# Logstash Filter Data

**URL:** https://discuss.elastic.co/t/logstash-filter-data/188847
**Category:** Logstash
**Created:** [July 4, 2019, 6:55am UTC](https://discuss.elastic.co/t/logstash-filter-data/188847 "2019-07-04T06:55:25Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)
#### Post date: [July 4, 2019, 6:55am UTC](https://discuss.elastic.co/t/logstash-filter-data/188847/1 "2019-07-04T06:55:25Z")

</div>

How to filter data in logstash and can we add filter data into new field for example  
 ![Test%20Cs](https://us1.discourse-cdn.com/elastic/original/3X/c/4/c4cf70c6880cc85fcc8cfa9bf79244bd148e6897.jpeg)

I have upload the picture if you see the column of message column there is different transaction for example MCB Debit Card Charged, OTP Login,Activation Code, Money received, Debit Card Transaction reversed . Can we filter this data on logstash add new column Transaction type and match data if message is debit card charged it will go on Debit Card Transaction, If message is OTP Login then transaction type will be OTP, if message is Card Activation then it will go in Activation Code Filed  
|

---

<div class="post-metadata">

### Author: ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)
#### Post date: [July 4, 2019, 6:59am UTC](https://discuss.elastic.co/t/logstash-filter-data/188847/2 "2019-07-04T06:59:56Z")

</div>

![Test%20Cs%201](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3f20bc61b86001a80dde317c5a90b37b28170d36.jpeg)

Output will be like this can this possible in logstash please help and let me know thanks

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 1, 2019, 7:00am UTC](https://discuss.elastic.co/t/logstash-filter-data/188847/3 "2019-08-01T07:00:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.