Logstash split log base on space and =

Elastic Stack Logstash
1

I want to separate below log in Logstash, I know that we can do it by grok filter, but is there any way to do it without grok?
Log:

date=2023-12-04 time=11:26:01 my_id=5646875 dir="D" type=ML severety=info mtype="my log" u_type="a/b" http_url="google.com" h_agent="my_site/205578 (465687/3564564)" msg="Hello World!" my_location="none"

Requested Output in elasticsearch:

date:2023-12-04
time:11:26:01
my_id:5646875
dir:"D"
type:ML
severety:info
mtype:"my log"
u_type:"a/b"
http_url:"google.com"
h_agent:"my_site/205578 (465687/3564564)"
msg:"Hello World!"
my_location:"none"

Thanks

2 
 filter {
  kv { 
      source => "message"
      value_split => "="
      field_split => " "
   }
}
3

Thanks. it works

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.