# How to extract data from string filed "message"

**URL:** <https://discuss.elastic.co/t/how-to-extract-data-from-string-filed-message/84451>\
**Category:** Kibana\
**Created:** [May 3, 2017, 7:05pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-string-filed-message/84451 "2017-05-03T19:05:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![cnallapati](https://avatars.discourse-cdn.com/v4/letter/c/58956e/32.png) [@cnallapati](https://discuss.elastic.co/u/cnallapati)\
**Post date:** [May 3, 2017, 7:05pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-string-filed-message/84451/1 "2017-05-03T19:05:20Z")

</div>

Data is populating in message files as below and I would like to extract logger\_name and HOSTNAME and use them as fields. How can I achieve Kibana. Please advise,

Thanks,  
Chaitanya.

{"@timestamp":"2017-05-03T18:54:45.598+00:00","@version":1,"message":"6830ea85-ec1e-4415-979f-ccdc939cc00 CrudApi.linkAddress success AddressUsageResponse(List(AddressLinks(f9850235-3031-11e7-a0e9-0e81abc67630,9422531-3031-11e7-a0e9-0e81abc67630)))","logger\_name":"services.futurestate.impl.FsrClaimService","thread\_name":"play-akka.actor.default-dispatcher-5","level":"DEBUG","level\_value":10000,"HOSTNAME":"1badc6a6d357","application.home":"/op/docker"}

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [May 3, 2017, 7:11pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-string-filed-message/84451/2 "2017-05-03T19:11:22Z")

</div>

This is typically done at ingest time, e.g. through ingest node or Logstash.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 31, 2017, 7:15pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-string-filed-message/84451/3 "2017-05-31T19:15:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.