# Kv parse

**URL:** https://discuss.elastic.co/t/kv-parse/146064
**Category:** Logstash
**Created:** [August 26, 2018, 11:29am UTC](https://discuss.elastic.co/t/kv-parse/146064 "2018-08-26T11:29:20Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Arun\_Murugappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arun_murugappan/32/101630_2.png) [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)
#### Post date: [August 26, 2018, 11:29am UTC](https://discuss.elastic.co/t/kv-parse/146064/1 "2018-08-26T11:29:20Z")

</div>

Sample

{"Time": "2018-05-10", "Server": {"Name": " Default , "id" : " 521"}}

When i parse using kv with : and , i am getting time field right but not the name. I am gerting server: Name: Default but i just require Name: Default. Or something of getting [server][name] = default

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [August 26, 2018, 12:15pm UTC](https://discuss.elastic.co/t/kv-parse/146064/2 "2018-08-26T12:15:33Z")

</div>

That is JSON, so why are you not using the [json filter](https://www.elastic.co/guide/en/logstash/current/plugins-filters-json.html) instead?

---

<div class="post-metadata">

### Author: ![Arun\_Murugappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arun_murugappan/32/101630_2.png) [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)
#### Post date: [August 28, 2018, 8:35am UTC](https://discuss.elastic.co/t/kv-parse/146064/3 "2018-08-28T08:35:09Z")

</div>

Yes i can. Let us say i have about 15fields. I only require five fields then i would have to apply remove\_field for the rest 10 fields. Is there a shorter way? Any other plugin just to display the required field

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [August 28, 2018, 8:36am UTC](https://discuss.elastic.co/t/kv-parse/146064/4 "2018-08-28T08:36:53Z")

</div>

What is wrong with using the json filter and then removing the additional fields, especially if this is easier and potentially also more efficient?

---

<div class="post-metadata">

### Author: ![Arun\_Murugappan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arun_murugappan/32/101630_2.png) [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)
#### Post date: [September 14, 2018, 8:44am UTC](https://discuss.elastic.co/t/kv-parse/146064/5 "2018-09-14T08:44:58Z")

</div>

sure. trying to find a better way.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 12, 2018, 8:45am UTC](https://discuss.elastic.co/t/kv-parse/146064/6 "2018-10-12T08:45:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.