# Problem with large xml logs

**URL:** <https://discuss.elastic.co/t/problem-with-large-xml-logs/180882>\
**Category:** Kibana\
**Created:** [May 13, 2019, 8:37pm UTC](https://discuss.elastic.co/t/problem-with-large-xml-logs/180882 "2019-05-13T20:37:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Canaparro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/canaparro/32/46106_2.png) [@Canaparro](https://discuss.elastic.co/u/Canaparro)\
**Post date:** [May 13, 2019, 8:37pm UTC](https://discuss.elastic.co/t/problem-with-large-xml-logs/180882/1 "2019-05-13T20:37:14Z")

</div>

I am trying to work with an ELK stack to log messages that contain, in some cases, large XML requests and responses about 30Mb each. They will not be used to search, but they should be retrievable for a given entry to reproduce bugs when needed.

Problem is that Kibana freezes when searching for those logs. I feel like Kibana is a great tool for log visualization and I would like to stick to it. In the worst case cenario, I would have to develop something just to query Elasticsearch without the request/response fields, and a functionality to do a separate search for a given entry's request/response, loosing on many Kibana visualization tools.

Any sugestions on how to work around this issue?

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [May 14, 2019, 4:16pm UTC](https://discuss.elastic.co/t/problem-with-large-xml-logs/180882/2 "2019-05-14T16:16:51Z")

</div>

Is this only an issue in Discover?

By default, Discover it will display the `_source` field, which would include this XML data. Under `Management` \> `Advanced Settings` \> `Default columns` you can change that to be something other than `_source` which should resolve your issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 11, 2019, 4:30pm UTC](https://discuss.elastic.co/t/problem-with-large-xml-logs/180882/3 "2019-06-11T16:30:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.