Logstash KV插件正常运行

时间:2017-09-04 17:11:39

标签: logstash

我正在尝试使用logstash的KV插件。我有以下日志格式:     所有文件传输所需的时间(秒)= 23传输开始时间= 201708030959传输结束时间= 201708030959

My .conf file has following KV plugin:
filter {    
    kv {     
        value_split => "=" 
    }   
}

When I run logstash, it parses complete log file line by line excluding the one having "=". I need seconds, start time and end time to be separated as key value pairs. Please suggest.

0 个答案:

没有答案