# Way I can set the default fields

**URL:** <https://discuss.elastic.co/t/way-i-can-set-the-default-fields/26554>\
**Category:** Kibana\
**Created:** [July 30, 2015, 9:31am UTC](https://discuss.elastic.co/t/way-i-can-set-the-default-fields/26554 "2015-07-30T09:31:54Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![netoben](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/netoben/32/3930_2.png) [@netoben](https://discuss.elastic.co/u/netoben)\
**Post date:** [July 30, 2015, 7:28pm UTC](https://discuss.elastic.co/t/way-i-can-set-the-default-fields/26554/4 "2015-07-30T19:28:05Z")

</div>

I think I have similar issue, currently Kibana 4.1 defaults to show the \_all field, but that can change to be the "message" field, or at least that was possible before.

Here's the full explanation of it...

> [@Kibana 4.1 change the Primary\_Field from \_all to something else](https://discuss.elastic.co/t/kibana-4-1-change-the-primary-field-from--all-to-something-else/26587):
>
> Hi Guys I want to disable the "\_all" field because it consumes too much space and I really don't have a use for it. However Kibana 4.1 seems to default to that field for Visualization queries. I found an old topic that said modifying the KibanaConfig.rb file and set up the Primary\_field = "\_all" to Primary\_field = "message" would do the trick. However, I cannot find the KibanaConfig.rb anywhere in my installation. Was it removed in this version? If so ... how can I change that be…

---

_[View the full topic](https://discuss.elastic.co/t/way-i-can-set-the-default-fields/26554)._
