# How can specify the log message

**URL:** <https://discuss.elastic.co/t/how-can-specify-the-log-message/94766>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 27, 2017, 9:54am UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766 "2017-07-27T09:54:27Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![truongdqse03303](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/truongdqse03303/32/22605_2.png) [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Post date:** [July 27, 2017, 9:54am UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/1 "2017-07-27T09:54:27Z")

</div>

I'm newbie at ELK stack. I have installed and the ELK working find but now i want to visualize the content of my log after filebeat send it to logstash. I had read some topic still cant find how to do it so i post the issue here. Anyone know how to do it pls tell me. Thanks

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [July 27, 2017, 10:08am UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/2 "2017-07-27T10:08:36Z")

</div>

Welcome to this awesome community!

I think you want to have a look to Kibana: [https://www.elastic.co/guide/en/kibana/5.5/introduction.html](https://www.elastic.co/guide/en/kibana/5.5/introduction.html)

Using Kibana you can visualize and analyze your logs and rest of data, give it a try 😉

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [July 27, 2017, 10:10am UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/3 "2017-07-27T10:10:00Z")

</div>

Also I would recommend you to have a look to: [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html),

It will show you how to do your first steps with filebeat & Kibana

---

<div class="post-metadata">

**Author:** ![truongdqse03303](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/truongdqse03303/32/22605_2.png) [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Post date:** [July 27, 2017, 10:22am UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/4 "2017-07-27T10:22:23Z")

</div>

Hi @exekias  
Thank for fast reply  
I already did the first steps and the result look like this

 ![](https://us1.discourse-cdn.com/elastic/original/3X/6/0/6076f145316276c666c75035e001f12d3e0a6958.PNG)  
But now how can i visualize the field message in the result or create another template for filebeat to take the content in log files. That's what i want and i still stuck in this step, maybe because i cannot know right all the idea in the doc.  
It would be great if you tell me where can i focus on. Ty

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [July 27, 2017, 10:52am UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/5 "2017-07-27T10:52:56Z")

</div>

If I understand correctly you want to see only the message field, and not the whole document, you should have the list of fields on the left menu, just choose message to add it as a column, this way you will see the stream of messages

---

<div class="post-metadata">

**Author:** ![truongdqse03303](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/truongdqse03303/32/22605_2.png) [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Post date:** [July 27, 2017, 1:35pm UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/6 "2017-07-27T13:35:53Z")

</div>

Hi @exekias  
Sr for late reply and for not describe exactly what i want to do  
The problem is i want to change the content of message into index, so i can choose what i want to visualize, with the picture i just post it's the example of content, maybe it'll be more field with the real log. That's exactly what i want to do.  
Thank you btw 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 24, 2017, 1:36pm UTC](https://discuss.elastic.co/t/how-can-specify-the-log-message/94766/7 "2017-08-24T13:36:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
