Summary
With the merge of #54280 the field type columns don't expect their value to be JSON-encoded anymore. This still happens on the anomalies and categories tabs, where the event.dataset field column is used to show the log entry examples in the expanded table rows.
This leads to the dataset values being shown as "nginx.access" (with quotes) instead of just nginx.access.
Summary
With the merge of #54280 the
fieldtype columns don't expect their value to be JSON-encoded anymore. This still happens on the anomalies and categories tabs, where theevent.datasetfield column is used to show the log entry examples in the expanded table rows.This leads to the dataset values being shown as
"nginx.access"(with quotes) instead of justnginx.access.