# Extract filed from specific message

**URL:** <https://discuss.elastic.co/t/extract-filed-from-specific-message/358198>\
**Category:** Logstash\
**Tags:** elastic-stack-monitoring\
**Created:** [April 25, 2024, 9:54am UTC](https://discuss.elastic.co/t/extract-filed-from-specific-message/358198 "2024-04-25T09:54:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Omid\_Mosayebi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/omid_mosayebi/32/133125_2.png) [@Omid\_Mosayebi](https://discuss.elastic.co/u/Omid_Mosayebi)\
**Post date:** [April 25, 2024, 9:54am UTC](https://discuss.elastic.co/t/extract-filed-from-specific-message/358198/1 "2024-04-25T09:54:42Z")

</div>

Hi Everyone. I have a problem. How can I extract statusCodeValue from

```auto
2024-04-24 11:02:20 - [http-nio-8082-exec-6] - [2e7e7b76-fbb6-47b2-b07e-7471175aacea] fiscal-information ResponseData [{"headers":{},"body":{"timestamp":"1713943940237","requestTraceId":"dfda59a15f5f014afbc156d03f6e07bd","errors":[{"code":"4160","message":"دسترسی مشاهده اطلاعات شناسه یکتای درخواست شده ممکن نیست."}]},"statusCode":"OK","statusCodeValue":200}] Overall ResponseTime is [63] milliseconds

```

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [April 25, 2024, 1:07pm UTC](https://discuss.elastic.co/t/extract-filed-from-specific-message/358198/2 "2024-04-25T13:07:52Z")

</div>

[Here](https://discuss.elastic.co/t/parse-json/357405/3) is a similar request. Use grok, and try to complete this by yourself.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [April 25, 2024, 4:19pm UTC](https://discuss.elastic.co/t/extract-filed-from-specific-message/358198/3 "2024-04-25T16:19:21Z")

</div>

Please do not post [multiple copies](https://discuss.elastic.co/t/extract-filed/358204) of the same request.