# Monitoring string with dynamic data

**URL:** <https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647>\
**Category:** Elasticsearch\
**Created:** [May 11, 2021, 8:12am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647 "2021-05-11T08:12:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![RustyP](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@RustyP](https://discuss.elastic.co/u/RustyP)\
**Post date:** [May 11, 2021, 8:12am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647/1 "2021-05-11T08:12:41Z")

</div>

Hi

I have a string which has a dynamic number in the middle of it, how woud i go about monitoring the string considering it wont be the same every time due to the changing number?

eg: (ISO-host-async-XXX) Unknown Exception java.lang.NullPointerException

The XXX in the above string will be a 3 digit number which changes.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 11, 2021, 8:26am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647/2 "2021-05-11T08:26:28Z")

</div>

Welcome!

I believe that you could use a grok or dissect pattern to extract just the meaningful information (`ISO-host-async`) into a field.

---

<div class="post-metadata">

**Author:** ![RustyP](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@RustyP](https://discuss.elastic.co/u/RustyP)\
**Post date:** [May 12, 2021, 8:44am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647/3 "2021-05-12T08:44:50Z")

</div>

> [@dadoonet](#):
>
> dissect pattern

Thanks for the quick reply! I am unfamiliar with dissect pattern, could you direct me toward a good resource which explains how to set this up?

Thanks

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 12, 2021, 8:57am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647/4 "2021-05-12T08:57:47Z")

</div>

The documentation is

> **[Dissect processor | Elasticsearch Guide \[7.12\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/dissect-processor.html)**

I also found this nice online tool today:

[https://dissect-tester.jorgelbg.me/](https://dissect-tester.jorgelbg.me/)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 9, 2021, 8:58am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647/5 "2021-06-09T08:58:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.