# Grok plugin and installation steps

**URL:** https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369
**Category:** Logstash
**Created:** [November 28, 2016, 3:17pm UTC](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369 "2016-11-28T15:17:02Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![xsallowed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xsallowed/32/28971_2.png) [@xsallowed](https://discuss.elastic.co/u/xsallowed)
#### Post date: [November 28, 2016, 3:17pm UTC](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369/1 "2016-11-28T15:17:02Z")

</div>

Hi  
I am trying to use grok plugin for combinedapchelogs but I think it is not parsing logs .  
I wanted to ask if all the plugins (assuming grok is a logstash plugin) are installed as a bundle for logstash or you need to install plugins separately and if it is installed as a bundle than what could be the possible issue that my grok pattern is not parsing my logs? if not than is there any script that can allow me to install grok plugins on my server

Regards

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 29, 2016, 9:29pm UTC](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369/2 "2016-11-29T21:29:12Z")

</div>

> I wanted to ask if all the plugins (assuming grok is a logstash plugin)

It is.

> are installed as a bundle for logstash or you need to install plugins separately

Logstash comes with a bunch of plugins, but not all. The grok filter plugin is installed by default so you don't have to install it separately.

> and if it is installed as a bundle than what could be the possible issue that my grok pattern is not parsing my logs?

There are a million things that could go wrong. Without details such as an example input event, your configuration, and the result of a `stdout { codec => rubydebug }` output it's impossible to help.

> if not than is there any script that can allow me to install grok plugins on my server

> **[Working with plugins | Logstash Reference \[8.11\] | Elastic](https://www.elastic.co/guide/en/logstash/current/working-with-plugins.html)**

---

<div class="post-metadata">

### Author: ![xsallowed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xsallowed/32/28971_2.png) [@xsallowed](https://discuss.elastic.co/u/xsallowed)
#### Post date: [November 30, 2016, 8:25am UTC](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369/3 "2016-11-30T08:25:33Z")

</div>

Thanks i just realized that i was trying to parse wrong log format and i was assuming it to be the apache combined log. nonetheless i have fixed that issue.

Thanks for your support

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 28, 2016, 8:26am UTC](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369/4 "2016-12-28T08:26:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
