KIBANA CUSTOM FIELDS

Elastic Stack Kibana
#1

Hi Guys, can someone help me create custom fields in kibana? I have my json arriving at MESSAGE and I would like to create custom fields for each "attribute" in my log. I will paste an example:

image
image788×412 21.5 KB

this is my MESSAGE, I would like to create a field outside the message with the name process for example:

process: order_ creation

boletoOnLine: false

This will help me create dashboards, I need the fields to be available, for viewing in Discover

Thank you, I am waiting for someone's help!

#2

We aren't all guys :slight_smile:

How are you sending this data to Elasticsearch?

#3

hahahaha my bad :sweat_smile:

I'm sending this data to Elasticsearch with Logastash.
Take a look at my conf:

input {
file
{
codec => multiline
{
pattern => '^{'
negate => true
what => previous
auto_flush_interval => 1
}
path => ["/opt/s3files/logs/.json"]
start_position => "beginning"
sincedb_path => "/dev/null"
exclude => ".gz"
}
}
filter
{
mutate
{
#replace => [ "message", "%{message}}" ]
#gsub => [ 'message','\n','']
}
if [message] =~ /^{.*}$/
{
json { source => message }
}

}

output {

elasticsearch {
  hosts => ["https://10.171.1.30:9200"]
  index => "magento-logs"
  cacert => "/etc/logstash/ca.crt"
  user => 'elastic'
  password => 'xxxxxxxxxxxxxxxxxx'

}
}