# Filebeat dynamically add new field

**URL:** https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589
**Category:** Beats
**Tags:** filebeat
**Created:** [October 10, 2016, 1:13am UTC](https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589 "2016-10-10T01:13:00Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![ywang](https://avatars.discourse-cdn.com/v4/letter/y/bbce88/32.png) [@ywang](https://discuss.elastic.co/u/ywang)
#### Post date: [October 10, 2016, 1:13am UTC](https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589/1 "2016-10-10T01:13:00Z")

</div>

Hi expert here,

I need to add a field dynamically based on a conf file locally on the host. It needs to be added for a subset of log entries based on the certain pattern of the log entry content. I read the filebeat tutorial and it does not appear this is supported. Ideally it is some kind of plugin where user can write their own logic.

Anyone can help here if there is any workaround?

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 10, 2016, 5:39am UTC](https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589/2 "2016-10-10T05:39:22Z")

</div>

Logstash does this. Filebeat is not a replacement for Logstash and some features won't be implemented in Filebeat.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 31, 2016, 1:13am UTC](https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589/3 "2016-10-31T01:13:15Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
