I am using logstash 2.4.0 for business reasons.
Does the field_split split on each of these characters:
(,\r,\n,|,\n,),\t
OR using regex does the split recognize the OR option in the brackets?
(\r\n|\n)\t
kv {
source => "server_event_message"
field_split => "(\r\n|\n)\t"
value_split => "\t{1}"
include_brackets => false
trim => "'\r\n\t"
trimkey => "<>\[\],\(\)=\s:\?\r\n\t"
}