# Extracting a specific data from a field

**URL:** <https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826>\
**Category:** Logstash\
**Created:** [April 20, 2018, 8:15am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826 "2018-04-20T08:15:03Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yuvaraja\_kannan](https://avatars.discourse-cdn.com/v4/letter/y/ba8739/32.png) [@Yuvaraja\_kannan](https://discuss.elastic.co/u/Yuvaraja_kannan)\
**Post date:** [April 20, 2018, 8:15am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/1 "2018-04-20T08:15:03Z")

</div>

Hi All,  
I have extracted a field from a log file which has the value [ROBO LOG A1-B] , is there a way to extract or trim only 'A1-B' into a separate new field.

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [April 20, 2018, 9:13am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/2 "2018-04-20T09:13:15Z")

</div>

`.*\s(?<fieldname>.*)]$` could work.

---

<div class="post-metadata">

**Author:** ![Yuvaraja\_kannan](https://avatars.discourse-cdn.com/v4/letter/y/ba8739/32.png) [@Yuvaraja\_kannan](https://discuss.elastic.co/u/Yuvaraja_kannan)\
**Post date:** [April 20, 2018, 9:43am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/3 "2018-04-20T09:43:20Z")

</div>

Thanks Jenni, That works.

---

<div class="post-metadata">

**Author:** ![Yuvaraja\_kannan](https://avatars.discourse-cdn.com/v4/letter/y/ba8739/32.png) [@Yuvaraja\_kannan](https://discuss.elastic.co/u/Yuvaraja_kannan)\
**Post date:** [April 20, 2018, 9:48am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/4 "2018-04-20T09:48:34Z")

</div>

HI @Jenni , I have one more query, say if i have parsed 10 fields from my log file, is it possible to send only some specific 5 fields out of 10 into ElasticSearch. pls advice.

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [April 20, 2018, 9:53am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/5 "2018-04-20T09:53:06Z")

</div>

You can remove fields with [mutate](https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-remove_field)

---

<div class="post-metadata">

**Author:** ![Yuvaraja\_kannan](https://avatars.discourse-cdn.com/v4/letter/y/ba8739/32.png) [@Yuvaraja\_kannan](https://discuss.elastic.co/u/Yuvaraja_kannan)\
**Post date:** [April 20, 2018, 9:55am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/6 "2018-04-20T09:55:30Z")

</div>

Thanks Jenni, will check this.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2018, 9:58am UTC](https://discuss.elastic.co/t/extracting-a-specific-data-from-a-field/128826/7 "2018-05-18T09:58:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.