# How to create custom fields like apache for Tomcat logs?

**URL:** <https://discuss.elastic.co/t/how-to-create-custom-fields-like-apache-for-tomcat-logs/193628>\
**Category:** Beats\
**Tags:** beats-module, filebeat\
**Created:** [August 3, 2019, 8:17am UTC](https://discuss.elastic.co/t/how-to-create-custom-fields-like-apache-for-tomcat-logs/193628 "2019-08-03T08:17:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aftab\_Ali](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aftab_ali/32/35399_2.png) [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\
**Post date:** [August 3, 2019, 8:17am UTC](https://discuss.elastic.co/t/how-to-create-custom-fields-like-apache-for-tomcat-logs/193628/1 "2019-08-03T08:17:05Z")

</div>

Dear Team,

I am happy to use your services but I want to create custom fields like apache module response code, error and I want to create same to same fields for tomcat access logs, how it is possible, Please share the steps

my demo logs are mentioned below:--

| @timestamp | | August 3rd 2019, 13:46:17.044 |
| --- | --- | --- |
| t \_id | | buKNVmwBVzO-jEThAtIP |
| t \_index | | filebeat-6.4.2-2019.08.03 |
| # \_score | | - |
| t \_type | | doc |
| t beat.hostname | | ip-tomcat-xx-xx-x-xxx |
| t beat.name | | ip-tomcat-xx-xx-x-xxx |
| t beat.version | | 6.4.2 |
| t host.name | | ip-tomcat-xx-xx-x-xxx |
| t input.type | | log |
| t message | | xx-xx-x-xxx - - [03/Aug/2019:13:46:06 +0530] "POST /4.0.0.1/profile/getUserStatus HTTP/1.1" 13 200 751 |
| # offset | | 3,978,827 |
| t prospector.type | | log |
| t source | | /opt/tomcat/logs/live\_access\_log.2019-08-03.txt |

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 5, 2019, 10:39am UTC](https://discuss.elastic.co/t/how-to-create-custom-fields-like-apache-for-tomcat-logs/193628/2 "2019-08-05T10:39:39Z")

</div>

You need to create your own Filebeat module: [https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html](https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html)

---

<div class="post-metadata">

**Author:** ![Aftab\_Ali](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aftab_ali/32/35399_2.png) [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\
**Post date:** [August 14, 2019, 8:57am UTC](https://discuss.elastic.co/t/how-to-create-custom-fields-like-apache-for-tomcat-logs/193628/3 "2019-08-14T08:57:00Z")

</div>

Is there any video tutorial for that to create easily.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 11, 2019, 8:57am UTC](https://discuss.elastic.co/t/how-to-create-custom-fields-like-apache-for-tomcat-logs/193628/4 "2019-09-11T08:57:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.