# Log json in an array

**URL:** https://discuss.elastic.co/t/log-json-in-an-array/295561
**Category:** Kibana
**Created:** [January 27, 2022, 9:21am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561 "2022-01-27T09:21:42Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![adouren](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adouren/32/96766_2.png) [@adouren](https://discuss.elastic.co/u/adouren)
#### Post date: [January 27, 2022, 9:21am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/1 "2022-01-27T09:21:42Z")

</div>

Hello,

I am being asked to have the data as a table in kibana. I don't see what to do?

My input json logs:

{"indexName":"aaa-bbb","ip":"XXX.XXX.XXX.XXX","ipServer":"XXX.XXX.XXX.XXX","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:96.0) Gecko/20100101 Firefox/96.0","email":"alain.delon@gmail.com","department":"AA/BB/CCC/DDD","httpVerb":"GET","url":"/aaa/bbb/01242227","completeUrl":"/aaa/bbb/01242227","httpStatus":200,"duration":20,"jetonHash":"07a4f17ec87baf92c09bafc8c53f87da","requestSize":-1,"size":0,"@timestamp":"2022-01-05T15:56:04.149652+01:00"}

Users want to have logs in KIBANA discover in the following form :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/e/5e59a8f6cda7246bfe4f05610124f7505ebd5885.png)

How to do ? Is that possible ?

Best regard

---

<div class="post-metadata">

### Author: ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)
#### Post date: [January 27, 2022, 9:51am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/2 "2022-01-27T09:51:22Z")

</div>

To see the log in kibana, you have to index the log to some Elasticsearch cluster where kibana can communicate with.

that json looks fit Elasticsearch index, you can index the log via [Index API](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-index_.html) or [Bulk API](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html) as long as a valid Elasticsearch cluster is running. You can also use some client such as [Python Elasticsearch Client](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html) or some [Beats](https://www.elastic.co/beats/). What is the problem now?

---

<div class="post-metadata">

### Author: ![adouren](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adouren/32/96766_2.png) [@adouren](https://discuss.elastic.co/u/adouren)
#### Post date: [January 27, 2022, 10:05am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/3 "2022-01-27T10:05:14Z")

</div>

I can see the json logs in KIBANA's discover.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/6/468a546b270e26e9410dcdb273d7d405d5a2dacb.png)

Users ask me that the logs are displayed in table form in kibana!

I don't know if this is possible? If yes, how ?

---

<div class="post-metadata">

### Author: ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)
#### Post date: [January 27, 2022, 10:18am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/4 "2022-01-27T10:18:47Z")

</div>

oh, sorry for misunderstanding . The problem is how to visualize the existing data.

In Discover, there is very little room for customization. One thing you can do is try new Document Explorer and choose between Document Explorer and classic view.

You can try it from StackManagement \> Kibana - Advanced Settings \> Discover \> Document Explorer or classic view.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/c/5c317282ce21607aa7fe0a7de72a30842cbd8ee9.png)

---

<div class="post-metadata">

### Author: ![adouren](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adouren/32/96766_2.png) [@adouren](https://discuss.elastic.co/u/adouren)
#### Post date: [January 27, 2022, 10:31am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/5 "2022-01-27T10:31:34Z")

</div>

sorry, I can't find !

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/1/6188d08a8eeb27b6e0db6c0089a2219c2f84fc0d.png)

---

<div class="post-metadata">

### Author: ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)
#### Post date: [January 27, 2022, 10:34am UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/6 "2022-01-27T10:34:40Z")

</div>

The option seems for newer version of kibana.

---

<div class="post-metadata">

### Author: ![adouren](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adouren/32/96766_2.png) [@adouren](https://discuss.elastic.co/u/adouren)
#### Post date: [January 27, 2022, 3:20pm UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/7 "2022-01-27T15:20:47Z")

</div>

you're right.

I installed the version in 7.16.3

thank you very much

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 24, 2022, 3:21pm UTC](https://discuss.elastic.co/t/log-json-in-an-array/295561/8 "2022-02-24T15:21:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
