Trouble parsing following message through logstash

Elastic Stack Logstash
1

ts=2017-04-19-19-12-58-881|result=SUCCESS | requestId=1617b0ff-0770-4da3-af4-ce3641637 |action=BestController-getData | elapsed=1241| ip=115.23.71.21 |method=GET | status=200 | uri=/ngwms/best/initial | userId=info

I want to parse the above mentioned message to the fields as

timestamp => 2017-04-19-19-12-58-881
result => SUCCESS
requestId => 1617b0ff-0770-4da3-af4-ce3641637
action => BestController-getData
elapsedTime => 1241
and so on..

Need help. Thanks.

2

Use a kv filter with field_split => " | ".

4

Thanks!

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.