Need help with key-value pair extraction

Elastic Stack Logstash
1

HI Team,
I have split last field of my message has greedydata, however in some case, i have some key-value pair which needs extraction.

key-value format message:
CurrentURL = /google/search , UserID = nishchen83

I want to extract CurrentURL & userid from such messages. Request help for grok for extracting this kv pair.

2

Use a kv filter, not grok.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.