# Apache integration - own log pattern

**URL:** https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357
**Category:** Beats
**Tags:** filebeat
**Created:** [August 31, 2022, 12:23pm UTC](https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357 "2022-08-31T12:23:52Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![elkuser1234](https://avatars.discourse-cdn.com/v4/letter/e/e19b73/32.png) [@elkuser1234](https://discuss.elastic.co/u/elkuser1234)
#### Post date: [August 31, 2022, 12:23pm UTC](https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357/1 "2022-08-31T12:23:52Z")

</div>

Hi  
I used elk stack 8.3

I would like to use the apache integration, but the log format is non-standard.

```auto
access_log_pattern=%{X-Forwarded-For}i %h %l %u %t \"%r\" %s %b \"%{Referer}i\" \"%{User-Agent}i\"

```

I get the message:  
`Provided Grok expressions do not match field value.`

Where can I indicate that elastic-agent / apache integration parses this log well

---

<div class="post-metadata">

### Author: ![elkuser1234](https://avatars.discourse-cdn.com/v4/letter/e/e19b73/32.png) [@elkuser1234](https://discuss.elastic.co/u/elkuser1234)
#### Post date: [September 1, 2022, 5:32am UTC](https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357/2 "2022-09-01T05:32:56Z")

</div>

I found a direction that may turn out to be a solution.  
I take 'custom log' integrations, copy pipeline "logs-apache.access-1.3.5"' in'"ingest pipelines" and set up my grok pattern there.

The question is:  
Will I still be able to use the dashboard from apache integration?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 29, 2022, 7:33am UTC](https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357/3 "2022-09-29T07:33:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
