# Substring in logstash

**URL:** https://discuss.elastic.co/t/substring-in-logstash/57070
**Category:** Logstash
**Created:** [August 3, 2016, 5:27am UTC](https://discuss.elastic.co/t/substring-in-logstash/57070 "2016-08-03T05:27:07Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![vandana\_sethi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vandana_sethi/32/10894_2.png) [@vandana\_sethi](https://discuss.elastic.co/u/vandana_sethi)
#### Post date: [August 3, 2016, 5:27am UTC](https://discuss.elastic.co/t/substring-in-logstash/57070/1 "2016-08-03T05:27:07Z")

</div>

I have a field

`enddate = "20160801105021"`  
I want to create a new field which must contain 8 character of the enddate or must have 0-7 character like  
`newdate = "20160801"`

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:45am UTC](https://discuss.elastic.co/t/substring-in-logstash/57070/2 "2017-07-06T04:45:08Z")

</div>