# Visualization and Dynamically Parse Field Values

**URL:** <https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178>\
**Category:** Kibana\
**Created:** [September 12, 2015, 3:41pm UTC](https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178 "2015-09-12T15:41:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![coderlol](https://avatars.discourse-cdn.com/v4/letter/c/da6949/32.png) [@coderlol](https://discuss.elastic.co/u/coderlol)\
**Post date:** [September 12, 2015, 3:41pm UTC](https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178/1 "2015-09-12T15:41:52Z")

</div>

I have log events with the following fields:

src.class: MyClass  
src.method: myMethod  
message: start=12345678,end=12345679,duration=1

src.class: MyClass  
src.method: myMethod  
message: start=12345678,end=12345678,duration=0

etc.

How would I go about in Kibana to plot over time the duration of MyClass.myMethod? I'd like the visualization to show "MyClass.myMethod". The idea is the visualization will display a duration graph of classes and methods.

I'd prefer not having to parse the log entry into the right format before indexing. Idea is to use Kibana to do the processing. Possible? What functions would I need to use?

Thanks...

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [September 12, 2015, 10:56pm UTC](https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178/2 "2015-09-12T22:56:34Z")

</div>

No, you have to split out the values into separate fields with the correct data types you want to plot over prior to visualizing them. Kibana currently does not provide a way to extract values from raw messages.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:13pm UTC](https://discuss.elastic.co/t/visualization-and-dynamically-parse-field-values/29178/3 "2017-07-06T14:13:11Z")

</div>