# Filebeat include filter

**URL:** <https://discuss.elastic.co/t/filebeat-include-filter/308860>\
**Category:** Elasticsearch\
**Created:** [July 5, 2022, 6:25am UTC](https://discuss.elastic.co/t/filebeat-include-filter/308860 "2022-07-05T06:25:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tharunkumar](https://avatars.discourse-cdn.com/v4/letter/t/f05b48/32.png) [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\
**Post date:** [July 5, 2022, 6:25am UTC](https://discuss.elastic.co/t/filebeat-include-filter/308860/1 "2022-07-05T06:25:35Z")

</div>

Hi  
i need to send the logs of particular lines to logstash by using filebeat .i have tried by using include filter is not working .can u provide me the solution  
Eg:  
2022-06-30 00:00:07 10.32.13.12 POST /maruvayaparpaidhee-cug/MF/Mfaspx - 1 Mozilla/5.0+(Linux;+Android+6.0.1;+Nexus+5X+Build/MMB29P)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/102.0.5005.115+Mobile+Safari/537.36+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html) [https://s.in/maruvayaparpaidhee-cug/MF/SectorMore.aspx?shcd=35281](https://s.in/maruvayaparpaidhee-cug/MF/SectorMore.aspx?shcd=35281) 200 0 0 9893 797 468  
2022-06-30 00:00:17 10.32.13.12 GET /maruvayaparpaidhee-cug/tools/charting.aspx co\_code=28145&Exchange=NSE 80 - 66.249.79.250 Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html) - 200 0 0 149857 430 2140  
2022-06-30 00:00:17 10.32.13.12 GET /robots.txt - 80 - 129.146.158.17 AddThis.com+([http://support.addthis.com/](http://support.addthis.com/)) - 404 0 2 1766 165 234

in this above log lines i need to push nly /robots.txt line?.can anyone provide me the solution

---

<div class="post-metadata">

**Author:** ![sudhagar\_ramesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sudhagar_ramesh/32/105673_2.png) [@sudhagar\_ramesh](https://discuss.elastic.co/u/sudhagar_ramesh)\
**Post date:** [July 5, 2022, 6:58am UTC](https://discuss.elastic.co/t/filebeat-include-filter/308860/2 "2022-07-05T06:58:11Z")

</div>

Hello @tharunkumar

Please dont raise multiple cases for same issue. You could still use this issue [Logstash include filter](https://discuss.elastic.co/t/logstash-include-filter/308853)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 2, 2022, 6:58am UTC](https://discuss.elastic.co/t/filebeat-include-filter/308860/3 "2022-08-02T06:58:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
