# Grok debugger parse problem

**URL:** <https://discuss.elastic.co/t/grok-debugger-parse-problem/270124>\
**Category:** Kibana\
**Created:** [April 14, 2021, 2:11pm UTC](https://discuss.elastic.co/t/grok-debugger-parse-problem/270124 "2021-04-14T14:11:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kenzi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kenzi/32/73885_2.png) [@kenzi](https://discuss.elastic.co/u/kenzi)\
**Post date:** [April 14, 2021, 2:11pm UTC](https://discuss.elastic.co/t/grok-debugger-parse-problem/270124/1 "2021-04-14T14:11:12Z")

</div>

Good day, I have some problem when I am trying to debug Grok pattern via Kibana

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/f/bf61e5327e1d73a62e3618e8cde50116842b2818.png)

For some reasons, it is not matching, but should. Fe from [http://grokdebug.herokuapp.com/](http://grokdebug.herokuapp.com/)  
I can parse it without problems:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/5/45a6efc42a0b72af421eeb5879ca64e87f5aa8e5.png)  
Can you please check it, looks like patterns with "/n" with multiline log not possible to parse them with kibana debugger.

Sample data:

> [2021-04-14 13:29:46,517] [DEBUG] [http-192.168.239.131-8280-4] [com.valuephone.management.extension.ws.SoapLoggingHandler]   
> -------------------------  
> ID: 123123 - OUTBOUND message  
> Request processing time: 23ms  
> HTTP response header names: X-Powered-By  
> \* X-Powered-By: Servlet/3.0; JBossAS-6  
> \<soap:Envelope xmlns:soap="[http://schemas.xmlsoap.org/soap/envelope/](http://schemas.xmlsoap.org/soap/envelope/)"\>soap:Body\<ns2:logoutResponse xmlns:ns2="[http://customer.example.com](http://customer.example.com)"/\>\</soap:Body\>\</soap:Envelope\>  
> -------------------------

Grok:

> %{DATESTAMP:date}] [%{WORD:level}%{SPACE}_] [%{DATA:threadId}] [%{JAVACLASS:className}] []%{SPACE}_ \n-------------------------\n((?:ID|\G): %{NUMBER:message\_id}) - %{WORD:type\_msg} message\n((?:Request processing time|\G): %{NUMBER:processing\_time\_milliseconds:I}ms)\nHTTP response header names: X-Powered-By\n%{GREEDYDATA}

Kibana v7.9.3

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [April 22, 2021, 4:55pm UTC](https://discuss.elastic.co/t/grok-debugger-parse-problem/270124/2 "2021-04-22T16:55:33Z")

</div>

Hello,  
Can you open an issue with your findings in the Kibana repo on Github?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 20, 2021, 4:56pm UTC](https://discuss.elastic.co/t/grok-debugger-parse-problem/270124/3 "2021-05-20T16:56:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.