# If \[@metadata\]\[field\] {} doesnot work
**URL:** https://discuss.elastic.co/t/if-metadata-field-doesnot-work/146681
**Category:** Logstash
**Created:** [August 30, 2018, 10:49am UTC](https://discuss.elastic.co/t/if-metadata-field-doesnot-work/146681 "2018-08-30T10:49:17Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@vemula.pranavi](https://discuss.elastic.co/u/vemula.pranavi)
#### Post date: [August 30, 2018, 10:49am UTC](https://discuss.elastic.co/t/if-metadata-field-doesnot-work/146681/1 "2018-08-30T10:49:17Z")
I'm trying to give syntax like 'if [@metadata][field] exists then do this' in output
output{
if [@metadata][field] {
elasticsearch {
hosts =\> ["[http://localhost:9200](http://localhost:9200)"]
index =\> "%{[@metadata][field]}"
}
}
}
I used two config files. One config file , I created input{} filter{} output{}(like above) , other file only filter{} which adds a field [@metadata][field] like
filter{
mutate {
add\_field =\> { "[@metadata][index\_name]" =\> "abc" }
}
}
The index gets created in elasticsearch, when I comment the if statement in the output, but when I remove, it does not get created.
How to make command enter into if statement?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 30, 2018, 11:12am UTC](https://discuss.elastic.co/t/if-metadata-field-doesnot-work/146681/2 "2018-08-30T11:12:18Z")
Please show the exact configuration you're using so that we can try to reproduce the issue. Which Logstash version?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 30, 2018, 12:03pm UTC](https://discuss.elastic.co/t/if-metadata-field-doesnot-work/146681/4 "2018-08-30T12:03:16Z")
I suggest you add a `stdout { codec => rubydebug { metadata => true } }` output to see what metadata fields you _really_ have.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 27, 2018, 12:03pm UTC](https://discuss.elastic.co/t/if-metadata-field-doesnot-work/146681/5 "2018-09-27T12:03:17Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.