Extracting a key value pair in which the key contains certain string

The kv filter doesn't support this out of the box, but you can use a prune filter to remove fields except those matching a regexp.