Support include_brackets feature just like Logstash KV filter

[tiantangkuohai]

A note for the community

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Use Cases

We have some log field like this:
{"detail": "query=[select 1 from table1] component=[aggregator] msg=[begin to send query to [mysql.foo.com]]"}
In logstash, it can parse the fields in detail field value using KV filter. But it seems that Vector doesn't have similar feature.

Attempted Solutions

I tries with parse_key_value and parse_regex_all. Both of them can't working perfectly.

Proposal

No response

References

No response

Version

0.42.0