# Logstash: Extracting Information from differenty log lines into one event

**URL:** https://discuss.elastic.co/t/logstash-extracting-information-from-differenty-log-lines-into-one-event/66044
**Category:** Logstash
**Created:** [November 15, 2016, 3:17am UTC](https://discuss.elastic.co/t/logstash-extracting-information-from-differenty-log-lines-into-one-event/66044 "2016-11-15T03:17:10Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Ramesh\_Janagam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramesh_janagam/32/11718_2.png) [@Ramesh\_Janagam](https://discuss.elastic.co/u/Ramesh_Janagam)
#### Post date: [November 15, 2016, 3:17am UTC](https://discuss.elastic.co/t/logstash-extracting-information-from-differenty-log-lines-into-one-event/66044/1 "2016-11-15T03:17:10Z")

</div>

Hi All,

I have case where information is being displayed in different lines. These lines are not even consecutive lines. Is there anyway to read these two and combine into single event?

Example log line: where I wanted to gather information from first line and last line into single event

```
07:11:02.002015|OrderId=100 Client=TEST
07:11:02.002016|blah1
07:11:02.002017|blah2
07:11:02.002018|blah3
07:11:02.002019|OrderId=100 Symbol=APPLE Price=99 Quantity=100

```

I wanted to gather all information about OrderId=100 from line1 and line5.

Or can you suggest what is the best way to work on these kind of logs?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 13, 2016, 3:17am UTC](https://discuss.elastic.co/t/logstash-extracting-information-from-differenty-log-lines-into-one-event/66044/2 "2016-12-13T03:17:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
