Logstash Parsing Key Value Pair without quotes

Elastic Stack Logstash
1

I have a situation where

  • extension="field1= value1_1 value1_2 |field2=value3_1 value_3_2"

The intend output is
field1 = Value1_1 value2_2
field2 = Value2_1 value2_2

I have intention to use the kv filter

The challenge here is that there is no quotes for "" Value1_1 value2_2. This will cause problem with the KV filter.

Anyone knows how to resolve this?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.