# Scripted fields from Message
**URL:** https://discuss.elastic.co/t/scripted-fields-from-message/168002
**Category:** Elasticsearch
**Created:** [February 12, 2019, 9:44am UTC](https://discuss.elastic.co/t/scripted-fields-from-message/168002 "2019-02-12T09:44:37Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@priya08](https://discuss.elastic.co/u/priya08)
#### Post date: [February 12, 2019, 9:44am UTC](https://discuss.elastic.co/t/scripted-fields-from-message/168002/1 "2019-02-12T09:44:37Z")
Hi ,
How can we created the scripted field(datetime) from "message" field. Please find the sample input
{
"\_index": "abcd",
"\_type": "doc",
"\_id": "abcd",
"\_version": 1,
"\_score": null,
"\_source": {
"@version": "1",
"@timestamp": "2019-02-12T06:55:09.182Z",
"message": "[INFO] SYSLOG-\>|datetime:20190212154454+0530|hostname:abcd|threadId:abcd(main)|userId:null"
}
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [February 12, 2019, 9:45am UTC](https://discuss.elastic.co/t/scripted-fields-from-message/168002/2 "2019-02-12T09:45:55Z")
You should really parse this out before you index it into Elasticsearch, e.g. using Logstash or an ingest node pipeline, as that will perform and scale much better.
---
### Author:  [@priya08](https://discuss.elastic.co/u/priya08)
#### Post date: [February 12, 2019, 9:51am UTC](https://discuss.elastic.co/t/scripted-fields-from-message/168002/3 "2019-02-12T09:51:36Z")
I am using logstash file , but in that file we are having so many grok patterns (In our application we are having so many log statements , for each statement we are having one pattern) . Can we achieve this using scripted fields . Because if any new fields adding in logger level , we need to change the grok pattern , that is bit challenge for us , because we are having so many patterns.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 12, 2019, 9:51am UTC](https://discuss.elastic.co/t/scripted-fields-from-message/168002/4 "2019-03-12T09:51:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.