# How to create by fields sending data through elasticsearch

**URL:** https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615
**Category:** Kibana
**Created:** [May 10, 2021, 9:05pm UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615 "2021-05-10T21:05:51Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![bruno\_aleixo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bruno_aleixo/32/68834_2.png) [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)
#### Post date: [May 10, 2021, 9:05pm UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615/1 "2021-05-10T21:05:51Z")

</div>

I know sending by through logstash, creating a grok pattern within the pippeline configuration

follows example created by going through logstash, I would like to reply in the same way sending through elasticsearch, is it possible?

Fields in red

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/b/6b84be856c8a7150e21e4cd471a643824316628d.png)

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 10, 2021, 11:06pm UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615/2 "2021-05-10T23:06:12Z")

</div>

> [@bruno\_aleixo](#):
>
> follows example created by going through logstash, I would like to reply in the same way sending through elasticsearch, is it possible?

It's not clear what you are asking here sorry, can you try restating it another way please?

---

<div class="post-metadata">

### Author: ![bruno\_aleixo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bruno_aleixo/32/68834_2.png) [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)
#### Post date: [May 11, 2021, 2:04am UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615/4 "2021-05-11T02:04:34Z")

</div>

I want to separate my data that arrives at the kibana into fields, just like the image above, the difference is that in the image I use the filebeat sending to the logstash, in case I want to know if it is possible to separate these fields by sending the filebeat to elasticsearch

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 11, 2021, 2:06am UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615/5 "2021-05-11T02:06:58Z")

</div>

Thanks.

Yes, you can do that with an [ingest pipeline](https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html) in Elasticsearch. Or you might be able to use an existing [Filebeat module](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules.html) if it matches your data source.

---

<div class="post-metadata">

### Author: ![bruno\_aleixo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bruno_aleixo/32/68834_2.png) [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)
#### Post date: [May 11, 2021, 2:40am UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615/6 "2021-05-11T02:40:54Z")

</div>

Thanks @warkolm , I will read and return here

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 8, 2021, 2:41am UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615/7 "2021-06-08T02:41:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.