# Logstash cef
**URL:** https://discuss.elastic.co/t/logstash-cef/216957
**Category:** Logstash
**Created:** [January 29, 2020, 8:23am UTC](https://discuss.elastic.co/t/logstash-cef/216957 "2020-01-29T08:23:40Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Moe\_Hmaidan](https://discuss.elastic.co/u/Moe_Hmaidan)
#### Post date: [January 29, 2020, 8:23am UTC](https://discuss.elastic.co/t/logstash-cef/216957/1 "2020-01-29T08:23:40Z")
Good evening,
I just started working with elk and I'm facing the issue of decoding/filter/split the cef file
as you can see in the pic the CEF file contains some security alerts information
which filter should i use to extract the data and get it to appear as separate fields on kibana
P.S: My conf file filter section is still empty I just need some guidance on how to proceed.
---
### Author:  [@Magnus\_Kessler](https://discuss.elastic.co/u/Magnus_Kessler)
#### Post date: [January 29, 2020, 8:28am UTC](https://discuss.elastic.co/t/logstash-cef/216957/2 "2020-01-29T08:28:42Z")
Have a look at the [Logstash CEF codec](https://www.elastic.co/guide/en/logstash/current/plugins-codecs-cef.html). If you configure your input to use this codec, the relevant fields should already be split out of the message. You can then use additional filters if needed to further process your data.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 26, 2020, 8:29am UTC](https://discuss.elastic.co/t/logstash-cef/216957/3 "2020-02-26T08:29:15Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.