# How to add or change the fields to custom fields in filebeat?

**URL:** <https://discuss.elastic.co/t/how-to-add-or-change-the-fields-to-custom-fields-in-filebeat/176847>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 15, 2019, 7:22am UTC](https://discuss.elastic.co/t/how-to-add-or-change-the-fields-to-custom-fields-in-filebeat/176847 "2019-04-15T07:22:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mohan\_Selvam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohan_selvam/32/43587_2.png) [@Mohan\_Selvam](https://discuss.elastic.co/u/Mohan_Selvam)\
**Post date:** [April 15, 2019, 7:22am UTC](https://discuss.elastic.co/t/how-to-add-or-change-the-fields-to-custom-fields-in-filebeat/176847/1 "2019-04-15T07:22:30Z")

</div>

i have this format  
 ![38%20PM](https://us1.discourse-cdn.com/elastic/original/3X/3/8/387eaf738ae715e7b0861e0438f2ae00c73c3b39.png)  
but what i need is

 ![19%20PM](https://us1.discourse-cdn.com/elastic/original/3X/6/e/6e238fd03e01c3404e4d672316e2ce9545813f85.png)

is it anyway to do this by using filebeat

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [April 15, 2019, 12:54pm UTC](https://discuss.elastic.co/t/how-to-add-or-change-the-fields-to-custom-fields-in-filebeat/176847/2 "2019-04-15T12:54:34Z")

</div>

You could try to setup an Elasticsearch Ingest Pipeline. That will let you manipulate your data after it has been sent to Elasticsearch from Filebeat but before Elasticsearch indexes it. See [https://www.elastic.co/guide/en/beats/filebeat/master/configuring-ingest-node.html](https://www.elastic.co/guide/en/beats/filebeat/master/configuring-ingest-node.html) for more information.

---

<div class="post-metadata">

**Author:** ![Mohan\_Selvam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohan_selvam/32/43587_2.png) [@Mohan\_Selvam](https://discuss.elastic.co/u/Mohan_Selvam)\
**Post date:** [April 17, 2019, 4:50am UTC](https://discuss.elastic.co/t/how-to-add-or-change-the-fields-to-custom-fields-in-filebeat/176847/3 "2019-04-17T04:50:21Z")

</div>

thanks it helped!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 15, 2019, 4:50am UTC](https://discuss.elastic.co/t/how-to-add-or-change-the-fields-to-custom-fields-in-filebeat/176847/4 "2019-05-15T04:50:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.