# Not able to access the filebeat custom fields in logstash output

**URL:** https://discuss.elastic.co/t/not-able-to-access-the-filebeat-custom-fields-in-logstash-output/159342
**Category:** Logstash
**Created:** [December 4, 2018, 10:54am UTC](https://discuss.elastic.co/t/not-able-to-access-the-filebeat-custom-fields-in-logstash-output/159342 "2018-12-04T10:54:51Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![Ramalingam\_Chandran](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramalingam_chandran/32/38420_2.png) [@Ramalingam\_Chandran](https://discuss.elastic.co/u/Ramalingam_Chandran)
#### Post date: [December 4, 2018, 5:58pm UTC](https://discuss.elastic.co/t/not-able-to-access-the-filebeat-custom-fields-in-logstash-output/159342/3 "2018-12-04T17:58:02Z")

</div>

Thanks Philip. So it always needs to be an metadata field?. I was going throught threads and refered this thread for my configuration

> [@Filebeat fields are not working](https://discuss.elastic.co/t/filebeat-fields-are-not-working/122155):
>
> Here is my filebeat config: filebeat.prospectors: - type: log paths: - C:/inetpub/app01/logs/IIS/\*/\*.log fields: app\_group: iis app\_id: app01 - type: log paths: - C:/inetpub/app02/logs/IIS/\*/\*.log fields: app\_group: iis app\_id: app02 - type: log paths: - C:/inetpub/app03/logs/IIS/\*/\*.log fields: app\_group: iis app\_id: app03 output: logstash: hosts: ["myserver:7777"] And here is logstash: input { beats { port =\> 7777 } } filter …

---

_[View the full topic](https://discuss.elastic.co/t/not-able-to-access-the-filebeat-custom-fields-in-logstash-output/159342)._