Removing "\u0000" from the end of a message

[andarotajo]

I've been experimenting with getting my Home Assistant logs via syslog and it works great so far. What I noticed today though is that after parsing the syslog message using . |= parse_syslog!(.message) my messages have a "\u0000" at the end, like this:

{
  "appname": "addon_core_mosquitto",
  "facility": "user",
  "host": "haos"
  "hostname": "haos",
  "message": "2025-06-30 12:04:18: Client <unknown> closed its connection.\u0000",
  "severity": "info",
  "source_type": "syslog",
  "timestamp": "2025-06-30T12:04:19Z"
}

I'm currently trying to remove that to clean up the line but for some reason I can't get it to work using
.message = replace(.message, s'\u0000', "")

Would love some help on how to clean the message up here

[thomasqueirozb]

This should work just fine:

.message = replace!(.message, r'\u0000', "")

Not sure why the string replace is not working properly, it might be a bug. If you want you can dive deeper into this and file a bug report

[andarotajo]

Huh with this regex it works interestingly. I did try a different regex, sth. like ^(?P<message>.*)\u0000$ and had it replaced with $$message but that didn't help either so it's weird to me that the simple one works.

I wonder why the s'\u0000' doesn't work