# Combining URL and field value/values **URL:** \ **Category:** Kibana\ **Created:** [June 2, 2021, 7:54am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710 "2021-06-02T07:54:39Z")\ **Posts on this page:** 7\ **Page:** 2
**Author:** ![marija.timovska](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marija.timovska/32/77348_2.png) [@marija.timovska](https://discuss.elastic.co/u/marija.timovska)\ **Post date:** [June 2, 2021, 9:55am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/24 "2021-06-02T09:55:26Z")
Could this be a bug with syntax? ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [June 2, 2021, 9:57am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/25 "2021-06-02T09:57:44Z")
No I don't think so, can you check on your index pattern management list the type of the id? ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d2d9d932ef53beeb565e264140c153f229d44c6.png) ---
**Author:** ![marija.timovska](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marija.timovska/32/77348_2.png) [@marija.timovska](https://discuss.elastic.co/u/marija.timovska)\ **Post date:** [June 2, 2021, 9:58am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/26 "2021-06-02T09:58:42Z")
![image](https://us1.discourse-cdn.com/elastic/original/3X/e/2/e2bbc79403b333abf47cf5b33fefaab6f9483796.png) ---
**Author:** ![Stratoula\_Kalafateli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stratoula_kalafateli/32/70923_2.png) [@Stratoula\_Kalafateli](https://discuss.elastic.co/u/Stratoula_Kalafateli)\ **Post date:** [June 2, 2021, 10:03am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/27 "2021-06-02T10:03:33Z")
Ok this is the reason that you see the error. id.keyword should be of `keyword` type and not string. More information here [Elasticsearch replaces string type with two new types text and keyword. | Elastic Blog](https://www.elastic.co/blog/strings-are-dead-long-live-strings) ---
**Author:** ![marija.timovska](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marija.timovska/32/77348_2.png) [@marija.timovska](https://discuss.elastic.co/u/marija.timovska)\ **Post date:** [June 3, 2021, 8:04am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/30 "2021-06-03T08:04:54Z")
How do I do this, I do not use Logstash but there is a custom Plugin that takes the logs and I only have a Json file, I tried to configure there though there is no change and DevTools is out of the question bsc the logs already ate fixed and cant be manipulated, obv. ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/a/dab6f97e15bed98406b6e580203d1c7193e81c23.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e033b06ddca9caebe76716cfbdcd34adf14842a9.png) ---
**Author:** ![marija.timovska](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marija.timovska/32/77348_2.png) [@marija.timovska](https://discuss.elastic.co/u/marija.timovska)\ **Post date:** [June 3, 2021, 8:08am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/31 "2021-06-03T08:08:14Z")
![image](https://us1.discourse-cdn.com/elastic/original/3X/6/7/6760f64e57dcbc6e1bac02b9626a9ac64227579f.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/3/c350ac557f6010c765c5cc2312b1eb8a3931964c.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 1, 2021, 8:09am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710/32 "2021-07-01T08:09:05Z")
Closed on July 1, 2021, 8:09am UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710.md?page=1)