# How to extract file name from source vairable
**URL:** https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347
**Category:** Logstash
**Created:** [February 8, 2017, 9:29am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347 "2017-02-08T09:29:55Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [February 8, 2017, 9:29am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/1 "2017-02-08T09:29:55Z")
HI Team,
I need to extract the source field, when i process im getting grok parse failure please find the belwo image for your reference,
Im using below grok pattern,
%{PATH}/%{UUID:requestFileId}
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [February 8, 2017, 9:39am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/2 "2017-02-08T09:39:50Z")
That doesn't work because the filename isn't a UUID because it begins with "U" (and ends with "\_Request.xml" but is it happens that doesn't matter here).
Use `%{PATH}/%{UUID:requestFileId}` instead of `%{PATH}/U%{UUID:requestFileId}` and things should work better.
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [February 8, 2017, 9:46am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/3 "2017-02-08T09:46:14Z")
Its not working, Im getting same error. I want to extract this value also from this input,
/beep/envs/beepq/config/ddoa/logs/old/0a5d3ad4-421c-49bd-b05f-c83e869e526f\_Request.xml
Expected Result: 0a5d3ad4-421c-49bd-b05f-c83e869e526f
but im getting parse failure
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [February 8, 2017, 9:52am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/4 "2017-02-08T09:52:30Z")
> Its not working, Im getting same error.
With the exact input string you gave in your example or with the file named 0a5d3ad4-421c-49bd-b05f-c83e869e526f\_Request.xml?
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [February 8, 2017, 10:37am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/5 "2017-02-08T10:37:34Z")
Actually im processing one xml please find the result of that file,
I want to extract this value "0a5d3ad4-421c-49bd-b05f-c83e869e526f" from source field how can i perform that. Please help on that
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [February 8, 2017, 10:47am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/6 "2017-02-08T10:47:53Z")
Never post screenshots if you can use copy/paste.
I don't know why `%{PATH}` as in your previous example doesn't work, but the grok expression `/%{UUID:requestFileId}_Request.xml$` works fine.
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [February 8, 2017, 10:52am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/7 "2017-02-08T10:52:57Z")
"offset" =\> 0,
"count" =\> 1,
"input\_type" =\> "log",
"source" =\> "/beep/envs/beepq/config/ddoa/logs/fault/0ef47a3d-7dc6-4ccd-b49e-fad22018ccf6\_Request.xml",
"tags" =\> [
[0] "beats\_input\_codec\_plain\_applied",
[1] "\_grokparsefailure"
],
"@timestamp" =\> 2017-02-08T07:19:03.829Z,
"file\_type" =\> "ProcessRepairOrder",
"@version" =\> "1",
"beat" =\> {
"hostname" =\> "vmtlesdq01",
"name" =\> "vmtlesdq01"
},
"host" =\> "vmtlesdq01",
"fingerprint" =\> "18c5809fa1cf7208b25fdfc0052fe997f8af2cb3",
"fields" =\> nil
---
### Author:  [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)
#### Post date: [February 8, 2017, 10:55am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/8 "2017-02-08T10:55:05Z")
This is what i got from grok debugger
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 8, 2017, 10:55am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347/9 "2017-03-08T10:55:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.