fix global oom

Author: wpoely86

tests/data/oom

@@ -26,6 +26,7 @@ data = [
             "task": "python",
             "pid": 549012,
             "uid": 2510053,
+            "global_oom": "true",
         }
     },
 ]

tests/logstash_7.6.2.conf

@@ -53,6 +53,14 @@ filter
         source => "KEY_EQ_VALUEDATA"
     }
 
+    if ([KEY_EQ_VALUEDATA_COMMA]) {
+      mutate {
+          gsub => [
+              "KEY_EQ_VALUEDATA_COMMA", ",global_oom(,|$)", ",global_oom=true\1"
+          ]
+      }
+    }
+
     kv {
         source => "KEY_EQ_VALUEDATA_COMMA"
         field_split => ","