# Grok for data

**URL:** https://discuss.elastic.co/t/grok-for-data/309093
**Category:** Logstash
**Created:** [July 7, 2022, 9:28am UTC](https://discuss.elastic.co/t/grok-for-data/309093 "2022-07-07T09:28:19Z")
**Posts on this page:** 1
**Showing post:** 18

<div class="post-metadata">

### Author: ![INS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ins/32/92827_2.png) [@INS](https://discuss.elastic.co/u/INS)
#### Post date: [July 13, 2022, 11:57am UTC](https://discuss.elastic.co/t/grok-for-data/309093/18 "2022-07-13T11:57:35Z")

</div>

@Rios  
one file contains such example data, I need to parse file by file with such date, in the meantime  
it turns out that the grok method cannot be done due to a badly inserted date. as explained above. That's why leandro proposed multicode, which turns out to be a good technique, but at the very end in the file I also have one that I have to completely avoid (# 20220704061503) it is unnecessary pls check [Issue for the multiline input](https://discuss.elastic.co/t/issue-for-the-multiline-input/309459)

```auto
# snapshot,66472243,20220704061503
list_of_count(number 0000080, abort 0, onlist yes)
list_of_count(number 0000100, abort 0, onlist yes)
list_of_count(number 0000605, abort 0, onlist yes)
list_of_count(number 0000605, abort 0, onlist yes)
list_of_count(number 0000750, abort 0, onlist yes)
list_of_count(number 0000905, abort 0, onlist yes)
list_of_count(number 0006063, abort 0, onlist yes)
# 20220704061503

```

---

_[View the full topic](https://discuss.elastic.co/t/grok-for-data/309093)._