I have a simple data with mysql slow query format as below.
2015-05-26 09:06:39^^^apaul[apaul] @ [192.168.1.1]^^^00:00:14^^^00:00:00^^^36772^^^2090463^^^mysql^^^select * from general_log
The Separator is ^^^, Now I want to send the data to ES like this format
datetime: 2015-05-26 09:06:39
sql:select * from general_log
Could anyone tell me how to write a filter conf?