# Change filed type from string to number

**URL:** https://discuss.elastic.co/t/change-filed-type-from-string-to-number/130627
**Category:** Logstash
**Created:** [May 4, 2018, 12:19pm UTC](https://discuss.elastic.co/t/change-filed-type-from-string-to-number/130627 "2018-05-04T12:19:36Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Parthgandhi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/parthgandhi/32/22742_2.png) [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)
#### Post date: [May 4, 2018, 12:19pm UTC](https://discuss.elastic.co/t/change-filed-type-from-string-to-number/130627/1 "2018-05-04T12:19:36Z")

</div>

Hi,  
I have below GROK parse used for filtering IIS logs. It seems to be working fine except for certain fields(like SC-Bytes, CS-Bytes, etc) are coming as string and not numbers. How do i change this to number?

`match => { "message" => "%{TIMESTAMP_ISO8601:log_timestamp} %{WORD:S-SiteName} %{NOTSPACE:S-ComputerName} %{IPORHOST:S-IP} %{WORD:CS-Method} %{URIPATH:CS-URI-Stem} (?:-|\"%{URIPATH:CS-URI-Query}\") %{NUMBER:S-Port} %{NOTSPACE:CS-Username} %{IPORHOST:C-IP} %{NOTSPACE:CS-Version} %{NOTSPACE:CS-UserAgent} %{NOTSPACE:CS-Cookie} %{NOTSPACE:CS-Referer} %{NOTSPACE:CS-Host} %{NUMBER:SC-Status} %{NUMBER:SC-SubStatus} %{NUMBER:SC-Win32-Status} %{NUMBER:SC-Bytes} %{NUMBER:CS-Bytes} %{NUMBER:Time-Taken}"}`

![image](https://us1.discourse-cdn.com/elastic/original/3X/a/d/adaf02a60cf27b903dad11565d9a75798241ba9f.png)

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [May 4, 2018, 12:29pm UTC](https://discuss.elastic.co/t/change-filed-type-from-string-to-number/130627/2 "2018-05-04T12:29:48Z")

</div>

Use %{NUMBER:SC-Bytes:int}

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 1, 2018, 12:29pm UTC](https://discuss.elastic.co/t/change-filed-type-from-string-to-number/130627/3 "2018-06-01T12:29:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.