# Is there any way to create an additional field without using Scripted field and Logstash?

**URL:** https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157
**Category:** Elasticsearch
**Created:** [July 2, 2018, 9:20am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157 "2018-07-02T09:20:08Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [July 2, 2018, 9:20am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157/1 "2018-07-02T09:20:08Z")

</div>

Hi,

I am using ELK GA 6.3.0. In my index, there is a `number` attribute, currently taking as `string`. To perform aggregations, I have created a `number` scripted field like;

```
return doc['field_a'].value;

```

This works fine, but utilizes CPU. Is there any way to achieve the same, more efficiently, and without using Logstash?

Thanks.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [July 2, 2018, 9:56am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157/2 "2018-07-02T09:56:58Z")

</div>

Yes, you can reindex your data and add a new field with correct mapping using the [reindex API together with a script or ingest pipeline](https://www.elastic.co/guide/en/elasticsearch/reference/6.3/docs-reindex.html). To add this on the ingest side for new data, create an ingest pipeline for this as well.

---

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [July 2, 2018, 11:17am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157/3 "2018-07-02T11:17:08Z")

</div>

Thank you @Christian_Dahlqvist . Could you kindly show me some code to create a pipeline which convert `string` data in `field_a` to a number, and store it in `field_b` in the index `my_index-*`?

Thanks.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [July 2, 2018, 11:42am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157/4 "2018-07-02T11:42:11Z")

</div>

Try a pipeline with e.g. a grok processor:

```auto
{
  "processors" : [
    {
      "grok": {
        "field": "field_a",
        "patterns": ["%{NUMBER:field_b:int}"]
      }
    }
  ]
}

```

---

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [July 2, 2018, 11:43am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157/5 "2018-07-02T11:43:23Z")

</div>

Thanks Christian 🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 30, 2018, 11:43am UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-an-additional-field-without-using-scripted-field-and-logstash/138157/6 "2018-07-30T11:43:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
