# Indexing User-Agent data **URL:** \ **Category:** Elasticsearch\ **Created:** [May 11, 2020, 9:38am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972 "2020-05-11T09:38:01Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Jalpesh1](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Post date:** [May 11, 2020, 9:38am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/1 "2020-05-11T09:38:01Z")
Hi Team, I have below user-agent column in Elastic doc tag.http@user\_agent - **Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_14\_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36** I want to split this user-agent data in below column and want to store this data in same index. ``` "os" : "name" : "Mac OS X", "name" : "Chrome", "device" : "version" : "74.0.3729" ``` Please suggest. Thanks & Regards, Jalpesh ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 11, 2020, 11:04am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/2 "2020-05-11T11:04:25Z")
Have a look at [https://www.elastic.co/guide/en/elasticsearch/reference/current/user-agent-processor.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/user-agent-processor.html) ---
**Author:** ![Jalpesh1](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Post date:** [May 12, 2020, 4:10pm UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/3 "2020-05-12T16:10:19Z")
Hi David, Thanks for reply. I have tried user-agent-processor , on static data it's working fine. But in real time how can we implement this to segregate **user\_agent.name Chrome , user\_agent.os.name, user\_agent.os.version** in different column ? Currently we are getting real-time stream data of user-agent column in ES index . We want to store processed data in same index. Thanks & Regards, Jalpesh ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 13, 2020, 10:00am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/4 "2020-05-13T10:00:38Z")
That's the goal of the ingest pipeline: process your data as soon as you want to index documents. I don't understand why this would not work for you. ---
**Author:** ![Jalpesh1](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Post date:** [May 29, 2020, 1:13pm UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/5 "2020-05-29T13:13:08Z")
Hi Dadoonet, Can you help how to configure for Real-time data ? Example will help !!! Please find below dev tool command please suggest . ``` Pipeline definition ``` PUT \_ingest/pipeline/user\_agent { "description" : "Add user agent information", "processors" : [ { "user\_agent" : { "field" : "agent" } } ] } Input index to pipeline as below : PUT jaeger-span-2020-05-29/\_doc/\_id?pipeline=user\_agent { "agent": "http@user\_agent" } http@user\_agent is a column in Elasticsearch. \_id is a doc id 1 Sample input : Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_14\_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36 please suggest. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 29, 2020, 1:37pm UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/6 "2020-05-29T13:37:08Z")
Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable. Instead, paste the text and format it with `` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer. It would be great if you could update your post to solve this. ---
**Author:** ![Jalpesh1](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Post date:** [May 29, 2020, 2:44pm UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/7 "2020-05-29T14:44:36Z")
Post updated. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 30, 2020, 3:12am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/8 "2020-05-30T03:12:32Z")
Could you please format it as I mentioned? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 27, 2020, 3:24am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972/9 "2020-06-27T03:24:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.