# Grok pattern fails although it is valid

**URL:** https://discuss.elastic.co/t/grok-pattern-fails-although-it-is-valid/135317
**Category:** Logstash
**Created:** [June 11, 2018, 8:57am UTC](https://discuss.elastic.co/t/grok-pattern-fails-although-it-is-valid/135317 "2018-06-11T08:57:45Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![dr01](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dr01/32/8482_2.png) [@dr01](https://discuss.elastic.co/u/dr01)
#### Post date: [June 11, 2018, 9:51am UTC](https://discuss.elastic.co/t/grok-pattern-fails-although-it-is-valid/135317/2 "2018-06-11T09:51:33Z")

</div>

I've even tried to replace the built-in grok patterns with regexes, but with no avail:

```
grok {
	match => { "message" => "\ASummary for local -------------- Succeeded: (?<succeeded>[0-9]+) (?<foo>.*) }
}

```

EDIT: This behaviour is very likely due to the multiline message, see [Error with dissect filter](https://discuss.elastic.co/t/error-with-dissect-filter/135368/6). I'll do some tests and report here my findings.

---

_[View the full topic](https://discuss.elastic.co/t/grok-pattern-fails-although-it-is-valid/135317)._