Data [All message fields ] are not visible on kibana 7 to drill down on pie chart

Elastic Stack Kibana
1

Hi Experts,
I am using kibana-7.3.1 .My custom JSON gets stored in elastic search inside 'message' field,
and I want to draw pie chart based on these fields .but issue is I can't see those custom JSON fields on KIBANA dashboard for selection ,Can anyone guide me on same?

Thanks.

2

You could convert the strings into real document structures, eg. using the grok processor in the ingest pipeline https://www.elastic.co/guide/en/elasticsearch/reference/master/grok-processor.html

A more targeted approach is the JSON preprocessor in Logstash https://www.elastic.co/guide/en/logstash/current/plugins-filters-json.html

1 Like
3

Thank you very much @monfera for suggesting approach.
I am new to logstash. Could you please provide any reference/sample JSON preprocessor example in Logstash which will give expected format to index in elasticsearch.

Thanks.

4

There are a bunch of examples here and setting up logstash is described here and there are various blog posts and tutorials if you search, maybe worth searching or asking in Logstash discuss as it's not really Kibana-specific.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.