Extract Arabic Word from logs


I am having a log and in that a name name is repeating in arabic.
How to extract that particular name with the help of grok debugger .
Any advice would be highly appreciated.
I want to extract particular name i.e arabic
Eg my log in this pattern

"رشيد الغوانمة" "IP2" "IP1

you can try the dissect filter as well

POST _ingest/pipeline/_simulate
  "pipeline": {
    "processors": [
        "dissect": {
          "field": "input",
          "pattern": "\"%{first}\" \"%{second}\" \"%{third}\""
  "docs": [
    { "_source" : { "input" : "\"رشيد الغوانمة\" \"IP2\" \"IP1\"" }}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.