# Force Line to use perticular grok

**URL:** <https://discuss.elastic.co/t/force-line-to-use-perticular-grok/129974>\
**Category:** Logstash\
**Created:** [April 29, 2018, 7:14pm UTC](https://discuss.elastic.co/t/force-line-to-use-perticular-grok/129974 "2018-04-29T19:14:08Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![atira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atira/32/28699_2.png) [@atira](https://discuss.elastic.co/u/atira)\
**Post date:** [April 29, 2018, 8:46pm UTC](https://discuss.elastic.co/t/force-line-to-use-perticular-grok/129974/4 "2018-04-29T20:46:55Z")

</div>

Please post your custom patterns.

Also, multi grok patterns should be defined in one array in a ["field", "pattern", "field", "pattern", "field" ...] syntax.

```auto
if [doc_type] =~ "Indexer" {
    grok {
        patterns_dir => ["C:/ELK6.2/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns"]
        match => [
           "message", "(?m)%{DatenTime1:DatenTime}%{Unt23:unt1}-\s*%{TypeA:Function_Type}\s*%{TImeS:TImeSpent}%{MorS:Min_or_Sec}\s*%{Objects:Num_Objects}",
           "message", "(?m)%{DatenTime1:DatenTime}%{Unt23:unt1}-\s*%{TypeB:Function_Type}\s*%{TImeS:TImeSpent}%{MorS:Min_or_Sec}\s*%{Objects:Num_Objects}"
           ]
    }
}

```

---

_[View the full topic](https://discuss.elastic.co/t/force-line-to-use-perticular-grok/129974)._