# How to filter values of first pipe delimiter

**URL:** <https://discuss.elastic.co/t/how-to-filter-values-of-first-pipe-delimiter/133811>\
**Category:** Logstash\
**Created:** [May 30, 2018, 7:41am UTC](https://discuss.elastic.co/t/how-to-filter-values-of-first-pipe-delimiter/133811 "2018-05-30T07:41:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![santhosh.mahi](https://avatars.discourse-cdn.com/v4/letter/s/9d8465/32.png) [@santhosh.mahi](https://discuss.elastic.co/u/santhosh.mahi)\
**Post date:** [May 30, 2018, 7:41am UTC](https://discuss.elastic.co/t/how-to-filter-values-of-first-pipe-delimiter/133811/1 "2018-05-30T07:41:21Z")

</div>

Hi

I'm new to elasticsearch, here i'm facing issue while extract field.

this is the message displaying in kibana.

1234567890|2018-04-05 17:50:12|NON VOUCHER|30.9.12.3|eTopUP\_xyz\_0000\_1234567890|

I want only field 1,field 2 and field 5 values to be display without pipe delimiter in kibana. i.e

1234567890 2018-04-05 17:50:12 eTopUP\_xyz\_0000\_1234567890.

Can anyone help me to resolve this.

Regards  
San

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 27, 2018, 7:55am UTC](https://discuss.elastic.co/t/how-to-filter-values-of-first-pipe-delimiter/133811/2 "2018-06-27T07:55:00Z")

</div>

Closed on June 27, 2018, 7:55am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.