Hi All, Trying to work through this issue I am having parsing with KV plugin. My kv pairs are split with "=" and fields are delimited by "|". A small example below. src=192.168.1.1|dst=192.168.1.2|resource=http://www.hls.com/Delivery/ClientPaths/Library/hook.js?apiKey=1223b2ff-b4ef-4963-9740-4654…

KV Plugin take only first key from a split_field Logstash 5.0

Topic		Replies	Views
How to handle '=' in values, splitting on \| but KV takes over all '=' not only the first Logstash	3	883	September 22, 2017
Strange behaviour kv field_split Logstash	5	896	April 8, 2020
How to get kv filter to ignore value_split in data Logstash	3	1692	February 14, 2018
How to Split the one field into multiple fields using kv plugins Logstash	5	2702	April 11, 2019
KV filter don't split on field_split_pattern once Logstash	5	1005	February 21, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

KV Plugin take only first key from a split_field Logstash 5.0

Related topics