# Grok filter if value is void
**URL:** https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234
**Category:** Logstash
**Created:** [May 17, 2016, 3:29pm UTC](https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234 "2016-05-17T15:29:25Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)
#### Post date: [May 17, 2016, 3:29pm UTC](https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234/1 "2016-05-17T15:29:25Z")
Hello Guys,
I have Logstash-2.2.2-1 and I have a filter in grok to add fields, for example:
Input:
```
"2016-04-01 00:00:00" "value1" "value2" 100
```
Grok:
```
%{TIMESTAMP_ISO8601:EventTime} %{WORD:value1} %{WORD:value1} %{NUMBER:number1}
```
But sometimes value 1 or value 2 is void, for example:
input:
`"2016-04-01 00:00:00" "" "value2" 100`
Can I filter when the value is void?, because the filter doesn't work if the value is void
Thank you.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 17, 2016, 5:06pm UTC](https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234/2 "2016-05-17T17:06:48Z")
Try with `%{NOTSPACE}` instead.
---
### Author:  [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)
#### Post date: [May 17, 2016, 5:40pm UTC](https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234/3 "2016-05-17T17:40:19Z")
Its works, thank you!!
But what is NOTSPACE?.
Thank you.
---
### Author:  [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)
#### Post date: [May 17, 2016, 6:02pm UTC](https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234/4 "2016-05-17T18:02:35Z")
I answer myself is \S+ .
Thank you.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:57am UTC](https://discuss.elastic.co/t/grok-filter-if-value-is-void/50234/5 "2017-07-06T04:57:23Z")