# Extract folder name as field in logstash

**URL:** <https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 18, 2022, 7:05am UTC](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026 "2022-05-18T07:05:58Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [May 19, 2022, 4:27am UTC](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026/7 "2022-05-19T04:27:58Z")

</div>

Also you can have a cleaner output with @metadata

```auto
   mutate {
        copy => { "[log][file][path]" => "[@metadata][filepath]" }
     }
	 mutate {
	    gsub => ["[@metadata][filepath]", "[^\\]+$", "" ]
	 }
	 mutate {
	   gsub => ["[@metadata][filepath]", "[\\]", "|" ]
	 }
	 mutate {
	   split => { "[@metadata][filepath]" => '|' }
	   add_field => { "tail_no" => '%{[@metadata][filepath][3]}' }
	 }

```

---

_[View the full topic](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026)._