# Create a new Field based on delimiter **URL:** \ **Category:** Logstash\ **Created:** [April 22, 2019, 2:09pm UTC](https://discuss.elastic.co/t/create-a-new-field-based-on-delimiter/177863 "2019-04-22T14:09:22Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![pro](https://avatars.discourse-cdn.com/v4/letter/p/e56c9b/32.png) [@pro](https://discuss.elastic.co/u/pro)\ **Post date:** [April 22, 2019, 2:09pm UTC](https://discuss.elastic.co/t/create-a-new-field-based-on-delimiter/177863/1 "2019-04-22T14:09:22Z")
HI, Im very new to ELK. I have a log like this Message-Id: [34b89892.AMMAADZy0R0AAAAAAAAAAGzbDQ4AAPbYwAAAAAAAUmKABcugLi@gmail.com](mailto:34b89892.AMMAADZy0R0AAAAAAAAAAGzbDQ4AAPbYwAAAAAAAUmKABcugLi@gmail.com) MIME-Version: 1.0 From: [hasdgs@gmail.com](mailto:hasdgs@gmail.com) Reply-To: [hasdgs@gmail.com](mailto:hasdgs@gmail.com) To: [dswifka@yahoo.com](mailto:dswifka@yahoo.com) Subject: [Resources For You] You've been assigned to the request "Education Assistance Request - Portal Date: Fri, 19 Apr 2019 17:18:26 -0000 ............................ and more I want to parse field based on value after ":" from the log.. Need output like { "MessgeID": [ [ "[34b89892.AMMAADZy0R0AAAAAAAAAAGzbDQ4AAP-ybYwAAAAAAAUmKABcugLi@gmail.com](mailto:34b89892.AMMAADZy0R0AAAAAAAAAAGzbDQ4AAP-ybYwAAAAAAAUmKABcugLi@gmail.com)" ] ], "MIMEVersion": [ [ "1.0" ] ], "from": [ [ "hasdgs@gmail.com" ] ], "ReplyTo": [ [ "hasdgs@gmail.com" ] ] } and all other fields.. Is it posssible ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 20, 2019, 2:09pm UTC](https://discuss.elastic.co/t/create-a-new-field-based-on-delimiter/177863/2 "2019-05-20T14:09:33Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.