key_value

Overview

Takes in a field and parses it into key/value pairs.

OptionRequiredTypeDescription
sourceNoStringThe key in the event that is parsed. Default value is message.
destinationNoStringThe key where to output the parsed source to. Doing this overwrites the value of the key if it exists. Default value is parsed_message
field_delimiter_regexConditionallyStringA regex specifying the delimiter between key/value pairs. Special regex characters such as [ and ] must be escaped using \. This option cannot be defined at the same time as field_split_characters.
field_split_charactersConditionallyStringA string of characters to split between key/value pairs. Special regex characters such as [ and ] must be escaped using \. Default value is &. This option cannot be defined at the same time as field_delimiter_regex.
key_value_delimiter_regexConditionallyStringA regex specifying the delimiter between a key and a value. Special regex characters such as [ and ] must be escaped using \. There is no default value. This option cannot be defined at the same time as value_split_characters.
value_split_charactersConditionallyStringA string of characters to split between keys and values. Special regex characters such as [ and ] must be escaped using \. Default value is =. This option cannot be defined at the same time as key_value_delimiter_regex.
non_match_valueNoStringWhen a key/value cannot be successfully split, the key/value is be placed in the key field and the specified value in the value field. Default value is null.
prefixNoStringA prefix given to all keys. Default value is empty string.
delete_key_regexNoStringA regex used to delete characters from the key. Special regex characters such as [ and ] must be escaped using \. There is no default value.
delete_value_regexNoStringA regex used to delete characters from the value. Special regex characters such as [ and ] must be escaped using \. There is no default value.