# Fields didn't show up

**URL:** https://discuss.elastic.co/t/fields-didnt-show-up/244550
**Category:** Kibana
**Created:** [August 11, 2020, 12:44pm UTC](https://discuss.elastic.co/t/fields-didnt-show-up/244550 "2020-08-11T12:44:43Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![ayoub11](https://avatars.discourse-cdn.com/v4/letter/a/2bfe46/32.png) [@ayoub11](https://discuss.elastic.co/u/ayoub11)
#### Post date: [August 11, 2020, 12:44pm UTC](https://discuss.elastic.co/t/fields-didnt-show-up/244550/1 "2020-08-11T12:44:43Z")

</div>

Hi, i'm using " Visualize data from a log file experimental" to upload a json file into kibana, but when i imported the file, it didn't display the fields contained in json file.  
Here is what i get:

 ![Annotation 2020-08-11 133939](https://us1.discourse-cdn.com/elastic/original/3X/e/d/ed894dcc08bea13bea7f5b232b98cc1ba7ce2375.png)  
Here is a snippet of my json file:  
 ![ok](https://us1.discourse-cdn.com/elastic/original/3X/3/7/37517050a8f36dbb9008c2a46308a01f79615d6d.png)  
My goal is to get for example "new socket", "on start" etc... as a fields to my index to explore them later.

---

<div class="post-metadata">

### Author: ![joshdover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshdover/32/42020_2.png) [@joshdover](https://discuss.elastic.co/u/joshdover)
#### Post date: [August 11, 2020, 4:54pm UTC](https://discuss.elastic.co/t/fields-didnt-show-up/244550/2 "2020-08-11T16:54:39Z")

</div>

Hi there, thanks for posting the question!

I believe you may be seeing this issue due to the spaces in the field names. This isn't something that Elasticsearch supports. Can you try again with a log file where the spaces are converted to underscores instead? For example, instead of "new socket" the field name should be "new\_socket".

---

<div class="post-metadata">

### Author: ![ayoub11](https://avatars.discourse-cdn.com/v4/letter/a/2bfe46/32.png) [@ayoub11](https://discuss.elastic.co/u/ayoub11)
#### Post date: [August 11, 2020, 8:20pm UTC](https://discuss.elastic.co/t/fields-didnt-show-up/244550/3 "2020-08-11T20:20:25Z")

</div>

Hello, i converted them but still the same result.  
I moved to create a config file in order to upload the data via logstash

 ![conf](https://us1.discourse-cdn.com/elastic/original/3X/2/4/245692933c417a983ea247c42e0ed076def973fd.png)  
Still the same output ! i dont know if i should add the field names in the fitler brackets or something else like that. If you can help me to solve this problem, thank you very much.

---

<div class="post-metadata">

### Author: ![joshdover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshdover/32/42020_2.png) [@joshdover](https://discuss.elastic.co/u/joshdover)
#### Post date: [August 11, 2020, 9:27pm UTC](https://discuss.elastic.co/t/fields-didnt-show-up/244550/4 "2020-08-11T21:27:29Z")

</div>

Using logstash you can add a `mutate` filter to rename these fields. Here is the documentation: [https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html](https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html)

An example might be:

```auto
filter {
  mutate {
    rename => {
      "new socket" => "new_socket",
      "end socket" => "end_socket",
      "[onStart][number of online devices]" => "[onStart][number_of_online_devices]"
    }

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 8, 2020, 9:27pm UTC](https://discuss.elastic.co/t/fields-didnt-show-up/244550/5 "2020-09-08T21:27:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.