# Showing \`error.log\` field in Observability Logs? (Currently it just shows \`message\` field, so it is very inconvenient to look at errors!)

**URL:** <https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319>\
**Category:** Logs\
**Created:** [February 5, 2021, 1:25am UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319 "2021-02-05T01:25:25Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![fzyzcjy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fzyzcjy/32/78628_2.png) [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Post date:** [February 5, 2021, 1:25am UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319/1 "2021-02-05T01:25:25Z")

</div>

Hi thanks for elastic stack! I wonder how can I show `error.log` field in Observability Logs? Currently it just shows `message` field, so it is very inconvenient to look at errors! When doing `tail -f mylogfile`, of course we can see the errors in addition to normal messages.

Thanks!

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [February 9, 2021, 12:39pm UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319/2 "2021-02-09T12:39:10Z")

</div>

I've moved this to the Observability forum.

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [February 10, 2021, 11:20am UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319/3 "2021-02-10T11:20:46Z")

</div>

Hi @fzyzcjy,

you can add additional columns to the Logs UI in the settings. But I wonder: If you're seeing the error message in the log file, which step during the ingestion puts this into `error.log` instead of `message`? Are you using a filebeat module for shipping the logs?

---

<div class="post-metadata">

**Author:** ![fzyzcjy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fzyzcjy/32/78628_2.png) [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Post date:** [February 10, 2021, 12:11pm UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319/4 "2021-02-10T12:11:50Z")

</div>

Yes I can add additional columns. But that will make UI ugly... I just want the kind of "tail -f" experience.

I use ECS, and error stacktrace should be put into `error.*` fields instead of `message`.

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [February 10, 2021, 12:14pm UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319/5 "2021-02-10T12:14:41Z")

</div>

You're correct. A related enhancement is being tracked in [[Logs UI] Support error.stack\_trace · Issue #46211 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/46211). I'll bring it up again when planning the next versions. Feel free to add your voice to the linked issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 10, 2021, 12:15pm UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319/6 "2021-03-10T12:15:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
