# Fields filtered are not added in kibana from grok

**URL:** https://discuss.elastic.co/t/fields-filtered-are-not-added-in-kibana-from-grok/152279
**Category:** Kibana
**Created:** [October 12, 2018, 5:25pm UTC](https://discuss.elastic.co/t/fields-filtered-are-not-added-in-kibana-from-grok/152279 "2018-10-12T17:25:44Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![opswell](https://avatars.discourse-cdn.com/v4/letter/o/a88e57/32.png) [@opswell](https://discuss.elastic.co/u/opswell)
#### Post date: [October 12, 2018, 5:25pm UTC](https://discuss.elastic.co/t/fields-filtered-are-not-added-in-kibana-from-grok/152279/1 "2018-10-12T17:25:45Z")

</div>

hello, i've tried using grok filter for parsing logs like this `2018-10-11 18:40:10,219 [test] [someID: TEST-name] INFO com.test status=401 duration=16`

I've tried grok constructor and came up with this `%{TIMESTAMP_ISO8601:logdate} \[%{DATA:test}\] \[someID: %{DATA:someID}\] ( status= %{NUMBER:status})? ( duration= %{NUMBER:duration})? %{LOGLEVEL:level}\s+(?<raw>(.|\n)*$)`

However with my filter i'm not able to see the fields for status or duration in kibana. Anything missing or wrong in my grok filter? Any tips on how to add 'status=401' or 'duration=16'

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 9, 2018, 5:25pm UTC](https://discuss.elastic.co/t/fields-filtered-are-not-added-in-kibana-from-grok/152279/2 "2018-11-09T17:25:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.