RFE: Allow KV Filter value_split to be a regex or contain multiple grouped characters


When using the KV filter, I have some data that is separated by the common => separator. If I try to specify that, it is interpreted as both = AND > on their own. This is especially problematic as the data may contain those characters individually elsewhere in the contents. This leads to bogus field names. It would be beneficial to either make this a regex (like the other args) or at least allow grouping of characters. == May be another common example.




Logstash Developers


Chris Laplante