Skip to content

fix(logs forwarder -waf ): serialize WAF message to JSON string allowing exclusion/inclusion matching#1070

Merged
ge0Aja merged 1 commit intomasterfrom
georgi/waf-message-matching
Mar 4, 2026
Merged

fix(logs forwarder -waf ): serialize WAF message to JSON string allowing exclusion/inclusion matching#1070
ge0Aja merged 1 commit intomasterfrom
georgi/waf-message-matching

Conversation

@ge0Aja
Copy link
Contributor

@ge0Aja ge0Aja commented Mar 4, 2026

What does this PR do?

WAF log transformation was leaving message as a Python dict, causing regex-based filtering (EXCLUDE_AT_MATCH/INCLUDE_AT_MATCH) to fail since str(dict) uses single quotes instead of JSON double quotes.

Motivation

Testing Guidelines

Additional Notes

Types of changes

  • Bug fix
  • New feature
  • Breaking change
  • Misc (docs, refactoring, dependency upgrade, etc.)

Check all that apply

  • This PR's description is comprehensive
  • This PR contains breaking changes that are documented in the description
  • This PR introduces new APIs or parameters that are documented and unlikely to change in the foreseeable future
  • This PR impacts documentation, and it has been updated (or a ticket has been logged)
  • This PR's changes are covered by the automated tests
  • This PR collects user input/sensitive content into Datadog
  • This PR passes the integration tests (ask a Datadog member to run the tests)
  • This PR passes the unit tests
  • This PR passes the installation tests (ask a Datadog member to run the tests)

…n match

WAF log transformation was leaving message as a Python dict, causing
regex-based filtering (EXCLUDE_AT_MATCH/INCLUDE_AT_MATCH) to fail
since str(dict) uses single quotes instead of JSON double quotes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@ge0Aja ge0Aja requested a review from a team as a code owner March 4, 2026 12:32
@github-actions github-actions bot added the aws label Mar 4, 2026
@ViBiOh ViBiOh self-assigned this Mar 4, 2026
@ge0Aja ge0Aja changed the title fix(waf): serialize WAF message to JSON string allowing exclusion/inclusion matching fix(logs forwarder -waf ): serialize WAF message to JSON string allowing exclusion/inclusion matching Mar 4, 2026
@ge0Aja ge0Aja merged commit a8f3f67 into master Mar 4, 2026
10 checks passed
@ge0Aja ge0Aja deleted the georgi/waf-message-matching branch March 4, 2026 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants