即使是不成熟的尝试,也胜于胎死腹中的策略。

求助logstash对request的再次切分

Logstash | 作者 forsaken627 | 发布于2016年12月19日 | 阅读数:4899

nginx日志中的request_body段为:
response_time=1482135866737&span_name=GET&url=http%3A%2F%2Fv0-client-test.cn%2Flz%2Fapi%2Ftest%2Fv3.1%2Fdaily&trace_id=4b2fff12-c5d0-454a-9c71-d52037d11d67&http_status=200&node_id=7a77c687dc9fc2f1ac85ffd86051ad14&protocol=http&request_time=1482135865726&node_type=client&span_id=1&device_id=7a77c687dc9fc2f1ac85ffd86051ad14&result_code=-1&uid=&params=&pspan_id=
如何再对此段进行切分,写半天写不出来,有没有谁可以指导一下,十分感谢!!
已邀请:

forsaken627 - 90后打字员

赞同来自:

现在已经到了这一步:
             "response_time" => "response_time=1482135866737",
"span_name" => "span_name=GET",
"url" => "url=http%3A%2F%2Fv0-client-.test.cn%2Ftest%2Fapi%2Fzhwnl%2Fv3.1%2Fdaily",
"trace_id" => "trace_id=4b2fff12-c5d0-454a-9c71-d52037d11d67",
"http_status" => "http_status=200",
"node_id" => "node_id=7a77c687dc9fc2f1ac85ffd86051ad14",
"protocol" => "protocol=http",
"node_type" => "node_type=client",
"span_id" => "span_id=1",
"device_id" => "device_id=7a77c687dc9fc2f1ac85ffd86051ad14",
"result_code" => "result_code=-1",
"uid" => "uid=",
"params" => "params=",
"pspan_id" => "pspan_id="
如何将value中“=”前面的东西去掉,只剩下值

要回复问题请先登录注册