grok

http://udn.yyuap.com/doc/logstash-best-practice-cn/filter/grok.html