KV filter stripping out parentheses


(Blaise Fonseca) #1

I am using KV filter to split query string, however, the filter strips parentheses at the beginning and end, how can I avoid this?
Below is my KV filter
kv {
target => "cs_uri_query"
allow_duplicate_values => false
field_split => "&?"
source => "uri_query"
}
which outputs to

cs_uri_query.q = "app:test AND (schema_s:contact" it shoud be cs_uri_query.q = "(app:test AND (schema_s:contact))"


(Blaise Fonseca) #2

include_brackets => false fixed my issue


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.