# Filtering specific data as per requirements from Logtash

**URL:** <https://discuss.elastic.co/t/filtering-specific-data-as-per-requirements-from-logtash/255052>\
**Category:** Logstash\
**Tags:** elastic-stack-monitoring\
**Created:** [November 11, 2020, 12:15pm UTC](https://discuss.elastic.co/t/filtering-specific-data-as-per-requirements-from-logtash/255052 "2020-11-11T12:15:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sandesh\_Thombare](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sandesh_thombare/32/65207_2.png) [@Sandesh\_Thombare](https://discuss.elastic.co/u/Sandesh_Thombare)\
**Post date:** [November 11, 2020, 12:15pm UTC](https://discuss.elastic.co/t/filtering-specific-data-as-per-requirements-from-logtash/255052/1 "2020-11-11T12:15:36Z")

</div>

Hi All,

I am new to the logstash and trying to setup monitoring in Kibana.  
We have below messages & i would like to capture the message between _GetInstallBase_.  
and send it to kibana.

2020-10-28 12:10:11,149 [fault (self-tuning)'] [STANDARD] [] [XYZ:01.04.01] (.ABC.Action) INFO - _SOAPCALL_ 28/Oct/2020:12:10:08 +0100;2951.0;2952.0_SOAPCALL_

2020-10-30 12:57:12,244 [fault (self-tuning)'] [STANDARD] [] [XYZ:01.01.02] (ABC.Action) INFO server|IP.IP.IP.IP|SOAP|Services|SOAPCALL|A2207E1WQJV3ZSSM7XC0CDWFLFNIFD8JL - _SOAPCALL_ 30/Oct/2020:12:57:12 +0100;2.0;3.0_SOAPCALL_

2020-10-30 12:16:08,062 [fault (self-tuning)'] [TABTHREAD0] [] [XYZ:01.01.01] (.ABC.Action) INFO URL username - _SOAPCALL_ 30/Oct/2020:12:15:55 +0100;13043.0;13044.0_SOAPCALL_

requirement :need to capture data between _SOAPCALL_.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 9, 2020, 12:15pm UTC](https://discuss.elastic.co/t/filtering-specific-data-as-per-requirements-from-logtash/255052/2 "2020-12-09T12:15:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
