# Combining Field Values Into New Field

**URL:** <https://discuss.elastic.co/t/combining-field-values-into-new-field/120299>\
**Category:** Logstash\
**Created:** [February 17, 2018, 8:18am UTC](https://discuss.elastic.co/t/combining-field-values-into-new-field/120299 "2018-02-17T08:18:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Post date:** [February 17, 2018, 8:18am UTC](https://discuss.elastic.co/t/combining-field-values-into-new-field/120299/1 "2018-02-17T08:18:52Z")

</div>

Using the below in pipeline:

```
  mutate {
    add_field => {
      "geoip.location.coordinates" => "%{geoip.location.lat},%{geoip.location.lon}"
    }
  }

```

Does not result in something like `37.425,-122.00` but rather `%{geoip.location.lat},%{geoip.location.lon}`. What am I doing wrong?

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [February 17, 2018, 9:12am UTC](https://discuss.elastic.co/t/combining-field-values-into-new-field/120299/2 "2018-02-17T09:12:39Z")

</div>

Should be...

```auto
  mutate {
    add_field => {
      "[geoip][location][coordinates]" => "%{[geoip][location][lat]},%{[geoip][location][lon]}"
    }
  }

```

Hopefully that helps.

Rob

Robert Cowart ([rob@koiossian.com](mailto:rob@koiossian.com))  
[www.koiossian.com](http://www.koiossian.com)  
True Turnkey SOLUTIONS for the Elastic Stack

---

<div class="post-metadata">

**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Post date:** [February 18, 2018, 10:57pm UTC](https://discuss.elastic.co/t/combining-field-values-into-new-field/120299/3 "2018-02-18T22:57:44Z")

</div>

That did it, thanks a lot!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 18, 2018, 10:57pm UTC](https://discuss.elastic.co/t/combining-field-values-into-new-field/120299/4 "2018-03-18T22:57:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.