# Logstash parse data deeply

**URL:** <https://discuss.elastic.co/t/logstash-parse-data-deeply/190146>\
**Category:** Logstash\
**Created:** [July 12, 2019, 6:08am UTC](https://discuss.elastic.co/t/logstash-parse-data-deeply/190146 "2019-07-12T06:08:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ahmet\_Kartal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ahmet_kartal/32/47196_2.png) [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\
**Post date:** [July 12, 2019, 6:09am UTC](https://discuss.elastic.co/t/logstash-parse-data-deeply/190146/1 "2019-07-12T06:09:00Z")

</div>

Hello, I have data that I want to parse. I have splitted some part of my data but I need to parse it again. Is there any other way to parse my data?  
This is my data: `IP Adress - - [01/Jul/2019:13:03:07 +0300] "POST /search?page=1&page_size=25 HTTP/1.1" 200 846 "https://try.com/search/?contains=kingcbd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36 OPR/60.0.3255.170" "IP Adress" "US"`

In my data there is page\_size part, I want to put this data another field which I will create. It must be like this : my\_newfield\_page\_size: 25  
Same goes to page part. I need it like this: my\_newfield\_page=1  
Last example, I have contains part, I need this "contain" part like this: my\_data\_type: contains

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 9, 2019, 6:09am UTC](https://discuss.elastic.co/t/logstash-parse-data-deeply/190146/2 "2019-08-09T06:09:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.