Im using the kv plugin to extract some values from syslog messages such as From, to, call-ID, etc. Problem is that some logs come in capitalized and others don't and from what I can tell kv are case sensitive, any suggestions to solve this? here is the section of the code im using now
kv{
include_keys => ["Contact", "To", "From", "Call-ID"] # take syslog_message & look for keyvalues followed by ":" and parce them out
source => "syslog_message"
value_split => ":"
}