# Creating Custom Field in Kibana and fetching the values from a particular line in message

**URL:** <https://discuss.elastic.co/t/creating-custom-field-in-kibana-and-fetching-the-values-from-a-particular-line-in-message/309889>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 18, 2022, 10:59am UTC](https://discuss.elastic.co/t/creating-custom-field-in-kibana-and-fetching-the-values-from-a-particular-line-in-message/309889 "2022-07-18T10:59:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dhinesh\_Prabakaran](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dhinesh_prabakaran/32/108452_2.png) [@Dhinesh\_Prabakaran](https://discuss.elastic.co/u/Dhinesh_Prabakaran)\
**Post date:** [July 18, 2022, 10:59am UTC](https://discuss.elastic.co/t/creating-custom-field-in-kibana-and-fetching-the-values-from-a-particular-line-in-message/309889/1 "2022-07-18T10:59:12Z")

</div>

Hi All,

We've been using ELK to monitor our network and infrastructure logs. We have a requirement. We need to create a **custom field name** in filebeat so that we can use it as a **unique key to filter the log messages in the Kibana**. I've got the following requirements. Requesting the peers to kindly assist.

1. I need to create a **custom field name** in filebeat so that it'll be available in the Kibana 'available fields'

2. I need to **dynamically fetch the value of this custom field** name from one of the lines (ex: server name: ...) from the **messages** (log file). I need the value of this field to be fetched from **only one occurence** in the message source (not each time a new log occurs). (Note: The line from which a particular value needs to be fetched would occcur only once in the messages)

3. The above two needs to be done for **all the logfiles** specified in the path.

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [July 19, 2022, 10:19am UTC](https://discuss.elastic.co/t/creating-custom-field-in-kibana-and-fetching-the-values-from-a-particular-line-in-message/309889/2 "2022-07-19T10:19:34Z")

</div>

I'm guessing that you want to read about ingest pipelines in Elasticsearch. They allow to modify or add extra fields.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 16, 2022, 12:19pm UTC](https://discuss.elastic.co/t/creating-custom-field-in-kibana-and-fetching-the-values-from-a-particular-line-in-message/309889/3 "2022-08-16T12:19:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.