# Output set by field

**URL:** https://discuss.elastic.co/t/output-set-by-field/338748
**Category:** Logstash
**Created:** [July 19, 2023, 7:09am UTC](https://discuss.elastic.co/t/output-set-by-field/338748 "2023-07-19T07:09:11Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![tbs575](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbs575/32/87690_2.png) [@tbs575](https://discuss.elastic.co/u/tbs575)
#### Post date: [July 19, 2023, 7:09am UTC](https://discuss.elastic.co/t/output-set-by-field/338748/1 "2023-07-19T07:09:11Z")

</div>

Hi Guys,

set logstash output influxdb, as title can out by field. output part like

```auto
output {
  influxdb_v2 {
    host => "10.200.101.18"
    port => "8086"
    org => "icep"
    token => "SIRq-QX3d7ddOI33Z9XfmZETHHGAFjH_033Dgfly6iiKIkQqMqS4lfEqdnbNpB5uydV_O2z4F-s5Mo8szJWfeA=="
    measurement => "%{measurement}"
    send_as_tags => ["[host][name]"]
    bucket => "test"
    exclude_fields => ["original"]
    use_event_fields_for_data_points => false
    data_points => {
      "car_number" => "%{car_number}" "location" => "%{location}" "status" => "%{status}"
    }
  }
}

output {
  stdout { }
}

```

As different log, need change `measurement` and `data_points`. In filter part, I add field `add_field => { "measurement" => "parking-car-location" }` to solve `measurement`, but `data_points` can not know how to solve, is there any idea? thanks

---

<div class="post-metadata">

### Author: ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [July 19, 2023, 7:49am UTC](https://discuss.elastic.co/t/output-set-by-field/338748/2 "2023-07-19T07:49:34Z")

</div>

Try with commas

```auto
data_points => { "car_number" => "%{car_number}", "location" => "%{location}", "status" => "%{status}" }

```

---

<div class="post-metadata">

### Author: ![tbs575](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbs575/32/87690_2.png) [@tbs575](https://discuss.elastic.co/u/tbs575)
#### Post date: [July 19, 2023, 9:19am UTC](https://discuss.elastic.co/t/output-set-by-field/338748/3 "2023-07-19T09:19:42Z")

</div>

Hi Rios

thanks, but that is not for my question.  
my `data_points` format is right, can output metric. just different output content by logs. maybe this time is `data_points => { "A" => "%{A}" "B" => "%{B}" "C" => "%{C}" }` and next time is `data_points => { "D" => "%{D}" "E" => "%{E}"}`

---

<div class="post-metadata">

### Author: ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [July 19, 2023, 9:39am UTC](https://discuss.elastic.co/t/output-set-by-field/338748/4 "2023-07-19T09:39:56Z")

</div>

In that case, you should use mutate and format dynamic array [@metadata][data\_point] or use Ruby code. At the end will be:  
`data_points => { %{[@metadata][data_point] }`

---

<div class="post-metadata">

### Author: ![tbs575](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbs575/32/87690_2.png) [@tbs575](https://discuss.elastic.co/u/tbs575)
#### Post date: [July 20, 2023, 1:29am UTC](https://discuss.elastic.co/t/output-set-by-field/338748/5 "2023-07-20T01:29:02Z")

</div>

Hi Rios

can you show a example of dynamic array [@metadata][data\_point]? thanks

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 17, 2023, 1:29am UTC](https://discuss.elastic.co/t/output-set-by-field/338748/6 "2023-08-17T01:29:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
