# Any way to parse string into JSON in Kibana?

**URL:** https://discuss.elastic.co/t/any-way-to-parse-string-into-json-in-kibana/181886
**Category:** Kibana
**Created:** [May 20, 2019, 6:40pm UTC](https://discuss.elastic.co/t/any-way-to-parse-string-into-json-in-kibana/181886 "2019-05-20T18:40:36Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![NFhbar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nfhbar/32/45851_2.png) [@NFhbar](https://discuss.elastic.co/u/NFhbar)
#### Post date: [May 20, 2019, 6:40pm UTC](https://discuss.elastic.co/t/any-way-to-parse-string-into-json-in-kibana/181886/1 "2019-05-20T18:40:37Z")

</div>

I have a series of logs which contain a message field with a string value as seen in the image, line 46:

 ![12%20AM](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1a54806afe4e865b528d30b30934ae09dc0165f9.png)

Is there any way I can parse this field so I can access the info as `message.service`, `message.info`, etc?

---

<div class="post-metadata">

### Author: ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)
#### Post date: [May 20, 2019, 7:56pm UTC](https://discuss.elastic.co/t/any-way-to-parse-string-into-json-in-kibana/181886/2 "2019-05-20T19:56:30Z")

</div>

Not the way you have it stored currently. The string looks like it's all just JSON, if you were to index that data as new fields in Elasticsearch, then you could access, aggregate, and search based on the information.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 17, 2019, 7:56pm UTC](https://discuss.elastic.co/t/any-way-to-parse-string-into-json-in-kibana/181886/3 "2019-06-17T19:56:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
