input { generator {} } filter { ruby { # Add a \t (tab) by using its ASCII code (9) code => 'event.set("message", 9.chr + event.get("message"))' } ruby { code => 'event.set("tabless", event.get("message").gsub(9.chr, ""))' } } output { stdout { codec => rubydebug {} } }