# How to split the JSON field in kibana?

**URL:** <https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687>\
**Category:** Kibana\
**Created:** [April 20, 2021, 10:18am UTC](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687 "2021-04-20T10:18:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wajika](https://avatars.discourse-cdn.com/v4/letter/w/977dab/32.png) [@wajika](https://discuss.elastic.co/u/wajika)\
**Post date:** [April 20, 2021, 10:18am UTC](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687/1 "2021-04-20T10:18:13Z")

</div>

I recently upgraded to version 7.12, and I found that kibana recombined all fields into JSON arrays, but this would cause me trouble. I need to copy the original JSON format. I checked the configuration on the kibana page and found no way to cancel the relevant settings.

Is there any way to go back to kibana 7.4?

> ```
> {
> "_index": "mall_log-2021.04",
> "_type": "_doc",
> "_id": "CgO57ngB9aH-qYyQaaZD",
> "_version": 1,
> "_score": null,
> "fields": {
> "SourceType": [
> "MallAssistLog"
> ],
> "Token": [
> ""
> ],
> "LogLevel": [
> "info"
> ],
> "ApiName.keyword": [
> "getItemVend"
> ],
> "@version": [
> "1"
> ],
> "@timestamp": [
> "2021-04-20T10:00:31.708Z"
> ]
> },
> "sort": [
> 1618912831708
> ]
> }
> 
> ```

The data format I see on logstash is this way（This is what I need ）

> ```
> {
> "Token": "",
> "@version": "1",
> "SourceType": "MallAssistLog",
> "LogLevel": "info",
> "ApiName": "getItemVend",
> "@timestamp": "2021-04-20T10:10:38.143Z",
> "Data": {
> "responsedto": {
> "error": null,
> "success": true,
> "result": [{
> "itemId": "2100010032",
> "VendAccount": "",
> "name": "",
> "qty": 3325.0
> }],
> "targetUrl": null,
> "unAuthorizedRequest": false,
> "__abp": true
> },
> "requestdto": [{
> "itemId": "2100010032"
> }]
> }
> }
> 
> ```

---

<div class="post-metadata">

**Author:** ![wajika](https://avatars.discourse-cdn.com/v4/letter/w/977dab/32.png) [@wajika](https://discuss.elastic.co/u/wajika)\
**Post date:** [April 20, 2021, 10:55am UTC](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687/2 "2021-04-20T10:55:23Z")

</div>

I found the answer from the kibana documentation.

> **[Advanced Settings | Kibana Guide \[7.12\] | Elastic](https://www.elastic.co/guide/en/kibana/current/advanced-options.html)**

Just open “discover:searchFieldsFromSource to true” to solve.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2021, 10:56am UTC](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687/3 "2021-05-18T10:56:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.