# How can find my message part of log in elastic discover

**URL:** <https://discuss.elastic.co/t/how-can-find-my-message-part-of-log-in-elastic-discover/358575>\
**Category:** Kibana\
**Created:** [May 1, 2024, 4:00pm UTC](https://discuss.elastic.co/t/how-can-find-my-message-part-of-log-in-elastic-discover/358575 "2024-05-01T16:00:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![baber1223](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baber1223/32/83533_2.png) [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Post date:** [May 1, 2024, 4:00pm UTC](https://discuss.elastic.co/t/how-can-find-my-message-part-of-log-in-elastic-discover/358575/1 "2024-05-01T16:00:41Z")

</div>

This is a part of my log file

```auto
<log realm="channel/172.17.17.20:39190" at="2024-05-01T19:17:40.993">
  <send>
    <isomsg direction="outgoing">
      <!-- com.mie.gateway.packager.ShetISO87APackager -->
      <field id="0" value="0110"/>
      <field id="2" value="6219861970319108"/>
      <field id="3" value="330000"/>
      <field id="7" value="0501191740"/>
      <field id="11" value="255680"/>
      <field id="12" value="191740"/>
      <field id="13" value="0501"/>
      <field id="15" value="0501"/>
      <field id="32" value="585947"/>
      <field id="33" value="950001"/>
      <field id="37" value="412215255680"/>
      <field id="38" value="255680"/>
      <field id="39" value="00"/>
      <field id="41" value="123456 "/>
      <field id="42" value="000000000582431"/>
      <field id="44" value="ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ04�õþ¢15�þ¤�öÿ¥�¢ùÿ÷õþö"/>
      <field id="55" value=""/>
      <field id="62" value="5900000001132011199980A201813172.20.35.17600N018000000 00321B02B0FF5BD350E235066B907FA304FB32C9F12EF35E91B06DC522D48CF58E6854"/>
      <field id="102" value="611828005729498101"/>
      <field id="128" value="03B535A600000000" type="binary"/>
    </isomsg>
  </send>
</log>

```

Now it is sending to elastic and I can see in dataview but want to know how can find this log in discover dashboard ? Does it put in message field ? How can find out it is sending in one message to elastic ?

---

<div class="post-metadata">

**Author:** ![baber1223](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baber1223/32/83533_2.png) [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Post date:** [May 2, 2024, 5:09am UTC](https://discuss.elastic.co/t/how-can-find-my-message-part-of-log-in-elastic-discover/358575/2 "2024-05-02T05:09:35Z")

</div>

Would you please help me about it ?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [May 2, 2024, 2:59pm UTC](https://discuss.elastic.co/t/how-can-find-my-message-part-of-log-in-elastic-discover/358575/3 "2024-05-02T14:59:09Z")

</div>

> [@baber1223](#):
>
> Now it is sending to elastic and I can see in dataview but want to know how can find this log in discover dashboard ? Does it put in message field ? How can find out it is sending in one message to elastic ?

What version?  
How did you ingest the log?  
What did the source log look like?  
Did you account for Multi-Line when you ingested them?

You will need to go to Discover, and look at a few of the logs by opening them...

If you share what they look like perhaps we can help...

Otherwise we can not help much...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 30, 2024, 2:59pm UTC](https://discuss.elastic.co/t/how-can-find-my-message-part-of-log-in-elastic-discover/358575/4 "2024-05-30T14:59:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
