# KIBANA CUSTOM FIELDS

**URL:** <https://discuss.elastic.co/t/kibana-custom-fields/250419>\
**Category:** Kibana\
**Created:** [September 29, 2020, 9:54pm UTC](https://discuss.elastic.co/t/kibana-custom-fields/250419 "2020-09-29T21:54:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![HenriqueNogueira](https://avatars.discourse-cdn.com/v4/letter/h/dbc845/32.png) [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\
**Post date:** [September 29, 2020, 9:54pm UTC](https://discuss.elastic.co/t/kibana-custom-fields/250419/1 "2020-09-29T21:54:20Z")

</div>

Hi Guys, can someone help me create custom fields in kibana? I have my json arriving at MESSAGE and I would like to create custom fields for each "attribute" in my log. I will paste an example:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/b/7bb05cf167932a92f63d5d0c1d6a3c2cde606fb4.png)

this is my MESSAGE, I would like to create a field outside the message with the name process for example:

process: order\_ creation

boletoOnLine: false

This will help me create dashboards, I need the fields to be available, for viewing in Discover

Thank you, I am waiting for someone's help!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 29, 2020, 10:27pm UTC](https://discuss.elastic.co/t/kibana-custom-fields/250419/2 "2020-09-29T22:27:51Z")

</div>

We aren't all guys 🙂

How are you sending this data to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![HenriqueNogueira](https://avatars.discourse-cdn.com/v4/letter/h/dbc845/32.png) [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\
**Post date:** [September 29, 2020, 11:00pm UTC](https://discuss.elastic.co/t/kibana-custom-fields/250419/3 "2020-09-29T23:00:55Z")

</div>

hahahaha my bad 😅

I'm sending this data to Elasticsearch with Logastash.  
Take a look at my conf:

input {  
file  
{  
codec =\> multiline  
{  
pattern =\> '^{'  
negate =\> true  
what =\> previous  
auto\_flush\_interval =\> 1  
}  
path =\> ["/opt/s3files/logs/_.json"]  
start\_position =\> "beginning"  
sincedb\_path =\> "/dev/null"  
exclude =\> "_.gz"  
}  
}  
filter  
{  
mutate  
{  
#replace =\> ["message", "%{message}}"]  
#gsub =\> ['message','\n','']  
}  
if [message] =~ /^{.\*}$/  
{  
json { source =\> message }  
}

}

output {

```
elasticsearch {
  hosts => ["https://10.171.1.30:9200"]
  index => "magento-logs"
  cacert => "/etc/logstash/ca.crt"
  user => 'elastic'
  password => 'xxxxxxxxxxxxxxxxxx'

```

}  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 27, 2020, 11:01pm UTC](https://discuss.elastic.co/t/kibana-custom-fields/250419/4 "2020-10-27T23:01:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.