# The logs on kibana are truncated in the message field

**URL:** https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856
**Category:** Kibana
**Created:** [February 21, 2025, 2:13pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856 "2025-02-21T14:13:24Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![alessiovitolo25](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@alessiovitolo25](https://discuss.elastic.co/u/alessiovitolo25)
#### Post date: [February 21, 2025, 2:13pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/1 "2025-02-21T14:13:24Z")

</div>

The logs on kibana are truncated in the message field ( maximum 1000 characters). If I open the json the message is complete (about 150,000 characters)  
It seems to be a kibana limitation problem because even from devtools with the GET command nameindex/\_searchsearch I can see the full message.  
The version of Elasticsearch is v 7.17.22

---

<div class="post-metadata">

### Author: ![Marco\_Liberati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marco_liberati/32/82953_2.png) [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)
#### Post date: [February 26, 2025, 9:05am UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/2 "2025-02-26T09:05:55Z")

</div>

Hi @alessiovitolo25

how the message field mapped? Is it text or keyword, or rather both?

---

<div class="post-metadata">

### Author: ![alessiovitolo25](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@alessiovitolo25](https://discuss.elastic.co/u/alessiovitolo25)
#### Post date: [February 26, 2025, 9:55pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/3 "2025-02-26T21:55:46Z")

</div>

Hi Marco,  
The type is text. I found that in index\_patterns on kibana the format is Trucated String and the field length is 1000!  
I did some tests and saw that the problem is due to this.  
The fact remains that when I try to disable “set format” after a while I see that the configuration reverts to truncate string.  
Is this due to some setting or only users can change it?

---

<div class="post-metadata">

### Author: ![Marco\_Liberati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marco_liberati/32/82953_2.png) [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)
#### Post date: [February 27, 2025, 3:26pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/4 "2025-02-27T15:26:22Z")

</div>

Just to confirm: you mean that dataView configuration changes without any user input when disabling the `set format` on the field?

---

<div class="post-metadata">

### Author: ![alessiovitolo25](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@alessiovitolo25](https://discuss.elastic.co/u/alessiovitolo25)
#### Post date: [February 28, 2025, 11:00am UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/5 "2025-02-28T11:00:45Z")

</div>

Yes exactly. That was the question.

---

<div class="post-metadata">

### Author: ![alessiovitolo25](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@alessiovitolo25](https://discuss.elastic.co/u/alessiovitolo25)
#### Post date: [March 4, 2025, 10:41pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/6 "2025-03-04T22:41:24Z")

</div>

Can you give me some advice? Thank you

---

<div class="post-metadata">

### Author: ![Marco\_Liberati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marco_liberati/32/82953_2.png) [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)
#### Post date: [March 7, 2025, 1:27pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/7 "2025-03-07T13:27:42Z")

</div>

It sounds strange to be honest.  
I had a look at the issues about this topic but could not find any.  
Are you able to reproduce it in a stable way? Can you pinpoint an action that triggers this behaviour?

---

<div class="post-metadata">

### Author: ![alessiovitolo25](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@alessiovitolo25](https://discuss.elastic.co/u/alessiovitolo25)
#### Post date: [March 11, 2025, 11:13pm UTC](https://discuss.elastic.co/t/the-logs-on-kibana-are-truncated-in-the-message-field/374856/8 "2025-03-11T23:13:23Z")

</div>

Currently I cannot reproduce the problem. Currently after several days of observation the value has remained the same.  
At this point I would say to close the report.  
Thank you very much for your support
