# Kibana visualization with correct text

**URL:** <https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845>\
**Category:** Kibana\
**Created:** [July 19, 2017, 10:05pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845 "2017-07-19T22:05:52Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![P\_Kumar](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)\
**Post date:** [July 19, 2017, 10:05pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845/1 "2017-07-19T22:05:52Z")

</div>

Hi ,  
I am collection SystemOut logs using Logstash and creating individual index and trying to see the systemOut message in Kibana but it is showing in json format and also showing some extra mesg. I want to see only "message" in kibana same like original SystemOut.log file .Below is my out put in kibana.

{  
"\_index": "10.101.11.40\_dmgr1\_2017.07.19",  
"\_type": "websphere",  
"\_id": "AV1cp2O4D7Q6twqsFtpj",  
"\_version": 1,  
"\_score": null,  
"\_source": {  
"path": "/was/AppServer/profiles/Dmgr01/logs/dmgr/SystemOut.log",  
"@timestamp": "2017-07-19T21:01:00.229Z",  
"@version": "1",  
"host": "0.0.0.0",  
"message": "\tat com.ibm.ws.security.core.distSecurityComponentImpl.initializeSecurityConfig(distSecurityComponentImpl.java:1263)",  
"type": "websphere"  
},  
"fields": {  
"@timestamp": [  
1500498060229  
]  
},  
"sort": [  
1500498060229  
]  
}

I am expecting to see only :  
"message": "\tat com.ibm.ws.security.core.distSecurityComponentImpl.initializeSecurityConfig(distSecurityComponentImpl.java:1263)",

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [July 19, 2017, 11:34pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845/2 "2017-07-19T23:34:43Z")

</div>

That JSON looks normal for a document in Elasticsearch as seen from a search result. When you search for data, you are going to get back the JSON representation of the data.

If you want to just see the message field, then look at the index pattern for this data in Discover, and click the "add" link next to the message field. Then you'd get something like this:

![](https://us1.discourse-cdn.com/elastic/original/3X/6/5/65911d94a1de070bce5757759d300f396f8b5507.png)

It looks to me like you're trying to view the data by searching in Dev Tools \> Console. (If you're not, let me know where you're seeing this JSON). You can write a search that filters for the message field by using a search like:

```auto
GET /logstash-2017.07.07/_search?filter_path=hits.hits._source.message
{
  "sort": [
    {
      "@timestamp": {
        "order": "desc"
      }
    }
  ],
  "query": {
    "match_all": {}
  }
}

```

---

<div class="post-metadata">

**Author:** ![P\_Kumar](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)\
**Post date:** [July 19, 2017, 11:52pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845/3 "2017-07-19T23:52:16Z")

</div>

thanks for responding . i added the fileter but still showing other value including messgae .

![](https://us1.discourse-cdn.com/elastic/original/3X/4/c/4cf4b5824cc4e5d12a33c703b61ea54350ef9546.png)

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [July 20, 2017, 12:03am UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845/4 "2017-07-20T00:03:06Z")

</div>

You added `_source` as a column. Try removing that one, and adding `message`

![](https://us1.discourse-cdn.com/elastic/original/3X/6/4/64680da3036a61a0a36b369dc55b7cc7ca78c842.png)

---

<div class="post-metadata">

**Author:** ![P\_Kumar](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)\
**Post date:** [July 20, 2017, 12:24am UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845/5 "2017-07-20T00:24:32Z")

</div>

Thanks for your support,it is working now as i expected .

Thanks  
Kumar

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 17, 2017, 12:24am UTC](https://discuss.elastic.co/t/kibana-visualization-with-correct-text/93845/6 "2017-08-17T00:24:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.