# How to parse a hostname

**URL:** https://discuss.elastic.co/t/how-to-parse-a-hostname/33038
**Category:** Logstash
**Created:** [October 27, 2015, 3:11am UTC](https://discuss.elastic.co/t/how-to-parse-a-hostname/33038 "2015-10-27T03:11:27Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![Mark\_Tellier](https://avatars.discourse-cdn.com/v4/letter/m/c77e96/32.png) [@Mark\_Tellier](https://discuss.elastic.co/u/Mark_Tellier)
#### Post date: [October 28, 2015, 1:33am UTC](https://discuss.elastic.co/t/how-to-parse-a-hostname/33038/3 "2015-10-28T01:33:35Z")

</div>

Magnus,

Your recommendation worked, thanks for your prompt response.  
The following replaces my hostname from [esx1.acme.com](http://esx1.acme.com) to esx1.

```
mutate {
  split => ["syslog_hostname", "."]
}
mutate {
  replace => ["syslog_hostname", "%{[syslog_hostname][0]}"]
}

```

Thanks

---

_[View the full topic](https://discuss.elastic.co/t/how-to-parse-a-hostname/33038)._