# KV filter problem with value\_split
**URL:** https://discuss.elastic.co/t/kv-filter-problem-with-value-split/133436
**Category:** Logstash
**Created:** [May 28, 2018, 2:16am UTC](https://discuss.elastic.co/t/kv-filter-problem-with-value-split/133436 "2018-05-28T02:16:26Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@DanV](https://discuss.elastic.co/u/DanV)
#### Post date: [May 28, 2018, 2:16am UTC](https://discuss.elastic.co/t/kv-filter-problem-with-value-split/133436/1 "2018-05-28T02:16:26Z")
Hello,
i'm using the kv filter to parse a log, especially field named User that has a string value of:
```
User Name: Daniel Venzi
```
the kv filter is in the format:
```
kv {
source => "User"
value_split => ":"
}
```
as a result i create a key named "Name" with an associated value of "Daniel". But that's not what i need. I want to use the kv filter in way that everything before the value\_split is a key and the string after the value\_split is the key associated value. Something like:
```
"User Name" => "Daniel Venzi"
```
is there a way to do this?
Thanks in advance!
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [May 28, 2018, 2:02pm UTC](https://discuss.elastic.co/t/kv-filter-problem-with-value-split/133436/2 "2018-05-28T14:02:11Z")
You need to set field split to something other than the default, which is space. If, for example, you set field\_split =\> "/" you would get what you want.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 25, 2018, 2:11pm UTC](https://discuss.elastic.co/t/kv-filter-problem-with-value-split/133436/3 "2018-06-25T14:11:43Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.