> That's why Graylog requires you to load a log entry example when creating an extractor

So it still fails silently when the log format changes slightly, e.g. upstream fixes spelling or grammar in one of the log messages produced.