all i have is events with content of log in message field , now i want to add few new fields and add relevant data to that field , how to achieve that?
Have a look at this introduction to Logstash, which shows how to use grok and dissect to parse content.
