How to separate fields in different logs using logstash

Elastic Stack Logstash
1

hi all,
I have different lines of logs for example as following:

A1=5454;A2=34757354575;A3=setoh;A4=NU;A5=(555);A6=[78925]
B1=get;B2=589641;B3=258
C1=(5472);C2=LA;C3=Mid;C4=0000

I am using a csv filter in order to separate fields in above line using ";" separator. then I want to extract fields as following:
for example for line 1, create a field such as A1 which its value is 5454, and a field named as A2 which its value be as 34757354575 and so on:
A1=5454
A2=34757354575
A3=setoh
....

How can I do it? it means, using a script which dynamically get the left part of "=" sign as field's name and right part as its value; in addition do it for different lines which have different number of fields which separated by ";"
any advise will be so appreciated.

2

Use a kv filter to separate these key/value pairs

kv { field_split => ";" }
3

many thanks. it works

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.