CEF fields names with "." are parsed incorrectly

Part of CEF message:

_cefVer=0.1 ad.FTNTFGTpoluuid=9f301924-01e9-51e8-b934-02e3223081a3

Parsed into field value of _cefVer with extra string part from next field name containing ".":

_cefVer 0.1 ad.

[theherodied]

Having the same issue. Some of it documented here.

https://community.graylog.org/t/fortinet-cef-formatting-issues/12017

[theherodied]

Just a note here, Fortinet is also sending strings for some values when they should be sending integers. At least that's what I see when sending CEF from Fortianalyzer. Two examples are "in" and "out". Instead of sending something like "0" they are sending "N/A". Which causes the parser to drop the message.

I've requested a change request with Fortinet for both issues.