# Conditional statement one of two patterns
**URL:** https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412
**Category:** Logstash
**Created:** [October 30, 2015, 7:54pm UTC](https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412 "2015-10-30T19:54:00Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@ruchii](https://discuss.elastic.co/u/ruchii)
#### Post date: [October 30, 2015, 7:54pm UTC](https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412/1 "2015-10-30T19:54:00Z")
I am interested in two types of lines in log file as shown below.
What options will be most effective?
20151020 00:08:00 0 0 0 0 0 0 0 100 0 0 0 1615 855 1 1056 0 0.95 1.09 1.06 1 0 264688028 27462076 237225952 0 1023504 20036052 1291728 133592 2254752 3515924 16 12386284 0 12386284 0 0 592 0 0 12201908 0 37 688 0 0 0 0 103788 816
20151020 00:10:00 1 root 20 0 0 S 25728 0 1600 336 136 140 2512 1 0.00 0.00 0 0:00:18 0 0 52 0 10 1 0 0 0 /sbin/init
Thanks in advance.
---
### Author:  [@ruchii](https://discuss.elastic.co/u/ruchii)
#### Post date: [October 30, 2015, 7:55pm UTC](https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412/2 "2015-10-30T19:55:24Z")
A conditional statement? What would that look like?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 30, 2015, 8:23pm UTC](https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412/3 "2015-10-30T20:23:56Z")
If you're using a grok filter you can list two expressions and it'll match either one, but you can use a conditional too, e.g. something similar to this (which matches the first kind of message):
```
if [message] =~ /^\d{8} \d\d:\d\d:\d\d \d \d/ {
...
} else {
...
}
```
You might want to tighten the expression to be more exact but the idea is there.
---
### Author:  [@ruchii](https://discuss.elastic.co/u/ruchii)
#### Post date: [November 1, 2015, 8:33pm UTC](https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412/4 "2015-11-01T20:33:01Z")
great thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:24am UTC](https://discuss.elastic.co/t/conditional-statement-one-of-two-patterns/33412/5 "2017-07-06T05:24:38Z")