# Kibana RAW message to text table
**URL:** https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708
**Category:** Kibana
**Created:** [February 4, 2020, 12:33am UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708 "2020-02-04T00:33:43Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@PublicName](https://discuss.elastic.co/u/PublicName)
#### Post date: [February 4, 2020, 12:33am UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708/1 "2020-02-04T00:33:43Z")
I've been at this for a couple days with very limited success.
Any tips on how to display 2 fields from a windows event log into a table. For example lets say error 1000 has to field param1 and param2 both are already indexed. I don't care about the other 90% of the message just these two lines. Lets say param1 is a name and param2 is a set of IP's. I would like for them to display as a table "think excel layout" as its easier for us to take action on vs looking at the log directly.
---
### Author:  [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)
#### Post date: [February 4, 2020, 4:29pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708/2 "2020-02-04T16:29:16Z")
Hi @PublicName. I could use a little more information.
Do you want to display only single documents with no aggregation? If so, maybe you can [add those fields](https://www.elastic.co/guide/en/kibana/current/discover.html#_add_and_remove_fields) to a [saved search](https://www.elastic.co/guide/en/kibana/current/discover.html#_save_and_share_your_search) in Discover. Saved Searches can also be added to a Dashboard as a paginated table.
---
### Author:  [@PublicName](https://discuss.elastic.co/u/PublicName)
#### Post date: [February 4, 2020, 7:39pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708/3 "2020-02-04T19:39:37Z")
Correct, looking for 0 aggregation on the table. Just need two fields pulled from a single document to be displayed based on time. Column A = param 1 and Column B = param 2 both from a single document.
Saved search works and the two fields I want are displayed as expected. Just need that converted over to a visualization and for the life of me the brain and fingers don't want to make it so...
In visualize the data table option only is presenting options for sums, totals, min, max for example. Total is fine and all but it's not helpful in this case as it leaves me with no usable data in this instance.
---
### Author:  [@PublicName](https://discuss.elastic.co/u/PublicName)
#### Post date: [February 4, 2020, 9:33pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708/4 "2020-02-04T21:33:39Z")
Never mind.... Helps if you click add on the dashboard.
> [@nickpeihl](#):
>
> Saved Searches can also be added to a Dashboard as a paginated table.
That did it thank you.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 3, 2020, 9:33pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708/5 "2020-03-03T21:33:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.