# Create new event in ruby

**URL:** <https://discuss.elastic.co/t/create-new-event-in-ruby/103535>\
**Category:** Logstash\
**Created:** [October 11, 2017, 11:15am UTC](https://discuss.elastic.co/t/create-new-event-in-ruby/103535 "2017-10-11T11:15:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kanchan](https://avatars.discourse-cdn.com/v4/letter/k/8797f3/32.png) [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Post date:** [October 11, 2017, 11:15am UTC](https://discuss.elastic.co/t/create-new-event-in-ruby/103535/1 "2017-10-11T11:15:57Z")

</div>

Hi,

I am unable to create new event in filter [tab.my](http://tab.my) configuration file code is:

input {  
beats {  
port =\> 5044  
}  
}

filter {

```
ruby {
    init => "require 'json'"
    code =>"
         clientValue = event.get('message')
         
         fieldArray = event.get('message').split('> <')
        for field in fieldArray
            field = field.delete '<'
            field = field.delete '>'
            result = field.split(': ')
           if result[0].include?('clientName')
              clientValArr = result[1].split('/')
              puts clientValArr
              event.set(result[0], clientValArr[0])
              e = LogStash::Event.new()
              e.set(“Notification”,message)
              yield e                  
              puts e.get('message')
           end
            
        end
                   
    "
}

```

}

output {

```
 if [@metadata][type] == "test"{

```

elasticsearch {  
hosts =\> "something"  
index =\> "test"  
user =\> "elastic"  
password =\> "changeme"  
}  
}

stdout {  
codec =\> "rubydebug"  
}

}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 8, 2017, 11:16am UTC](https://discuss.elastic.co/t/create-new-event-in-ruby/103535/2 "2017-11-08T11:16:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.