Can logstash automatically identify KV pairs in the logs and parse them


(Mulligan) #1

Can Logstash automatically identify KV pairs in the logs and parse them just like how splunk does.

I actually wrote one GROK filter which parses the fields and defined a KV filter so that the additional fields can be parsed out. But some logs are so random that they dont match my GROK and from those logs i have to parse the KV pairs into fields.


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.