diff --git a/dev-upgrade/elastic/logstash.yml b/dev-upgrade/elastic/logstash.yml
index d4da17f..fe3d36f 100644
--- a/dev-upgrade/elastic/logstash.yml
+++ b/dev-upgrade/elastic/logstash.yml
@@ -18,7 +18,7 @@ data:
       }   
       mutate {
         split => { "log.file.path" => "/" }
-        add_field => { "env" => "%{[hostlog.file.path][2]}" }
+        add_field => { "env" => "%{[log.file.path][2]}" }
       }
     }