# Mask presentation in Kibana **URL:** \ **Category:** Kibana\ **Created:** [July 20, 2017, 11:13pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031 "2017-07-20T23:13:55Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Post date:** [July 20, 2017, 11:13pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/1 "2017-07-20T23:13:55Z")
Hi, I have a mac number which I present in Kibana after parsing in Logstash, and the value looks like that: `20%3A10%3A7a%3A53%3A0e%3A63` I would like to replace the " **%**" by " **:**" meaning the presentation in kibana to looks like: `20:3A10:3A7a:3A53:3A0e:3A63` Can it be done? Thanks Sharon. ---
**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\ **Post date:** [July 21, 2017, 5:42am UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/2 "2017-07-21T05:42:46Z")
Hi Sharon, it looks like that MAC address has been URL-encoded, in which case the value I think you really want is `20:10:7a:53:0e:63`. Is this right? If so, you probably want to try using the [Logstash Urldecode filter plugin](https://www.elastic.co/guide/en/logstash/current/plugins-filters-urldecode.html). Thanks, CJ ---
**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Post date:** [July 22, 2017, 1:15am UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/3 "2017-07-22T01:15:44Z")
Hi, Reference wasn't clear to me. What should I actually do? And where? Thanks Sharon. ---
**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\ **Post date:** [July 23, 2017, 3:08pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/4 "2017-07-23T15:08:03Z")
Hi Sharon, first let me just confirm that I understand what you're trying to do. You mentioned that your value is `20%3A10%3A7a%3A53%3A0e%3A63` and that you want to change it to `20:3A10:3A7a:3A53:3A0e:3A63`. You referred to this value as a "mac number" (which I interpret as "MAC address"), and this original value also looks like it has been [URL encoded](http://www.url-encode-decode.com/). Because of this, I think you may be mistaken and I wonder if your intention is actually to convert the original value into `20:10:7a:53:0e:63`, which is a valid MAC address represented by the original value, after it's been URL-decoded (you can verify this at the URL I just linked to). Does this make sense? Am I correct in my interpretation of what you're trying to do? If so, then I suggest incorporating the Urldecode filter plugin into your [Logstash pipeline](https://www.elastic.co/guide/en/logstash/current/pipeline.html), since you mentioned you're using Logstash to parse your data. The filter plugin can be used to URL decode your original value into the correct MAC address value. Does this make sense? Are you familiar with Logstash [filter plugins](https://www.elastic.co/guide/en/logstash/current/filter-plugins.html) and how to add them to your pipeline? Thanks, CJ ---
**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Post date:** [July 23, 2017, 9:45pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/5 "2017-07-23T21:45:09Z")
Hi Cj, Yes, you are exactly correct. I am not familiar with the filter plugins and how to add them. Will try to learn from the docs. If you can help me with short example it will be wonderful and also save time. Thanks Sharon. ---
**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Post date:** [July 23, 2017, 10:48pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/6 "2017-07-23T22:48:27Z")
solved. Thanks!!! ---
**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\ **Post date:** [July 23, 2017, 11:38pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/7 "2017-07-23T23:38:47Z")
Fantastic! I'm glad you got it figured out! Best, CJ ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 20, 2017, 11:38pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031/8 "2017-08-20T23:38:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.