Add new field from an old one [Solved]

[Chemse (Taloub)]

Hello, I have the field Mat equal to:

Mat = "07/07/2017-03:09:39 0235918 LEFER GUILLAUME Tps"

and I did this but it doesn't work

mutate {
				split => { "Mat" => " " }
				remove_field => ["Mat[2]","Mat[2]","Mat[2]"]
				
			}
			mutate {
				add_field => {"time" => "%{Mat[0]}"}
				add_field => {"matricule" => "%{Mat[1]}"}
			}

can you help me please !! how can I create a new field from a hash table

Thanks

[Chemse (Taloub)]

Solved by doing this

grok {
    match => [ "Mat", "%{NOTSPACE:time} %{NOTSPACE:matricule} %{NOTSPACE:matri}"]
}
mutate {
    remove_field => ["matri"]
    remove_field => ["Mat"]
}