# Please help me to create a scripted field in Kibana?

**URL:** <https://discuss.elastic.co/t/please-help-me-to-create-a-scripted-field-in-kibana/42003>\
**Category:** Kibana\
**Created:** [February 17, 2016, 10:28am UTC](https://discuss.elastic.co/t/please-help-me-to-create-a-scripted-field-in-kibana/42003 "2016-02-17T10:28:32Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [February 17, 2016, 10:28am UTC](https://discuss.elastic.co/t/please-help-me-to-create-a-scripted-field-in-kibana/42003/1 "2016-02-17T10:28:32Z")

</div>

Hi Experts,

I want to create a scripted field in kiaban . Requirement is to show count of all the logs which does not have "catdt" field .

Let me explain it further , few of my logs does not have "catdt" field in it , so I need to count those logs.

So my plan is to create a scripted field , which I'll use with the count matrix .

Please help

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [February 17, 2016, 3:13pm UTC](https://discuss.elastic.co/t/please-help-me-to-create-a-scripted-field-in-kibana/42003/2 "2016-02-17T15:13:30Z")

</div>

Something like `{"constant_score" : { "filter" : {"bool" : {"must_not" : [{"exists":{"field":"catdt"}}]}}}}` but how to write this in scripted filed , that is the challenge for me ?

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [February 17, 2016, 5:26pm UTC](https://discuss.elastic.co/t/please-help-me-to-create-a-scripted-field-in-kibana/42003/3 "2016-02-17T17:26:35Z")

</div>

Hi,

I don't think scripted fields in Kibana can do things like aggregation. They can only manipulate the value in a field of a doc. Something like dividing bytes by 1024 to get k bytes.

But you can create a filter in Kibana to get logs that do not have "catdt".

Here's the test I did (on Kibana 4.4.1);

1. I exported 1 day's logstash data (I used elasticdump)
2. I changed that data to insert a new field like "newfield":9999
3. I imported that data back in using elasticdump (there's probably an easier way with curl get and put or post)
4. I went to Kibana Settings tab, noted by field count was 85, refreshed my logstash-\* index pattern, noted the field count went up to 86
5. On Discover tab, changed by time range to only include that 1 date that had the modified doc with "newfield". This range had 128 hits.
6. on left field list, I clicked on "newfield". This expands the field to show 2 magnifying glasses with + and - in them.
7. click the - magnifying glass. Now I have 127 hits (all the ones that don't have my new "newfield")
8. I can toggle that filter to + and now I get 1 hit.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:02pm UTC](https://discuss.elastic.co/t/please-help-me-to-create-a-scripted-field-in-kibana/42003/4 "2017-07-06T14:02:02Z")

</div>