Fields splitting from kv filter not containing blank values

I am using 'kv' filter in logstash like this

kv {
source => "request"
field_split => "&?"
}

I have a message like "key=value&key1=&key2=value2"

the logstash output is coming like this

"key" : "value"
"key1" : "&key2=value2"

But it should be like this

"key" : "value"
"key1" : ""
"key2" : "value2"

Can somebody suggest how can we achieve this?

You could use default_keys to set the value of key1, but a kv filter parsing dynamic keys will not retain blank values.

I can not use default_keys because the real message is search query and it can be dynamic and contains any no of fields

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.