# What happens with my message field if I use decode\_json\_fields processor?

**URL:** https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061
**Category:** Kibana
**Created:** [July 19, 2021, 12:48pm UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061 "2021-07-19T12:48:01Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![testisnullus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/testisnullus/32/91816_2.png) [@testisnullus](https://discuss.elastic.co/u/testisnullus)
#### Post date: [July 19, 2021, 12:48pm UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061/1 "2021-07-19T12:48:01Z")

</div>

Greatings all!  
I have the next message field:

```auto
message: {"app":"rbac","args":[],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-20T07:59:3

```

If I apply the next processor configuration in my filebeat.yaml what happens with my message field?  
Processor configuration:

```auto
- decode_json_fields:
          fields: ["message"]
          process_array: false
          target: ""
          overwrite_keys: true
          aadd_error_key: false

```

Kibana version: 7.7.1  
Filebeat version: 7.6.2

Thank you for your help!  
Danil

---

<div class="post-metadata">

### Author: ![Marta\_Bondyra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marta_bondyra/32/102122_2.png) [@Marta\_Bondyra](https://discuss.elastic.co/u/Marta_Bondyra)
#### Post date: [July 20, 2021, 11:03am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061/2 "2021-07-20T11:03:41Z")

</div>