Logfmt format

Use the logfmt parser format to create custom parsers compatible with logfmt data.

The following example shows a custom parser that uses the logfmt format:

parsers.yaml

parsers:
  - name: logfmt
    format: logfmt

parsers.conf

The following log entry is valid for the previously defined parser:

key1=val1 key2=val2 key3

After processing, its internal representation will be:

[1540936693, {"key1"=>"val1",
              "key2"=>"val2"
              "key3"=>true}]

If you want to be more strict than the logfmt standard and not parse lines where certain keys lack values (such as key3 in the previous example), you can configure the parser as follows:

parsers.yaml

parsers:
  - name: logfmt
    format: logfmt
    logfmt_no_bare_keys: true

parsers.conf