (3:22)\r\n```\r\n\r\nThis PR fixes to use single quotes
to not break YAML
parsing.","sha":"8181858385efdc099b9ac517afe58ef6d1ba18a6"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/209736","number":209736,"mergeCommit":{"message":"[Automatic
Import] Fix Structured log template to use single quotes (#209736)\n\n##
Release Note\r\n\r\nFix Structured log template to use single
quotes\r\n\r\n### Summary\r\n\r\nCurrently with a single backslash as
escape character the template is\r\nsetting up a double quote
surrounding it and it causes YAML Exception\r\n```\r\n 1 | - kv:\r\n 2 |
field: message\r\n 3 | field_split:
\"\\|\"\r\n--------------------------^\r\n\r\nYAMLException: unknown
escape sequence (3:22)\r\n```\r\n\r\nThis PR fixes to use single quotes
to not break YAML
parsing.","sha":"8181858385efdc099b9ac517afe58ef6d1ba18a6"}},{"url":"https://github.com/elastic/kibana/pull/209757","number":209757,"branch":"9.0","state":"OPEN"}]}]
BACKPORT-->

Co-authored-by: Bharat Pasupula <123897612+bhapas@users.noreply.github.com>
This commit is contained in:
Kibana Machine 2025-02-06 03:20:33 +11:00 committed by GitHub
parent 50d18b419a
commit ab1cf33278
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,7 +1,7 @@
- kv:
field: message
field_split: "{{ kvInput.field_split }}"
value_split: "{{ kvInput.value_split }}"
trim_key: "{{ kvInput.trim_key }}"
trim_value: "{{ kvInput.trim_value }}"
target_field: "{{ packageName }}.{{ dataStreamName }}"
field_split: '{{ kvInput.field_split }}'
value_split: '{{ kvInput.value_split }}'
trim_key: '{{ kvInput.trim_key }}'
trim_value: '{{ kvInput.trim_value }}'
target_field: '{{ packageName }}.{{ dataStreamName }}'