# 【ingest node】dissect processorとKV processorを1度に処理できるか

**URL:** https://discuss.elastic.co/t/ingest-node-dissect-processor-kv-processor-1/212268
**Category:** 日本語による質問・議論はこちら
**Created:** [December 18, 2019, 7:13am UTC](https://discuss.elastic.co/t/ingest-node-dissect-processor-kv-processor-1/212268 "2019-12-18T07:13:23Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![harue](https://avatars.discourse-cdn.com/v4/letter/h/82dd89/32.png) [@harue](https://discuss.elastic.co/u/harue)
#### Post date: [December 19, 2019, 1:46am UTC](https://discuss.elastic.co/t/ingest-node-dissect-processor-kv-processor-1/212268/3 "2019-12-19T01:46:45Z")

</div>

早急に回答頂きありがとうございます。  
上記パイプラインで想定の値を取得することが出来ました。

追加のご質問で恐縮ですが

サンプルログ(valueにスペースが存在するデータ)  
`key3=value3 key4=val ue4 key5=value5 key6=val ue6`

kv processorで以下を実行すると

```
POST _ingest/pipeline/_simulate
{
  "pipeline": {
    "processors": [
      {
        "kv": {
          "field": "message",
          "field_split": " ",
          "value_split": "="
        }
      },
      {
        "remove": {
          "field": "message"
        }
      }
    ]
  },
  "docs": [
    {
      "_index": "aaa",
      "_id": "1",
      "_source": {
        "message": "key3=value3 key4=val ue4 key5=value5 key6=val ue6"
      }
    }
  ]
}

```

以下のエラーが返ってきます。

```
  {
    "type" : "exception",
    "reason" : "java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: field [message] does not contain value_split [=]",
    "header" : {
      "processor_type" : "kv"
    }

```

インデックスデータは下記の通りに登録したいです。

```
field名 value
key3 value3
key4 val ue4
key5 value5
key6 val ue6

```

上記データをingest nodeで処理する方法はありますでしょうか。  
elastic discussの投稿を検索しましたが、回答が見つからずご教示頂けますと幸いです。

> [@How to set Kv filter plugin to keep spaces in value](https://discuss.elastic.co/t/how-to-set-kv-filter-plugin-to-keep-spaces-in-value/73032):
>
> Hi everyone : I am new to learn ELK, then I'm challenges in using kv filter now. Let me make it brief, the following is one part of my dataset: s1Label=Rule cs2Label=URL Category cs3Label=Virtual System then my configure is filter { kv{ field\_split=\>" " value\_split=\>"=" } the result I got was "s1Label":"Rule" "cs2Label":"URL" "cs3Label":"Virtual" How can I get the values including space and set field\_split=\>" " at same time ? Or is there any other filter to do that …

---

_[View the full topic](https://discuss.elastic.co/t/ingest-node-dissect-processor-kv-processor-1/212268)._