# Merging information from two log files
**URL:** https://discuss.elastic.co/t/merging-information-from-two-log-files/28914
**Category:** Logstash
**Created:** [September 9, 2015, 8:51am UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914 "2015-09-09T08:51:31Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)
#### Post date: [September 9, 2015, 8:51am UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914/1 "2015-09-09T08:51:31Z")
Hi ,
I need to merge the information from two log file
ex: From the first log file I am getting some log information and second log file I am getting ID , I want to append that ID with each logs coming from first file..
I am doing it like
> > input
> > {
> > file
> > {
> > path =\> "D:/log\_file/insightlogfolder/\*"
> > sincedb\_path =\> "D:/data1.sincedb"
> > type =\> "logfile"
> > start\_position =\> "beginning"
> > }
```
file
{
path => "D:/log_file/ID/*"
type => "pidlog"
sincedb_path => "D:/data2.sincedb"
start_position => "beginning"
}
}
filter
{
grok
{
match => ["message", "%{NUMBER:id}"]
}
if [type] == "logfile"
{
grok
{
patterns_dir => "D:/log_file/patterns"
match => ["message", "%{MASTER_LOG}"]
add_field => { "errorlog" => "errorlog" }
}
}
mutate
{
add_field => { "ID" => "%{id}" }
}
}
```
But not getting the desired result,
please anyone can help
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 9, 2015, 9:06am UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914/2 "2015-09-09T09:06:27Z")
Logstash doesn't support that kind of log merging. Not with the stock plugins anyway. It would certainly be possible to write a custom plugin for it.
---
### Author:  [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)
#### Post date: [September 16, 2015, 3:32pm UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914/3 "2015-09-16T15:32:58Z")
@magnusbaeck I was going through some posts , I came accross plugin "logstash-filter-memorize" , can it be done through this ?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 16, 2015, 5:45pm UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914/4 "2015-09-16T17:45:46Z")
Possibly, yes, but I'd be worried about corner cases. It definitely looks like it would work if both records that you want to merge come from the same file so that their internal order is fixed. But if they come from different files, how can you be sure that the records are read in the order required?
---
### Author:  [@Pratheek](https://discuss.elastic.co/u/Pratheek)
#### Post date: [May 29, 2017, 11:34am UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914/5 "2017-05-29T11:34:35Z")
Hi,
Is there any update on this thread ? Will it be possible by any chance to get information from two log files merged?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:26am UTC](https://discuss.elastic.co/t/merging-information-from-two-log-files/28914/6 "2017-07-06T04:26:17Z")