Trimming of whitespace from kv filter fields unexpected

Elastic Stack Logstash
1

Is there anything in the documentation for the kv filter that suggests the following config

input { generator { message => 'TLSID: d8658382-91d6-45f4-9b36-ab9893b5e185|Content-Length: 395|Content-Type: application/json' count => 1 } }
output { stdout { codec => rubydebug } }
filter {
  kv {
    field_split => "|"
    value_split => ":"
  }
}

would generate this (with optional_whitespace trimmed from the beginning of each value)


      "Content-Type" => "application/json",
             "TLSID" => "d8658382-91d6-45f4-9b36-ab9893b5e185",
           "message" => "TLSID: d8658382-91d6-45f4-9b36-ab9893b5e185|Content-Length: 395|Content-Type: application/json",
    "Content-Length" => "395"
I was expecting to have to set trim_value
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.