# Recommended way to add a field

**URL:** <https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962>\
**Category:** Kibana\
**Created:** [November 4, 2016, 1:31am UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962 "2016-11-04T01:31:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![YuWatanabe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuwatanabe/32/13259_2.png) [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Post date:** [November 4, 2016, 1:31am UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962/1 "2016-11-04T01:31:37Z")

</div>

What is the recommended way to add a field after the log is collected into elasticsearch?

Situation is that lets say at first you are unsure which fields you want to use in the visualize but just want to collect logs. But after a while you find out the field you want to parse.

Of course amending logstash configuration is the best way but I am seeking any other efficient way to do it.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 4, 2016, 2:11am UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962/2 "2016-11-04T02:11:01Z")

</div>

That is the best way.

You can add one via Console if you really want, but it's not efficient.

---

<div class="post-metadata">

**Author:** ![YuWatanabe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuwatanabe/32/13259_2.png) [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Post date:** [November 4, 2016, 2:43am UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962/3 "2016-11-04T02:43:49Z")

</div>

Is scripted field be the way from Console?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 4, 2016, 4:09am UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962/4 "2016-11-04T04:09:34Z")

</div>

[https://www.elastic.co/guide/en/kibana/current/console-kibana.html](https://www.elastic.co/guide/en/kibana/current/console-kibana.html)

Basically doing an update request on a document.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:34pm UTC](https://discuss.elastic.co/t/recommended-way-to-add-a-field/64962/5 "2017-07-06T13:34:37Z")

</div>

Closed on July 6, 2017, 1:34pm UTC