# How can I reject a value from json data type column in elasticsearch index result by using Painless?

**URL:** <https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248>\
**Category:** Kibana\
**Created:** [August 22, 2019, 6:45am UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248 "2019-08-22T06:45:18Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yusuf\_Karatoprak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yusuf_karatoprak/32/44539_2.png) [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\
**Post date:** [August 22, 2019, 6:45am UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248/1 "2019-08-22T06:45:18Z")

</div>

My question is really simple and unique. I am trying get value from json string column in elasticsearch index.  
How can I get "ClassName" from below data?

My rows is that:

 ![Capture](https://us1.discourse-cdn.com/elastic/original/3X/c/8/c8421381cfc7d1986810586770300bba54956260.png)

```python
{
  "ClassName": "System.InvalidOperationException",
  "Message": "Sequence contains no elements",
  "Data": null,
  "InnerException": null,
  "HelpURL": null,
  "StackTraceString": " . . . . . 
}

```

My solution is

```python
GET slog-2019-08-11/_search
{
  "script_fields": {
    "data": {
      "script": {
        "lang": "expression",
        "source": "doc['ClassName']",
        "params": {
          "markup": 0.2
        }
      }
    }
  }
}

```

But it returns to me an error:

```python
{
  "error": {
    "root_cause": [
      {
        "type": "script_exception",
        "reason": "link error",
        "script_stack": [
          "doc['ClassName']",
          " ^---- HERE"
        ],
        "script": "doc['ClassName']",
        "lang": "expression"
      }
    ],
    "type": "search_phase_execution_exception",
    "reason": "all shards failed",
    "phase": "query",
    "grouped": true,
    "failed_shards": [
      {
        "shard": 0,
        "index": "slog-2019-08-11",
        "node": "TBSUPCkhQ1aHX069zwT7Tg",
        "reason": {
          "type": "script_exception",
          "reason": "link error",
          "script_stack": [
            "doc['ClassName']",
            " ^---- HERE"
          ],
          "script": "doc['ClassName']",
          "lang": "expression",
          "caused_by": {
            "type": "parse_exception",
            "reason": "Field [ClassName] does not exist in mappings"
          }
        }
      }
    ]
  },
  "status": 500
}

```

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [August 22, 2019, 4:50pm UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248/2 "2019-08-22T16:50:51Z")

</div>

Can you try

```auto
GET slog-2019-08-11/_search
{
  "script_fields": {
    "data": {
      "script": {
        "lang": "expression",
        "source": "doc['ClassName'].value", <-- add value 
        "params": {
          "markup": 0.2
        }
      }
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![Yusuf\_Karatoprak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yusuf_karatoprak/32/44539_2.png) [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\
**Post date:** [August 23, 2019, 12:16pm UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248/3 "2019-08-23T12:16:42Z")

</div>

> [@nickpeihl](#):
>
> GET slog-2019-08-11/\_search { "script\_fields": { "data": { "script": { "lang": "expression", "source": "doc['ClassName'].value", \<-- add value "params": { "markup": 0.2 } } } } }

{  
"error": {  
"root\_cause": [  
{  
"type": "script\_exception",  
"reason": "link error",  
"script\_stack": [  
"doc['ClassName'].value",  
" ^---- HERE"  
],  
"script": "doc['ClassName'].value",  
"lang": "expression"  
}  
],  
"type": "search\_phase\_execution\_exception",  
"reason": "all shards failed",  
"phase": "query",  
"grouped": true,  
"failed\_shards": [  
{  
"shard": 0,  
"index": "slog-2019-08-14",  
"node": "TBSUPCkhQ1aHX069zwT7Tg",  
"reason": {  
"type": "script\_exception",  
"reason": "link error",  
"script\_stack": [  
"doc['ClassName'].value",  
" ^---- HERE"  
],  
"script": "doc['ClassName'].value",  
"lang": "expression",  
"caused\_by": {  
"type": "parse\_exception",  
"reason": "Field [ClassName] does not exist in mappings"  
}  
}  
}  
]  
},  
"status": 500  
}

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [August 23, 2019, 9:28pm UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248/4 "2019-08-23T21:28:19Z")

</div>

I need a little more information. Can you share your mapping for this index?

---

<div class="post-metadata">

**Author:** ![Yusuf\_Karatoprak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yusuf_karatoprak/32/44539_2.png) [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\
**Post date:** [August 27, 2019, 3:17pm UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248/5 "2019-08-27T15:17:24Z")

</div>

Yes! Sure.Btw sorry my late response:

{  
"mapping": {  
"logmessage": {  
"properties": {  
"additionalData": {  
"properties": {  
"data": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"method": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"url": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
}  
}  
},  
"caller": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"correlationId": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"data": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"environment": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"headers": {  
"properties": {  
"key": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"value": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
}  
}  
},  
"id": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"logDate": {  
"type": "date"  
},  
"logLevel": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"logSource": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"logType": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"parentLogId": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"processCost": {  
"type": "float"  
},  
"responseStatusCode": {  
"type": "long"  
},  
"urlMethod": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"urlPath": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"urlQueryString": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
}  
}  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 24, 2019, 3:17pm UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248/6 "2019-09-24T15:17:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.