I am using logstash 2.4.0 for business reasons.
Does the field_split split on each of these characters:
(,\r,\n,|,\n,),\t
OR using regex does the split recognize the OR option in the brackets?
(\r\n|\n)\t
field_split is used to create a regexp character class. If you set it to "ab" then the regexp [ab] is used to split things. It is a string of characters to use as single-character field delimiters.
Look at replacing the field_split option with a field_split_pattern option if your version of logstash supports that.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.