I need to grok a pipe-delimited string of values in a grok line; for example:
What is the easiest way to do this? Some ideas I had:
- Some sort of grok split
- Custom Python parser. Filebeat strips off the log line, and forwards it to a Python script for processing
- Editing the source for Filebeat, looking for lines that contain strings like this, and parse them directly in Go
- Using the logstash-filter-fix_protocol on Github as a guide:
Any guidance is appreciated.