# How to apply mutate split on dynamic fields

**URL:** https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882
**Category:** Logstash
**Created:** [September 10, 2018, 5:13am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882 "2018-09-10T05:13:42Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![prakhara](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prakhara/32/45904_2.png) [@prakhara](https://discuss.elastic.co/u/prakhara)
#### Post date: [September 10, 2018, 5:13am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/1 "2018-09-10T05:13:42Z")

</div>

How can I apply mutate split on dynamic fields

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 10, 2018, 6:00am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/2 "2018-09-10T06:00:44Z")

</div>

I don't want to risk wasting time guessing what you mean so please elaborate. Giving an example is often a useful way of avoiding ambiguity and getting a good answer.

---

<div class="post-metadata">

### Author: ![prakhara](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prakhara/32/45904_2.png) [@prakhara](https://discuss.elastic.co/u/prakhara)
#### Post date: [September 10, 2018, 6:07am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/3 "2018-09-10T06:07:27Z")

</div>

actually I have last log field as dynamic company\_concept\_ss=Asia,India,Ceo|location\_concept\_ss=Asia,India|general\_concept\_ss=India,Ceo,pay  
all these fields are dynamic i.e the name and count of the fields can vary  
and I want output  
"company\_concept\_ss" =\> [  
[0] "Asia",  
[1] "India",  
[2] "ceo"  
]  
and so on

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 10, 2018, 6:39am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/4 "2018-09-10T06:39:28Z")

</div>

Okay. You'll have to use a ruby filter to loop over the possible field names and call (the Ruby) split function on the string values in the fields.

---

<div class="post-metadata">

### Author: ![prakhara](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prakhara/32/45904_2.png) [@prakhara](https://discuss.elastic.co/u/prakhara)
#### Post date: [September 10, 2018, 6:48am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/5 "2018-09-10T06:48:21Z")

</div>

can you show me the example or a link to that, I am not familiar with ruby

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 10, 2018, 6:50am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/6 "2018-09-10T06:50:09Z")

</div>

There are lots of similar examples in the archives of this forum. I don't have time to dig up one in particular.

---

<div class="post-metadata">

### Author: ![prakhara](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prakhara/32/45904_2.png) [@prakhara](https://discuss.elastic.co/u/prakhara)
#### Post date: [September 10, 2018, 11:56am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/7 "2018-09-10T11:56:09Z")

</div>

I can't find one .Please help whenever you have time today or tomorrow

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 8, 2018, 11:56am UTC](https://discuss.elastic.co/t/how-to-apply-mutate-split-on-dynamic-fields/147882/8 "2018-10-08T11:56:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
