So...I'm almost certain that there was a way to change from the tab character, to comma (I thought), but for the life of me I can't seem to find it. Been working with logstash and currently messages come through as:
Which is kind of painful for matching. Any quick pointers on how to do this? Thank you.