# Grok pattern failing in ingest pipeline, but working in grok debugger

**URL:** <https://discuss.elastic.co/t/grok-pattern-failing-in-ingest-pipeline-but-working-in-grok-debugger/119701>\
**Category:** Elasticsearch\
**Created:** [February 13, 2018, 7:51pm UTC](https://discuss.elastic.co/t/grok-pattern-failing-in-ingest-pipeline-but-working-in-grok-debugger/119701 "2018-02-13T19:51:20Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ujjain](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ujjain/32/27378_2.png) [@ujjain](https://discuss.elastic.co/u/ujjain)\
**Post date:** [February 13, 2018, 7:51pm UTC](https://discuss.elastic.co/t/grok-pattern-failing-in-ingest-pipeline-but-working-in-grok-debugger/119701/1 "2018-02-13T19:51:21Z")

</div>

My grok pattern works fine in [https://grokdebug.herokuapp.com/](https://grokdebug.herokuapp.com/), but not on the pipeline.

What could be the cause?

> 09-Feb-2018 15:32:35.559 WARNING [monkey.co.uk-startStop-1] org.apache.tomcat.jdbc.pool.ConnectionPool$PoolCleaner. Database connection pool evicter thread interval is set to lower than 1 second.  
> %{MONTHDAY}[/-]%{MONTH}[/-]%{YEAR} %{TIME}%{SPACE}%{WORD:loglevel}%{SPACE}%{GREEDYDATA:log\_text}

> {  
> "catalina.log": {  
> "description": "Pipeline catalina.log",  
> "processors": [  
> {  
> "grok": {  
> "field": "message",  
> "patterns": [  
> "%{MONTHDAY}[/-]%{MONTH}[/-]%{YEAR} %{TIME}%{SPACE}%{WORD:loglevel}%{SPACE}%{GREEDYDATA:log\_text}"  
> ]  
> }  
> },  
> {  
> "grok": {  
> "field": "message",  
> "patterns": [  
> "%{MONTH}%{SPACE}%{MONTHDAY},%{SPACE}%{YEAR}%{SPACE}%{HOUR}:?%{MINUTE}(?::?%{SECOND})%{SPACE}(?:AM|PM)%{SPACE}%{GREEDYDATA:log\_text}"  
> ]  
> }  
> }  
> ]  
> }  
> }

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 13, 2018, 7:51pm UTC](https://discuss.elastic.co/t/grok-pattern-failing-in-ingest-pipeline-but-working-in-grok-debugger/119701/2 "2018-03-13T19:51:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.