# Split filepath to a new field

**URL:** <https://discuss.elastic.co/t/split-filepath-to-a-new-field/319657>\
**Category:** Logstash\
**Created:** [November 23, 2022, 12:42pm UTC](https://discuss.elastic.co/t/split-filepath-to-a-new-field/319657 "2022-11-23T12:42:53Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [November 23, 2022, 2:21pm UTC](https://discuss.elastic.co/t/split-filepath-to-a-new-field/319657/2 "2022-11-23T14:21:45Z")

</div>

Is this you looking for?

```auto
    mutate { add_field => { "devicename" => "%{[log][file][path]}" } }
    mutate{ gsub => ["devicename", '/var/log/remote/', ""] }
    mutate{ gsub => ["devicename", '[/]', "" ] }

```

Also is possible by grok

---

_[View the full topic](https://discuss.elastic.co/t/split-filepath-to-a-new-field/319657)._