新手求助！elk怎样搜索字段里面的json的值？

"_source": {"destIP": "1.1.1.1", "srcIP": "2.2.2.2", "@timestamp": "2017-11-16T04:54:25.488Z",

                      "destPort": "4020",

                      "geoip": {"timezone": "Asia/Shanghai", "ip": "

2.2.2.2", "latitude": 30.5801,

                                "coordinates": ["114.2734", "30.5801"], "continent_code": "AS", "city_name": "Wuhan",

                                "country_name": "China", "country_code2": "CN", "country_code3": "CN",

                                "region_name": "Hubei", "location": {"lon": 114.2734, "lat": 30.5801},

                                "region_code": "42", "longitude": 114.2734}, "srcPort": "26477",

                      "packetTimestamp": "2017-11-16 12:54:23.682850"}