How to extract a message JSON value using JSON Input under Kibana Visualization

[lukeelmers]

Just wanted to know if Json Input can be similar to scripted fields so that the fields are only created/generated at visualization time.

This is correct, you can use the JSON input to add a scripted field "on the fly" to your visualization. You can find an example of this in my comment here:

Kibana JSON Input Question

Hi there, All that really happens with JSON inputs is that the JSON gets included along with the rest of the aggregation generated by the editor and sent to Elasticsearch. The docs on aggregations explain the options for these in more detail, but we most commonly see folks using them to include inline scripts to run against the selected field, e.g. { "script": { "inline": "doc['name'].value ...whatever", "lang": "painless" } } The important thing to keep in mind is that these scri…