Iam trying to parse the events using kv filter ,
my kibana looks likes this
How to make just
from : firstname.lastname@example.org
but iam getting like 78AE89C45C: from : email@example.com
moreover iam getting duplicate fields as well, how to remove it .
my logstash config looks like this
port => 5540
source => "message"
source => "MESSAGE"
remove_field => ["MESSAGE"]
value_split => "="
field_split => ","
trim_value => "<>"
Please do help me in fixing this issue ,really need it .