我正在尝试使用logstash的KV插件。我有以下日志格式: 所有文件传输所需的时间(秒)= 23传输开始时间= 201708030959传输结束时间= 201708030959
My .conf file has following KV plugin:
filter {
kv {
value_split => "="
}
}
When I run logstash, it parses complete log file line by line excluding the one having "=". I need seconds, start time and end time to be separated as key value pairs. Please suggest.