Are you extracting each of the sections of the log file, as separated by `|`, into their own fields via Logstash or something?

---