Graylog2/graylog2-server — pull request #99 by r-duran (2012-10-18 13:25:30+00:00)
Title: Make tokenizer filter to recognize double quoted values so it will not b...

...reak on whitespace in a quoted value string

With this I can use tokenizer filter for our Astaro firewall logs with success:

2012: 10:18-16:20:47 ulogd[6288]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="7" initf="eth0" outitf="eth2" srcmac="xx:xx:xx:xx:xx:xx" dstmac="xx:xx:xx:xx:xx:xx" srcip="172.16.3.145" dstip="10.1.1.5" proto="17" length="74" tos="0x00" prec="0x00" ttl="126" srcport="55200" dstport="53"