# Exclude Unicode symbol in Grok pattern

**URL:** <https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540>\
**Category:** Logstash\
**Created:** [August 5, 2021, 1:43pm UTC](https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540 "2021-08-05T13:43:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Avesalon\_Novinsky](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/avesalon_novinsky/32/77273_2.png) [@Avesalon\_Novinsky](https://discuss.elastic.co/u/Avesalon_Novinsky)\
**Post date:** [August 5, 2021, 1:43pm UTC](https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540/1 "2021-08-05T13:43:34Z")

</div>

Hi,  
Is there any option to exclude Unicode symbol from line directly in grok pattern.  
I'm trying to read json data line by line thought AWS Glue "getSourceWithFormat" method which use grok pattern for string parsing.

line in file:

```auto
{"age":12,"test":0,"f":"\u0085 NE 911,Aven","f2":"090","f3":"U019"}

```

if I use: `%{GREEDYDATA:message}` it will return only part of line: `{"age":12,"test":0,"f":"`  
because of `\u0085`(new line) symbol.

How I could skip this symbol directly in my pattern in order to get full message in output?

Thanks.

---

<div class="post-metadata">

**Author:** ![Avesalon\_Novinsky](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/avesalon_novinsky/32/77273_2.png) [@Avesalon\_Novinsky](https://discuss.elastic.co/u/Avesalon_Novinsky)\
**Post date:** [August 16, 2021, 11:59am UTC](https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540/2 "2021-08-16T11:59:55Z")

</div>

found answer here: [regex - Exclude Unicode symbol in Grok pattern - Stack Overflow](https://stackoverflow.com/questions/68799525/exclude-unicode-symbol-in-grok-pattern)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 13, 2021, 12:00pm UTC](https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540/3 "2021-09-13T12:00:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.