JRuby code to parse cef (logstash type)

gistfile1.txt

headers = event[@ceffield].match(/.*?CEF:\s?(\d+)\|([^|]*)\|([^|]*)\|([^|]*)\|([^|]*)\|([^\|\\]*(?:\\.[^\|\\]*)*)\|([^|]*)\|(.*)/).to_a
      event['deviceVendor'] = headers[2]
      event['deviceProduct'] = headers[3]
      event['deviceVersion'] = headers[4]
      event['deviceEventClassId'] = headers[5]
      event['name'] = headers[6]
      event['severity'] = headers[7]
      # Now, try to break out the Extension Dictionary
      unless headers[8].nil?
        ext = headers[8].scan(/(?:_+)?([\w.:\[\]]+)=(.*?(?=(?:\s[\w.:\[\]]+=|$)))/).to_a
        for elem in ext
           event[elem[0]]=elem[1]
        end
end