[
    {
        "message": "2021-12-09 11:34:28.279||INFO||605c643e29e4||BIN--Python||192.168.1.1"
    },
    {
        "message": "2021-12-09 11:35:28.279||WARNING||615c643e22e4||BIN--Java||192.168.1.1"
    },
    {
        "message": "2021-12-09 11:36:28.279||ERROR||635c643e22e4||BIN--Go||192.168.1.1"
    }
]

// Use `||` as the delimiter (the vertical bar needs to be escaped) to extract the time, loglevel, taskId, processName, and ip fields from the message.
ext_sepstr("message","time,loglevel,taskId,ProcessName,ip",sep="\\|\\|")

// Discard the message.
fields_drop("message")

// Use a switch statement for distribution.
t_switch(

// If the loglevel is "INFO", output to info_log.
op_str_eq(v("loglevel"),"INFO"),log_output("info_log"), 
// If the loglevel is "WARNING", output to warning_log.
op_str_eq(v("loglevel"),"WARNING"),log_output("warning_log"),
// If the loglevel is "ERROR", output to error_log.
op_str_eq(v("loglevel"),"ERROR"),log_output("error_log")

)

{
"processName":"BIN--Go",
"ip":"192.168.1.1",
"loglevel":"ERROR",
"taskId":"635c643e22e4",
"time":"2021-12-09 11:36:28.279"
}

{
"processName":"BIN--Java",
"ip":"192.168.1.1",
"loglevel":"WARNING",
"taskId":"615c643e22e4",
"time":"2021-12-09 11:35:28.279"
}

{
"processName":"BIN--PYTHON",
"ip":"192.168.1.1",
"loglevel":"INFO",
"taskId":"605c643e29e4",
"time":"2021-12-09 11:34:28.279"
}