# Message display format in Kibana

**URL:** <https://discuss.elastic.co/t/message-display-format-in-kibana/90050>\
**Category:** Kibana\
**Created:** [June 20, 2017, 7:05am UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050 "2017-06-20T07:05:42Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![kottapar](https://avatars.discourse-cdn.com/v4/letter/k/a87d85/32.png) [@kottapar](https://discuss.elastic.co/u/kottapar)\
**Post date:** [June 20, 2017, 7:05am UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050/1 "2017-06-20T07:05:42Z")

</div>

Can we control the order in which the parameters of the message are displayed in Kibana?

For example can we specify that we want the message to be displayed in the format \<error\_type\> \<error\_message\>.  
However if these custom fields are not found, it can default to displaying in the default format.

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [June 20, 2017, 12:59pm UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050/2 "2017-06-20T12:59:23Z")

</div>

Hi,

Which messages are you talking about? Can you please paste a screenshot of an example here?

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![kottapar](https://avatars.discourse-cdn.com/v4/letter/k/a87d85/32.png) [@kottapar](https://discuss.elastic.co/u/kottapar)\
**Post date:** [June 21, 2017, 8:07am UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050/3 "2017-06-21T08:07:50Z")

</div>

I'm referrring to the messages that are displayed in the "discover" tab in Kibana. For example I'm indexing logs that have the parameters timestamp, err\_type, err\_id, err\_log.

Kibana displays it in a certain defualt order. I'm just interested in knowing we can alter the pattern of the message like timestamp, err\_type, err\_id, err\_log.

I'm sorry I can't post a screenshot as it's in the workstation at work.

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [June 21, 2017, 12:58pm UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050/4 "2017-06-21T12:58:27Z")

</div>

Hi,

You can definitely sort the fields. In this example I have added bytes as a column and marked where you can sort them. Is this what you were looking for?

Thanks,  
Bhavya

 ![](https://us1.discourse-cdn.com/elastic/original/3X/b/2/b24726fda0e5006d4341ff45702ab3e17647ac01.png)

---

<div class="post-metadata">

**Author:** ![kottapar](https://avatars.discourse-cdn.com/v4/letter/k/a87d85/32.png) [@kottapar](https://discuss.elastic.co/u/kottapar)\
**Post date:** [June 22, 2017, 5:45am UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050/5 "2017-06-22T05:45:18Z")

</div>

Yep, I think this will help. Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 20, 2017, 5:45am UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050/6 "2017-07-20T05:45:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.