# Grok patterns format in logstash

**URL:** https://discuss.elastic.co/t/grok-patterns-format-in-logstash/134908
**Category:** Logstash
**Created:** [June 7, 2018, 7:01am UTC](https://discuss.elastic.co/t/grok-patterns-format-in-logstash/134908 "2018-06-07T07:01:39Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Leorxt](https://avatars.discourse-cdn.com/v4/letter/l/cc9497/32.png) [@Leorxt](https://discuss.elastic.co/u/Leorxt)
#### Post date: [June 7, 2018, 7:01am UTC](https://discuss.elastic.co/t/grok-patterns-format-in-logstash/134908/1 "2018-06-07T07:01:39Z")

</div>

Mostly my patterns working but after "Framework Error in :]" part does not see in the logs.How can print rest of it on logs.  
I tried at the last in patterns, but still does not work  
"%{GREEDYDATA:restofthem}"

My grok Pattern:

```
\[%{TIMESTAMP_ISO8601:ServerTimestamp}\|%{WORD:Log4netHostname}\|%{DATA:ProjectName}\|%{DATA:TestName}\|%{DATA:UserName}\|%{DATA:ClientIP}\|%{DATA:ClientMachineName}\|%{LOGLEVEL:LogLevel}\|%{DATA:method}\|%{DATA:message}\|%{GREEDYDATA:Exception}|%{GREEDYDATA:Exception}\]%{GREEDYDATA:restofthem}

```

My Log:

```
[2018-06-05 13:26:57,641|host1|Appname|TTA|KKM|112.310.104.722|Host23|ERROR|Logger.Log4Net|LogError|Framework Error in :]
WebDriverTimeoutException: Timed out after 5 seconds
 at DefaultWait`1.ThrowTimeoutException(String exceptionMessage, Exception lastException)
 at DefaultWait`1.Until[TResult](Func`2 condition)
```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2018, 7:01am UTC](https://discuss.elastic.co/t/grok-patterns-format-in-logstash/134908/2 "2018-07-05T07:01:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
