# Grok filter request for json/custom pattern

**URL:** <https://discuss.elastic.co/t/grok-filter-request-for-json-custom-pattern/325135>\
**Category:** Logstash\
**Created:** [February 9, 2023, 11:39am UTC](https://discuss.elastic.co/t/grok-filter-request-for-json-custom-pattern/325135 "2023-02-09T11:39:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![a.emrekaraman](https://avatars.discourse-cdn.com/v4/letter/a/bc79bd/32.png) [@a.emrekaraman](https://discuss.elastic.co/u/a.emrekaraman)\
**Post date:** [February 9, 2023, 11:39am UTC](https://discuss.elastic.co/t/grok-filter-request-for-json-custom-pattern/325135/1 "2023-02-09T11:39:16Z")

</div>

Hi Team,

I installed logstash and try to create right grok filter for my logs to parse it. How can I parse below logs ? ( timestamp seems as custom.%{TIMESTAMP\_ISO8601:timestamp}" doesnt work)

09-Feb-2023 09:52:49 tmprdagw01 requestlog: {"url":"https://capi.com/gateway/v1/mailparser/messages/dB6Sm0z05Le9aoW6qV5pFkx4PD6ZImzZ36VBfkzvIhIDH4yYEwKBb2GLLaOnmsQL/parts/Cfa1CMWeTpD6sMi7lqJTDWyBCqveLFm5ElqbeDTFqBK3rSyc?refer\_id=%3Cimage005.png%4001D93BEA.D3378F00%3E","transactionId":"ad25448e-97b6-45c2-8c2a-6a85bbade0","request":{"headers":{"x-forwarded-for":"212.252.139.72%80"},"userInfo":,"requestParams":["refer\_id"],"method":"GET"},"trace":,"requestIp":"2.2.19.72","responseTime":0.048,"isSuccessful":true,"isServerError":false,"responseCode":200,"errorMessage":"","errorDetail":""}

thanks for help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2023, 11:39am UTC](https://discuss.elastic.co/t/grok-filter-request-for-json-custom-pattern/325135/2 "2023-03-09T11:39:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.