Creating new field with logstash

Elastic Stack Logstash
3

Given your log line format, I advice you to use "kv" filter rather than "grok" :

kv {
  field_split => ","
}