# Pass dissect results to next event
**URL:** https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507
**Category:** Beats
**Tags:** filebeat
**Created:** [February 17, 2022, 3:05pm UTC](https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507 "2022-02-17T15:05:06Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Dancho](https://discuss.elastic.co/u/Dancho)
#### Post date: [February 17, 2022, 3:05pm UTC](https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507/1 "2022-02-17T15:05:06Z")
we use dissect to find some keys, can we pass those fields to the next events till the key will be overwritten?
our use case: log file structure contains a header and a body.
we need to dissect some values from the header and make sure those values are available for all body events later.
is that possible?
---
### Author:  [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)
#### Post date: [February 18, 2022, 1:35pm UTC](https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507/2 "2022-02-18T13:35:00Z")
Not really with beats natively.
---
### Author:  [@Dancho](https://discuss.elastic.co/u/Dancho)
#### Post date: [February 18, 2022, 3:12pm UTC](https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507/3 "2022-02-18T15:12:22Z")
And via logstash?
---
### Author:  [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)
#### Post date: [February 18, 2022, 3:25pm UTC](https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507/4 "2022-02-18T15:25:19Z")
Probably with logstash by using memcache or similar feature
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 18, 2022, 5:25pm UTC](https://discuss.elastic.co/t/pass-dissect-results-to-next-event/297507/5 "2022-03-18T17:25:54Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.