KV Filter Question

magnusbaeck (Magnus Bäck) April 25, 2017, 1:26pm 13

You can use either, but kv is simpler. If you really want "WinFileService Event" to be a key you don't need a grok filter at all.

Kibana not showing dictionary output of log events

Topic		Replies	Views
Kv plugin behavior Logstash	5	363	October 22, 2018
Problem with kv filter Logstash	4	2775	July 15, 2019
Kv filter seems to be working Logstash	2	317	September 26, 2019
Kv filtering problem Logstash	9	434	December 4, 2019
Logstash KV filter time field Logstash elastic-stack-monitoring , elastic-stack-security	6	494	August 17, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

KV Filter Question

Related topics