# Elastic and Kibana, indexing al Json with an field array looks like a plain String

**URL:** <https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433>\
**Category:** Elasticsearch\
**Created:** [December 30, 2014, 12:32pm UTC](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433 "2014-12-30T12:32:14Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Guillermo\_Ortiz](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\
**Post date:** [December 30, 2014, 12:32pm UTC](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433/1 "2014-12-30T12:32:14Z")

</div>

I'm starting working with Elastic and Kibana.  
I have indexed some JSON but I think that there're something that I'm  
missing.

My JSONs have some simple fields and another field that it's an array, the  
schema is:

{"akamai":{"mappings":{"miIndex":{"properties":{"date":{"type":"long"},"logs":{"properties":{"message":{"properties":{"cliIP":{"type":"string"},"fwdHost":{"type":"string"},"reqHost":{"type":"string"}}},"waf":{"properties":{"warnSlrs":{"type":"string"}}}}},"type":{"type":"string"}}}}}}

Fields as type, date are independent, but "logs" it's just a string in Kibana.

I'd like to see it like a real JSON as tree or something similar. I'm confused because the schema looks good, but in Kibana it's just a String.

I have some Java classes to model the Json and use Jackson to parse it as this:

IndexResponse response = client.prepareIndex(indexName, docType)  
.setSource(jsonToIndex).execute().actionGet();

I thought as well that it could be some chars what are not correctly escaped so I used StringEscapeUtils to escape them, but it doesn't fix anything.

Should I be able to see the "logs" field as a json or arrays in Kibana can't be explored as a real json? what am I missing?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/f21d4be2-0e13-4f39-926c-690e0f65843a%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/f21d4be2-0e13-4f39-926c-690e0f65843a%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Guillermo\_Ortiz](https://avatars.discourse-cdn.com/v4/letter/g/258eb7/32.png) [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\
**Post date:** [December 30, 2014, 3:35pm UTC](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433/2 "2014-12-30T15:35:29Z")

</div>

I was reading documentation about Kibana and ES and I think that Elastic  
doesn't type the nested properties to indicate that some of my fields are  
nested. Anyway, I created another index to try it with nested properties  
and I can't see them on the field panel from Kibana.

On Tuesday, December 30, 2014 1:32:14 PM UTC+1, Guillermo Ortiz wrote:

> I'm starting working with Elastic and Kibana.  
> I have indexed some JSON but I think that there're something that I'm  
> missing.
> 
> My JSONs have some simple fields and another field that it's an array, the  
> schema is:
> 
> {"akamai":{"mappings":{"miIndex":{"properties":{"date":{"type":"long"},"logs":{"properties":{"message":{"properties":{"cliIP":{"type":"string"},"fwdHost":{"type":"string"},"reqHost":{"type":"string"}}},"waf":{"properties":{"warnSlrs":{"type":"string"}}}}},"type":{"type":"string"}}}}}}
> 
> Fields as type, date are independent, but "logs" it's just a string in Kibana.
> 
> I'd like to see it like a real JSON as tree or something similar. I'm confused because the schema looks good, but in Kibana it's just a String.
> 
> I have some Java classes to model the Json and use Jackson to parse it as this:
> 
> IndexResponse response = client.prepareIndex(indexName, docType)  
> .setSource(jsonToIndex).execute().actionGet();
> 
> I thought as well that it could be some chars what are not correctly escaped so I used StringEscapeUtils to escape them, but it doesn't fix anything.
> 
> Should I be able to see the "logs" field as a json or arrays in Kibana can't be explored as a real json? what am I missing?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/161f1e10-ccb7-4207-95e7-ff2f07dc70cc%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/161f1e10-ccb7-4207-95e7-ff2f07dc70cc%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Brian\_Lowrance](https://avatars.discourse-cdn.com/v4/letter/b/ed655f/32.png) [@Brian\_Lowrance](https://discuss.elastic.co/u/Brian_Lowrance)\
**Post date:** [February 18, 2015, 3:20am UTC](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433/3 "2015-02-18T03:20:10Z")

</div>

you happen to figure out a solution for this?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/7f5abacf-e2b5-41e9-b9d0-6515a336fb8a%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/7f5abacf-e2b5-41e9-b9d0-6515a336fb8a%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:32am UTC](https://discuss.elastic.co/t/elastic-and-kibana-indexing-al-json-with-an-field-array-looks-like-a-plain-string/21433/4 "2017-07-06T00:32:02Z")

</div>


