Kv values include spaces

Elastic Stack Logstash
1

if I have this log message:

key1=foo
key2=bar
key3=foo bar

How can I use kv filters to represent the above as:

  "key1" => "foo",
  "key2" => "bar",
  "key3" => "foo bar"

As if I change the space delimeter it seems to get confused, quite rightly too, as the kv's are split between spaces

I am only concerned with values having arbitrary spaces and not keys. Help!

:frowning:

2

I should add to this for context the original syslog message comes in like this:

key1=foo key2=bar key3=foo bar

Therefore the values are not delimited by inverted commas, and there mey be a key4 after which may remove the use of greedydata

thanks!