# Process twice a specific field created by grok
**URL:** https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623
**Category:** Logstash
**Created:** [January 10, 2020, 3:29pm UTC](https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623 "2020-01-10T15:29:48Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@rschirin](https://discuss.elastic.co/u/rschirin)
#### Post date: [January 10, 2020, 3:29pm UTC](https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623/1 "2020-01-10T15:29:48Z")
Hi guys,
I would like to know if there is a way to apply grok filter on a message to obtain several fields and then apply one more time grok filter to extract a subset of information from a field.
currently, collecting the ES slowlog data I'm creating the field `query` that contains the query executed on ES.
I would like to process one more time my `query` field to extract another value. is it possible?
regards
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [January 10, 2020, 5:12pm UTC](https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623/2 "2020-01-10T17:12:27Z")
Yes, if you extract a field called query using grok you can have a second grok after that that parses [query] into other fields.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 7, 2020, 5:12pm UTC](https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623/3 "2020-02-07T17:12:30Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.