Extract Arabic Word from logs

[shrikantgulia (Shrikant)]

Hello,

I am having a log and in that a name name is repeating in arabic.
How to extract that particular name with the help of grok debugger .
Any advice would be highly appreciated.
I want to extract particular name i.e arabic
Eg my log in this pattern

"رشيد الغوانمة" "IP2" "IP1

[spinscale (Alexander Reelsen)]

you can try the dissect filter as well

POST _ingest/pipeline/_simulate
{
  "pipeline": {
    "processors": [
      {
        "dissect": {
          "field": "input",
          "pattern": "\"%{first}\" \"%{second}\" \"%{third}\""
        }
      }
    ]
  },
  "docs": [
    { "_source" : { "input" : "\"رشيد الغوانمة\" \"IP2\" \"IP1\"" }}
  ]
}