Kv values include spaces

if I have this log message:

key3=foo bar

How can I use kv filters to represent the above as:

  "key1" => "foo",
  "key2" => "bar",
  "key3" => "foo bar"

As if I change the space delimeter it seems to get confused, quite rightly too, as the kv's are split between spaces

I am only concerned with values having arbitrary spaces and not keys. Help!


I should add to this for context the original syslog message comes in like this:

key1=foo key2=bar key3=foo bar

Therefore the values are not delimited by inverted commas, and there mey be a key4 after which may remove the use of greedydata


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.