# Transform Logs in Elasticsearch
**URL:** https://discuss.elastic.co/t/transform-logs-in-elasticsearch/106639
**Category:** Elasticsearch
**Created:** [November 7, 2017, 7:59am UTC](https://discuss.elastic.co/t/transform-logs-in-elasticsearch/106639 "2017-11-07T07:59:41Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@McElroy](https://discuss.elastic.co/u/McElroy)
#### Post date: [November 7, 2017, 7:59am UTC](https://discuss.elastic.co/t/transform-logs-in-elasticsearch/106639/1 "2017-11-07T07:59:41Z")
Hi,
We have the problem that we changed our filebeat to write directly into elasticsearch and our logs aren't split in specific fields anymore. Do I have to write my logs into elasticsearch with logstash to split them into fields or do I have the possibility in elasticsearch aswell?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 7, 2017, 8:04am UTC](https://discuss.elastic.co/t/transform-logs-in-elasticsearch/106639/2 "2017-11-07T08:04:19Z")
You can use ingest node to do this in Elasticsearch before they are indexed, see [https://www.elastic.co/guide/en/elasticsearch/reference/5.6/ingest.html](https://www.elastic.co/guide/en/elasticsearch/reference/5.6/ingest.html) and [https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ingest-node.html](https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ingest-node.html)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 5, 2017, 8:04am UTC](https://discuss.elastic.co/t/transform-logs-in-elasticsearch/106639/3 "2017-12-05T08:04:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.