for my $hit ( @{ $VAR1->{hits}{hits} } ) { print "hit: '$hit->{_id}'\n"; for my $key ( keys %{ $hit->{_source} } ) { my $val = $hit->{_source}{$key}; print "key: '$key', val: '$val'\n"; } } #### hit: 'AV6SrwuTv7sBjjRqMiW1' key: 'request', val: '/index.php' key: 'clientip', val: '192.168.1.1' hit: 'AV6UL-DOv7sBjjRqMidb' key: 'request', val: '/' key: 'clientip', val: '192.168.1.1'