I need to split a log into multiple fields however the log has the same field name for multiple values and when I use the fiedl_split option of kv it will put all the the fields with the same key in the same field. How can I put the values into separate fields with distinct names.
The desire output should be:
pin=12345-0 d=123 A_foo=nice@bar.com B_foo=bobo C_foo=12345.
However what I'm getting right now is:
pin=12345~0 d=123 foo= nice@bar.com, bobo, 1234
//pin=12345~0&d=123&foo=nice@bar.com&foo=bobo&foo=12345 //
// filter { //
// kv { //
// field_split => "&?" //
// } //
// } //