# Grok pattern

**URL:** https://discuss.elastic.co/t/grok-pattern/372023
**Category:** Logstash
**Created:** [December 16, 2024, 1:40pm UTC](https://discuss.elastic.co/t/grok-pattern/372023 "2024-12-16T13:40:38Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![inkerinmaa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/inkerinmaa/32/140044_2.png) [@inkerinmaa](https://discuss.elastic.co/u/inkerinmaa)
#### Post date: [December 16, 2024, 1:40pm UTC](https://discuss.elastic.co/t/grok-pattern/372023/1 "2024-12-16T13:40:38Z")

</div>

Hi. I am trying to parse this log message:

```auto
2024-12-09 12:33:53,722 ERROR [Timer-Driven Process Thread-10] o.a.n.processors.standard.LogAttribute LogAttribute[id=9b65f63b-0193-1000-ffff-ffffd5fe4484] logging for flow file StandardFlowFileRecord[uuid=44e26a91-9cd3-4b89-820c-c017b6bb167e,claim=StandardContentClaim [resourceClaim=StandardResourceClaim[id=1733479320437-1, container=default, section=1], offset=67, length=26],offset=0,name=6e40fa80-02b3-4e3a-b0cf-454a8442f7e4,size=26]
FlowFile Properties: {invokehttp.response.body=<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<title>IIS 10.0 Detailed Error - 404.0 - Not found</title> 
<style type="text/css"> 
<!-- 
b, invokehttp.status.code=404, uri=ul/get}

```

But cannnot parse FlowFile Properties object - I need to get invokehttp.response.body, invokehttp.status.code and uri fields. Does anybody have any ideas how this can be done? Thank you in advance.

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [December 16, 2024, 1:51pm UTC](https://discuss.elastic.co/t/grok-pattern/372023/2 "2024-12-16T13:51:06Z")

</div>

> [@inkerinmaa](#):
>
> Does anybody have any ideas how this can be done?

See [this](https://discuss.elastic.co/t/issue-parsing-db2diag-log-using-grok-filter/281957/2) thread.
