# Failed to format message Kibana

**URL:** https://discuss.elastic.co/t/failed-to-format-message-kibana/210335
**Category:** Kibana
**Created:** [December 3, 2019, 11:46am UTC](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335 "2019-12-03T11:46:52Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![whoatemyjam](https://avatars.discourse-cdn.com/v4/letter/w/5f9b8f/32.png) [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)
#### Post date: [December 3, 2019, 11:46am UTC](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335/1 "2019-12-03T11:46:52Z")

</div>

hi  
getting failed to format message from test.json which has

> {"logMessage": "this is some message 01", "sessionID": "some session", "applicationName": "some application", "uniqueId": "some uniqueid", "applicationVersion": "some version", "hostName": "some host", "loggingTime": "2019-11-26 18:04:20"  
> }

looked at suggestions from previous issues and tried a few things still not able to get it working.

filebeat.yml is

```
  filebeat.inputs:
- type: log
  enabled: true
  paths:
     - /home/test.json
  json.keys_under_root: true
  json.add_error_key: true

setup.kibana:
  host: "localhost:5601"

output.logstash:
  hosts: ["localhost:5044"]

processors:
  - rename:
       fields:
          - from: "log"
          - to: "message"

```

now i get something like

> {"file":{"path":"/home/test.json"}}

how can i get the full message in kibana logs  
I have kept the kibana.yml just as such

```
server.host: "localhost"
elasticsearch.hosts: ["http://localhost:9200"]

```

is there a fix yet, can someone guide me to where i can look for a fix.  
Thanks

---

<div class="post-metadata">

### Author: ![whoatemyjam](https://avatars.discourse-cdn.com/v4/letter/w/5f9b8f/32.png) [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)
#### Post date: [December 4, 2019, 11:29am UTC](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335/2 "2019-12-04T11:29:44Z")

</div>

any suggestions?

---

<div class="post-metadata">

### Author: ![whoatemyjam](https://avatars.discourse-cdn.com/v4/letter/w/5f9b8f/32.png) [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)
#### Post date: [December 5, 2019, 12:52pm UTC](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335/3 "2019-12-05T12:52:52Z")

</div>

ok i think i was over complicating things, guess too much knowledge on the net  
just used this is fb conf

```
  filebeat.inputs:
- type: log
  enabled: true
  paths:
     - /home/test.json
output.logstash:
  hosts: ["localhost:5044"]

```

and got it working by using simple json filter in logstash

will have to work on multiline patterns now , but thats for some time else

Thanks

---

<div class="post-metadata">

### Author: ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [December 5, 2019, 2:15pm UTC](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335/4 "2019-12-05T14:15:57Z")

</div>