# Django log format| grok things | need help

**URL:** <https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915>\
**Category:** Logstash\
**Created:** [March 31, 2016, 10:25am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915 "2016-03-31T10:25:25Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![qinwenchao](https://avatars.discourse-cdn.com/v4/letter/q/b3f665/32.png) [@qinwenchao](https://discuss.elastic.co/u/qinwenchao)\
**Post date:** [March 31, 2016, 10:25am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915/1 "2016-03-31T10:25:25Z")

</div>

log\_format  
Get: [u'push\_id=', u'vendor=ziyou', u'platform=iPhone', u'app=7', u'height=568', u'width=320', u'version=2.0.3', u'app\_ver=2.0.3', u'phoneType=iPhone', u'systemVer=9.2.1', u'device\_id=0baaa6972b5d41a5900dc76c94b4aba6']

what i need is to extract

1. GET --\> get
2. height --\> height
3. systemVer --\> systemVer

i find Get: [%{NOTSPACE:get}] to extract get  
but i could not extract height and systemVer  
please help me ~~

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 31, 2016, 10:38am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915/2 "2016-03-31T10:38:43Z")

</div>

Can't you get Django to output logs in JSON format? That'd be much easier to parse.

---

<div class="post-metadata">

**Author:** ![qinwenchao](https://avatars.discourse-cdn.com/v4/letter/q/b3f665/32.png) [@qinwenchao](https://discuss.elastic.co/u/qinwenchao)\
**Post date:** [March 31, 2016, 10:47am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915/3 "2016-03-31T10:47:21Z")

</div>

can grok support what i want?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 31, 2016, 10:50am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915/4 "2016-03-31T10:50:34Z")

</div>

Sure it can.

---

<div class="post-metadata">

**Author:** ![qinwenchao](https://avatars.discourse-cdn.com/v4/letter/q/b3f665/32.png) [@qinwenchao](https://discuss.elastic.co/u/qinwenchao)\
**Post date:** [March 31, 2016, 10:51am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915/5 "2016-03-31T10:51:13Z")

</div>

please give me an example~

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:04am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915/6 "2017-07-06T05:04:32Z")

</div>