# Filters in filebeat

**URL:** https://discuss.elastic.co/t/filters-in-filebeat/73313
**Category:** Beats
**Tags:** filebeat
**Created:** [January 31, 2017, 5:16am UTC](https://discuss.elastic.co/t/filters-in-filebeat/73313 "2017-01-31T05:16:10Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Rupesh\_Ranjan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rupesh_ranjan/32/22283_2.png) [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)
#### Post date: [January 31, 2017, 5:16am UTC](https://discuss.elastic.co/t/filters-in-filebeat/73313/1 "2017-01-31T05:16:10Z")

</div>

Is there anything similar to "grok filters in logstash" in filebeat?  
I want to filter out different fields from a single string which is originally sent to ES as message field.

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [January 31, 2017, 1:18pm UTC](https://discuss.elastic.co/t/filters-in-filebeat/73313/2 "2017-01-31T13:18:49Z")

</div>

This does not exist in filebeat. You can use filters if you have for example json logs and want to remove complete fields, but you can't extract data from strings. For this you need Logstash or Ingest.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 28, 2017, 1:19pm UTC](https://discuss.elastic.co/t/filters-in-filebeat/73313/3 "2017-02-28T13:19:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
