# How to deal with \*big\* payload fields in events?

**URL:** <https://discuss.elastic.co/t/how-to-deal-with-big-payload-fields-in-events/207727>\
**Category:** Kibana\
**Created:** [November 13, 2019, 3:03pm UTC](https://discuss.elastic.co/t/how-to-deal-with-big-payload-fields-in-events/207727 "2019-11-13T15:03:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![asp](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@asp](https://discuss.elastic.co/u/asp)\
**Post date:** [November 13, 2019, 3:03pm UTC](https://discuss.elastic.co/t/how-to-deal-with-big-payload-fields-in-events/207727/1 "2019-11-13T15:03:48Z")

</div>

Hi,

I am indexing logs which contains a field payload. The payload is some soap / xml statement which may become very big. I notice that if I want to view this event in discover panel, it the browser is hanging, the page is not loading. I tried to get the event via curl and the result was about 25 MB in size.

I want to be able to use kibana to view the event (other meta-information than payload). No need to view the payload in kibana, but then I need to export it via kibana (e.g. via csv export) to open it in an external editor in case of debugging.

What is best practice to deal with this?

Thanks, Andreas

---

<div class="post-metadata">

**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\
**Post date:** [November 13, 2019, 3:35pm UTC](https://discuss.elastic.co/t/how-to-deal-with-big-payload-fields-in-events/207727/2 "2019-11-13T15:35:01Z")

</div>

Hi @asp,

I think you can configure `Default columns` advanced setting to only display columns you need, by default it's `_source` (every possible field you documents have):

 ![Screenshot%20from%202019-11-13%2016-29-10](https://us1.discourse-cdn.com/elastic/original/3X/e/5/e57f3c7e6319e3505e635bd3bf3a304ec35ae870.png)

**Notes:**

- this setting is space specific, so everyone in this space will be affected by this setting
- you may need to clear localstorage once you change this setting (or just open Kibana in private tab)

Best,  
Oleg

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 11, 2019, 3:35pm UTC](https://discuss.elastic.co/t/how-to-deal-with-big-payload-fields-in-events/207727/3 "2019-12-11T15:35:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.