kofemann/logstash4dcache — pull request #2 by martbhell (2014-06-13 08:05:52+00:00)
Title: Parse more billing entries!

The DCAP field is just a blob right now, one could split it up more but I don't know what all those numbers mean.
The PNFSID_TSIZE_OR_ZERO is used to be parsed in :request but I'm not sure if it's a transfer size or a size. But it's always (at least on my site) zero.