Grok filter inquiry

[ibrahimsharaf (Ibrahim Sharaf El Den)]

Hello, how to extract a specific word out of a string without spaces, for example:
'stock_status': 'IN_STOCK','title_ar': u'Happy Wedding Card'

I want to extract the (IN_STOCK), I tried:

grok{
match => [ "message", "'stock_status': '%{GREEDYDATA:stock_value}'," ]
}

But the output is:
"IN_STOCK','title_ar': u'Happy Wedding Card"

How can I add something like a termination character (e.g: comma).

[Kryten]

You could try this pattern in your Grok:

grok{
    match => [ "message", "'stock_status': '.*status\'\:\s\'(?<stock_status>\w*)" ]
}

[ibrahimsharaf (Ibrahim Sharaf El Den)]

@Kryten I tried it, but it doesn't match

[Kryten]

Hmm... It should:

Is the example line you supplied accurate?

[ibrahimsharaf (Ibrahim Sharaf El Den)]

But shouldn't I try the whole pattern instead?

[Kryten]

Do me a favour.. paste the pattern you are trying to use into the message so I can use it too to see what you see..
Why do you want more in the pattern than you need?

[ibrahimsharaf (Ibrahim Sharaf El Den)]

Issue fixed, this one is working now

grok{
    match => [ "message", ".*status\'\:\s\'(?<stock_status>\w*)" ]
}

Thank you @Kryten!