How to extract this pattern: limited characters from "00205BKR0000CD"

Hi All

I have a event/column in below format

Column1
00204VAB0000CD
00204VAB0000CD
00204VAB0000CD
00205BKR0000CD

I want to extract in new column like this

Column2
VAB
VAB
VAB
BKR

This is nothing but the way we do it in excel LEFT(A2,5)

How we can do this with filter, what filter i should use to achieve this.
I thought about grok filter but not sure how to go about

Thanks

grok { match => { "someField" => => "^.....(?<newField>...)" } }

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.