# Grok and special characters in field names

**URL:** <https://discuss.elastic.co/t/grok-and-special-characters-in-field-names/372971>\
**Category:** Elasticsearch\
**Created:** [January 9, 2025, 6:56am UTC](https://discuss.elastic.co/t/grok-and-special-characters-in-field-names/372971 "2025-01-09T06:56:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Snow](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/snow/32/139864_2.png) [@Snow](https://discuss.elastic.co/u/Snow)\
**Post date:** [January 9, 2025, 6:56am UTC](https://discuss.elastic.co/t/grok-and-special-characters-in-field-names/372971/1 "2025-01-09T06:56:07Z")

</div>

ES field names are like "dns.question, dns.question.type,dns.answers"

([DNS Fields | Elastic Common Schema (ECS) Reference [8.16] | Elastic](https://www.elastic.co/guide/en/ecs/current/ecs-dns.html#field-dns-answers))|" ([DNS Fields | Elastic Common Schema (ECS) Reference [8.16] | Elastic](https://www.elastic.co/guide/en/ecs/current/ecs-dns.html))

but while im converting my raw data to ecs fields by "grok" im getting error.

grok doesn't support "." in fields names, since it denotes objects.

i tried escaping special character . by .(in grok expression), still facing parsing issue

also, but all ecs fields are with . only. i am editing this in my kibana console - ingest pipeline. how to fix this issue?