# Csv output plugin - custom field

**URL:** https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744
**Category:** Logstash
**Created:** [February 7, 2018, 3:46am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744 "2018-02-07T03:46:07Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![alexus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexus/32/12696_2.png) [@alexus](https://discuss.elastic.co/u/alexus)
#### Post date: [February 7, 2018, 3:46am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/1 "2018-02-07T03:46:07Z")

</div>

I'm following [Csv output plugin | Logstash Reference [6.1] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-csv.html#plugins-outputs-csv-fields) and I have a question...

How would I add extra field with my own text?

Please advise.

---

<div class="post-metadata">

### Author: ![Krunal\_kalaria](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krunal_kalaria/32/23862_2.png) [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)
#### Post date: [February 7, 2018, 6:09am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/2 "2018-02-07T06:09:32Z")

</div>

hi @alexus,

[https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-add\_field](https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-add_field)

[https://www.elastic.co/guide/en/logstash/current/plugins-filters-kv.html](https://www.elastic.co/guide/en/logstash/current/plugins-filters-kv.html)

You can use mutate or kv plugin in filter to add field.

Thanks & Regard,  
Krunal.

---

<div class="post-metadata">

### Author: ![alexus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexus/32/12696_2.png) [@alexus](https://discuss.elastic.co/u/alexus)
#### Post date: [February 8, 2018, 3:50am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/3 "2018-02-08T03:50:01Z")

</div>

I've tried adding following:

```
    filter {
      mutate {
        add_field => { "key" => "value" }
      }
    }

```

yet file came out without new column "key" with "value" in every row...

---

<div class="post-metadata">

### Author: ![Krunal\_kalaria](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krunal_kalaria/32/23862_2.png) [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)
#### Post date: [February 8, 2018, 4:48am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/4 "2018-02-08T04:48:50Z")

</div>

i have been try this to add extra field and its working fine:

filter  
{  
mutate  
{  
add\_field =\> ["Local\_ip", "%{[Local][2]}"]  
}  
}

---

<div class="post-metadata">

### Author: ![alexus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexus/32/12696_2.png) [@alexus](https://discuss.elastic.co/u/alexus)
#### Post date: [February 8, 2018, 8:51pm UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/5 "2018-02-08T20:51:06Z")

</div>

hmm, your example looks similar to mine, except for in mine (per Logstash's reference example), I used curly brackets and you use square brackets...

Did you had to adjust output somehow to reflect new field in output file somehow? maybe that's the part I'm missing somehow?

---

<div class="post-metadata">

### Author: ![alexus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexus/32/12696_2.png) [@alexus](https://discuss.elastic.co/u/alexus)
#### Post date: [February 8, 2018, 9:01pm UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/6 "2018-02-08T21:01:00Z")

</div>

ahh, I was right... I added in output csv fields added my new field and now it's working as expected)

---

<div class="post-metadata">

### Author: ![Krunal\_kalaria](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krunal_kalaria/32/23862_2.png) [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)
#### Post date: [February 9, 2018, 4:14am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/7 "2018-02-09T04:14:26Z")

</div>

Great 🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 9, 2018, 4:14am UTC](https://discuss.elastic.co/t/csv-output-plugin-custom-field/118744/8 "2018-03-09T04:14:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
